Inspecting raw image manifest quay.io/redhat-appstudio-qe/build-e2e-sample-gitlab-basic-auth/component-sample-gitlab-basic-auth@sha256:7094f77616bf139d0ec7c56a1903f2f0f2c0ff662c9e89be316805555c9a2268. Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-sample-gitlab-basic-auth/component-sample-gitlab-basic-auth Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-sample-gitlab-basic-auth/component-sample-gitlab-basic-auth WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations. WARNING: Downloading SBOMs this way does not ensure its authenticity. If you want to ensure a tamper-proof SBOM, download it using 'cosign download attestation '. Found SBOM of media type: text/spdx+json Running TPA scan on amd64 image manifest... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 277k 0 0 100 277k 0 203k 0:00:01 0:00:01 --:--:-- 203k 100 277k 0 0 100 277k 0 117k 0:00:02 0:00:02 --:--:-- 117k 100 277k 0 0 100 277k 0 84559 0:00:03 0:00:03 --:--:-- 84559 100 298k 0 21371 100 277k 6263 83196 0:00:03 0:00:03 --:--:-- 89459 { "scanned" : { "total" : 126, "direct" : 41, "transitive" : 85 }, "providers" : { "rhtpa" : { "status" : { "ok" : false, "name" : "rhtpa", "code" : 503, "message" : "Service Unavailable: {\"error\":\"ReadOnly\",\"message\":\"This instance is in read-only mode. Mutating operations are not available.\"}", "warnings" : { } }, "sources" : { "rhtpa" : { "summary" : { "direct" : 0, "transitive" : 0, "total" : 0, "dependencies" : 0, "critical" : 0, "high" : 0, "medium" : 0, "low" : 0, "unknown" : 0, "remediations" : 0, "recommendations" : 5, "unscanned" : 0 }, "dependencies" : [ { "ref" : "pkg:pypi/markupsafe@3.0.3", "recommendation" : "pkg:pypi/markupsafe@3.0.3?repository_url=https%3A%2F%2Fpackages.redhat.com%2Ftrusted-libraries%2Fpython" }, { "ref" : "pkg:pypi/werkzeug@3.1.8", "recommendation" : "pkg:pypi/werkzeug@3.1.8?repository_url=https%3A%2F%2Fpackages.redhat.com%2Ftrusted-libraries%2Fpython" }, { "ref" : "pkg:pypi/click@8.4.2", "recommendation" : "pkg:pypi/click@8.4.2?repository_url=https%3A%2F%2Fpackages.redhat.com%2Ftrusted-libraries%2Fpython" }, { "ref" : "pkg:pypi/jinja2@3.1.6", "recommendation" : "pkg:pypi/jinja2@3.1.6?repository_url=https%3A%2F%2Fpackages.redhat.com%2Ftrusted-libraries%2Fpython" }, { "ref" : "pkg:pypi/itsdangerous@2.2.0", "recommendation" : "pkg:pypi/itsdangerous@2.2.0?repository_url=https%3A%2F%2Fpackages.redhat.com%2Ftrusted-libraries%2Fpython" } ] } }, "recommendations" : { "trusted-libraries" : { "summary" : { "total" : 5 }, "dependencies" : [ { "ref" : "pkg:pypi/markupsafe@3.0.3", "recommendation" : "pkg:pypi/markupsafe@3.0.3?repository_url=https%3A%2F%2Fpackages.redhat.com%2Ftrusted-libraries%2Fpython" }, { "ref" : "pkg:pypi/werkzeug@3.1.8", "recommendation" : "pkg:pypi/werkzeug@3.1.8?repository_url=https%3A%2F%2Fpackages.redhat.com%2Ftrusted-libraries%2Fpython" }, { "ref" : "pkg:pypi/click@8.4.2", "recommendation" : "pkg:pypi/click@8.4.2?repository_url=https%3A%2F%2Fpackages.redhat.com%2Ftrusted-libraries%2Fpython" }, { "ref" : "pkg:pypi/jinja2@3.1.6", "recommendation" : "pkg:pypi/jinja2@3.1.6?repository_url=https%3A%2F%2Fpackages.redhat.com%2Ftrusted-libraries%2Fpython" }, { "ref" : "pkg:pypi/itsdangerous@2.2.0", "recommendation" : "pkg:pypi/itsdangerous@2.2.0?repository_url=https%3A%2F%2Fpackages.redhat.com%2Ftrusted-libraries%2Fpython" } ] } } } }, "licenses" : [ { "status" : { "ok" : true, "name" : "deps.dev", "code" : 200, "message" : "OK", "warnings" : { } }, "summary" : { "total" : 9, "concluded" : 112, "permissive" : 7, "weakCopyleft" : 0, "strongCopyleft" : 0, "unknown" : 2, "deprecated" : 0, "osiApproved" : 7, "fsfLibre" : 7 }, "packages" : { "pkg:deb/debian/libtirpc-common@1.3.1-1%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libaudit1@1%3A3.0-2" : { "evidence" : [ ] }, "pkg:deb/debian/perl-base@5.32.1-4%2Bdeb11u2" : { "evidence" : [ ] }, "pkg:deb/debian/lsb-base@11.1.0" : { "evidence" : [ ] }, "pkg:deb/debian/libnettle8@3.7.3-1" : { "evidence" : [ ] }, "pkg:deb/debian/sed@4.7-1" : { "evidence" : [ ] }, "pkg:deb/debian/libpcre2-8-0@10.36-2%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libgdbm6@1.19-2" : { "evidence" : [ ] }, "pkg:deb/debian/libp11-kit0@0.23.22-1" : { "evidence" : [ ] }, "pkg:deb/debian/debconf@1.5.77" : { "evidence" : [ ] }, "pkg:pypi/flask@2.1.0" : { "concluded" : { "identifiers" : [ { "id" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/libbz2-1.0@1.0.8-4" : { "evidence" : [ ] }, "pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u3" : { "evidence" : [ ] }, "pkg:deb/debian/libreadline8@8.1-1" : { "evidence" : [ ] }, "pkg:deb/debian/apt@2.2.4" : { "evidence" : [ ] }, "pkg:deb/debian/libgpg-error0@1.38-2" : { "evidence" : [ ] }, "pkg:deb/debian/coreutils@8.32-4%2Bb1" : { "evidence" : [ ] }, "pkg:deb/debian/gpgv@2.2.27-2%2Bdeb11u2" : { "evidence" : [ ] }, "pkg:deb/debian/libapt-pkg6.0@2.2.4" : { "evidence" : [ ] }, "pkg:pypi/itsdangerous@2.2.0" : { "concluded" : { "identifiers" : [ { "id" : "non-standard", "name" : "BSD License", "category" : "UNKNOWN" } ], "expression" : "non-standard", "name" : "BSD License", "category" : "UNKNOWN", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "non-standard", "name" : "BSD License", "category" : "UNKNOWN" } ], "expression" : "non-standard", "name" : "BSD License", "category" : "UNKNOWN", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/liblz4-1@1.9.3-2" : { "evidence" : [ ] }, "pkg:deb/debian/libcap-ng0@0.7.9-2.2%2Bb1" : { "evidence" : [ ] }, "pkg:deb/debian/diffutils@1%3A3.7-5" : { "evidence" : [ ] }, "pkg:deb/debian/grep@3.6-1" : { "evidence" : [ ] }, "pkg:deb/debian/libdb5.3@5.3.28%2Bdfsg1-0.8" : { "evidence" : [ ] }, "pkg:deb/debian/libunistring2@0.9.10-4" : { "evidence" : [ ] }, "pkg:deb/debian/sysvinit-utils@2.96-7%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/base-passwd@3.5.51" : { "evidence" : [ ] }, "pkg:pypi/pip@22.3.1" : { "concluded" : { "identifiers" : [ { "id" : "MIT", "name" : "MIT License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "MIT", "name" : "MIT License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "MIT", "name" : "MIT License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "MIT", "name" : "MIT License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/hostname@3.23" : { "evidence" : [ ] }, "pkg:deb/debian/logsave@1.46.2-2" : { "evidence" : [ ] }, "pkg:deb/debian/libattr1@1%3A2.4.48-6" : { "evidence" : [ ] }, "pkg:deb/debian/libpam0g@1.4.0-9%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libc6@2.31-13%2Bdeb11u5" : { "evidence" : [ ] }, "pkg:deb/debian/libseccomp2@2.5.1-1%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5" : { "evidence" : [ ] }, "pkg:pypi/werkzeug@3.1.8" : { "concluded" : { "identifiers" : [ { "id" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u3" : { "evidence" : [ ] }, "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u3" : { "evidence" : [ ] }, "pkg:deb/debian/libcrypt1@1%3A4.4.18-4" : { "evidence" : [ ] }, "pkg:deb/debian/libsepol1@3.1-1" : { "evidence" : [ ] }, "pkg:deb/debian/adduser@3.118" : { "evidence" : [ ] }, "pkg:deb/debian/libpam-modules-bin@1.4.0-9%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/ca-certificates@20210119" : { "evidence" : [ ] }, "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u2" : { "evidence" : [ ] }, "pkg:deb/debian/libnsl2@1.3.0-2" : { "evidence" : [ ] }, "pkg:deb/debian/readline-common@8.1-1" : { "evidence" : [ ] }, "pkg:pypi/markupsafe@3.0.3" : { "concluded" : { "identifiers" : [ { "id" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/debian-archive-keyring@2021.1.1" : { "evidence" : [ ] }, "pkg:deb/debian/login@1%3A4.8.1-1" : { "evidence" : [ ] }, "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u5" : { "evidence" : [ ] }, "pkg:deb/debian/libncursesw6@6.2%2B20201114-2" : { "evidence" : [ ] }, "pkg:deb/debian/bash@5.1-2%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libblkid1@2.36.1-8%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libaudit-common@1%3A3.0-2" : { "evidence" : [ ] }, "pkg:deb/debian/libstdc%2B%2B6@10.2.1-6" : { "evidence" : [ ] }, "pkg:deb/debian/base-files@11.1%2Bdeb11u5" : { "evidence" : [ ] }, "pkg:deb/debian/libcom-err2@1.46.2-2" : { "evidence" : [ ] }, "pkg:deb/debian/zlib1g@1%3A1.2.11.dfsg-2%2Bdeb11u2" : { "evidence" : [ ] }, "pkg:deb/debian/libdebconfclient0@0.260" : { "evidence" : [ ] }, "pkg:deb/debian/dpkg@1.20.12" : { "evidence" : [ ] }, "pkg:deb/debian/mount@2.36.1-8%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libuuid1@2.36.1-8%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libsmartcols1@2.36.1-8%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libpam-modules@1.4.0-9%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:pypi/wheel@0.38.4" : { "concluded" : { "identifiers" : [ { "id" : "MIT", "name" : "MIT License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "MIT", "name" : "MIT License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "MIT", "name" : "MIT License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "MIT", "name" : "MIT License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/libidn2-0@2.3.0-5" : { "evidence" : [ ] }, "pkg:deb/debian/liblzma5@5.2.5-2.1~deb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libtirpc3@1.3.1-1%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u3" : { "evidence" : [ ] }, "pkg:deb/debian/e2fsprogs@1.46.2-2" : { "evidence" : [ ] }, "pkg:deb/debian/mawk@1.3.4.20200120-2" : { "evidence" : [ ] }, "pkg:deb/debian/libhogweed6@3.7.3-1" : { "evidence" : [ ] }, "pkg:deb/debian/libselinux1@3.1-3" : { "evidence" : [ ] }, "pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u3" : { "evidence" : [ ] }, "pkg:deb/debian/libss2@1.46.2-2" : { "evidence" : [ ] }, "pkg:deb/debian/libzstd1@1.4.8%2Bdfsg-2.1" : { "evidence" : [ ] }, "pkg:deb/debian/libgcc-s1@10.2.1-6" : { "evidence" : [ ] }, "pkg:deb/debian/util-linux@2.36.1-8%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/gzip@1.10-4%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libext2fs2@1.46.2-2" : { "evidence" : [ ] }, "pkg:deb/debian/findutils@4.8.0-1" : { "evidence" : [ ] }, "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/init-system-helpers@1.60" : { "evidence" : [ ] }, "pkg:deb/debian/dash@0.5.11%2Bgit20200708%2Bdd9ef66-5" : { "evidence" : [ ] }, "pkg:deb/debian/passwd@1%3A4.8.1-1" : { "evidence" : [ ] }, "pkg:pypi/jinja2@3.1.6" : { "concluded" : { "identifiers" : [ { "id" : "non-standard", "name" : "BSD License", "category" : "UNKNOWN" } ], "expression" : "non-standard", "name" : "BSD License", "category" : "UNKNOWN", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "non-standard", "name" : "BSD License", "category" : "UNKNOWN" } ], "expression" : "non-standard", "name" : "BSD License", "category" : "UNKNOWN", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/libsqlite3-0@3.34.1-3" : { "evidence" : [ ] }, "pkg:deb/debian/libgmp10@2%3A6.2.1%2Bdfsg-1%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libxxhash0@0.8.0-2" : { "evidence" : [ ] }, "pkg:deb/debian/libpam-runtime@1.4.0-9%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libkeyutils1@1.6.1-2" : { "evidence" : [ ] }, "pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u3" : { "evidence" : [ ] }, "pkg:deb/debian/libsemanage-common@3.1-1" : { "evidence" : [ ] }, "pkg:deb/debian/libtinfo6@6.2%2B20201114-2" : { "evidence" : [ ] }, "pkg:deb/debian/libtasn1-6@4.16.0-2" : { "evidence" : [ ] }, "pkg:deb/debian/tar@1.34%2Bdfsg-1" : { "evidence" : [ ] }, "pkg:deb/debian/tzdata@2021a-1%2Bdeb11u8" : { "evidence" : [ ] }, "pkg:pypi/click@8.4.2" : { "concluded" : { "identifiers" : [ { "id" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:oci/component-sample-gitlab-basic-auth@sha256%3A7094f77616bf139d0ec7c56a1903f2f0f2c0ff662c9e89be316805555c9a2268" : { "evidence" : [ ] }, "pkg:deb/debian/gcc-10-base@10.2.1-6" : { "evidence" : [ ] }, "pkg:deb/debian/libgcrypt20@1.8.7-6" : { "evidence" : [ ] }, "pkg:deb/debian/libsemanage1@3.1-1%2Bb2" : { "evidence" : [ ] }, "pkg:deb/debian/libmount1@2.36.1-8%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libacl1@2.2.53-10" : { "evidence" : [ ] }, "pkg:deb/debian/libpcre3@2%3A8.39-13" : { "evidence" : [ ] }, "pkg:pypi/setuptools@65.5.0" : { "concluded" : { "identifiers" : [ { "id" : "MIT", "name" : "MIT License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "MIT", "name" : "MIT License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "MIT", "name" : "MIT License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "MIT", "name" : "MIT License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/debianutils@4.11.2" : { "evidence" : [ ] }, "pkg:deb/debian/bsdutils@1%3A2.36.1-8%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libffi7@3.3-6" : { "evidence" : [ ] }, "pkg:deb/debian/ncurses-bin@6.2%2B20201114-2" : { "evidence" : [ ] } } } ] }