Inspecting raw image manifest quay.io/redhat-appstudio-qe/forgejo-rep-8bxg/test-comp-pac-forgejo-pq3kjw@sha256:36741291ef6f7a17e47bd83d584a7ccc4278c645588578d847ea14ff914b5362.
Selecting auth
Using token for quay.io/redhat-appstudio-qe/forgejo-rep-8bxg/test-comp-pac-forgejo-pq3kjw
Selecting auth
Using token for quay.io/redhat-appstudio-qe/forgejo-rep-8bxg/test-comp-pac-forgejo-pq3kjw
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Downloading SBOMs this way does not ensure its authenticity. If you want to ensure a tamper-proof SBOM, download it using 'cosign download attestation <image uri>'.
Found SBOM of media type: text/spdx+json
Running TPA scan on amd64 image manifest...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100  360k    0     0  100  360k      0   298k  0:00:01  0:00:01 --:--:--  298k
100  372k    0 12307  100  360k   8834   259k  0:00:01  0:00:01 --:--:--  267k
{
  "scanned" : {
    "total" : 166,
    "direct" : 39,
    "transitive" : 127
  },
  "providers" : {
    "rhtpa" : {
      "status" : {
        "ok" : false,
        "name" : "rhtpa",
        "code" : 504,
        "message" : "Request timed out",
        "warnings" : { }
      },
      "sources" : { },
      "recommendations" : { }
    }
  },
  "licenses" : [ {
    "status" : {
      "ok" : false,
      "name" : "deps.dev",
      "code" : 400,
      "message" : "Bad Request: invalid purl \"pkg:maven/io.github.stuartwdouglas.hacbstest.Main/hacbs-test\" at request index 22",
      "warnings" : { }
    },
    "summary" : {
      "total" : 1,
      "concluded" : 121,
      "permissive" : 1,
      "weakCopyleft" : 0,
      "strongCopyleft" : 0,
      "unknown" : 0,
      "deprecated" : 0,
      "osiApproved" : 1,
      "fsfLibre" : 1
    },
    "packages" : {
      "pkg:rpm/redhat/filesystem@3.8-6.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/expat@2.5.0-2.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libblkid@2.32.1-48.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/cyrus-sasl-lib@2.1.27-6.el8_5" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/rootfiles@8.1-22.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/keyutils-libs@1.5.10-9.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libgcc@8.5.0-28.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/librhsm@0.0.3-5.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libcap-ng@0.7.11-1.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/tzdata-java@2026b-1.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/systemd-libs@239-82.el8_10.17" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/pcre@8.42-6.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libuuid@2.32.1-48.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libverto@0.3.2-2.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/glibc-common@2.28-251.el8_10.40" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/krb5-libs@1.18.2-34.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libsolv@0.7.20-7.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/bash@4.4.20-6.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libffi@3.1-24.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/setup@2.12.2-9.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/readline@7.0-10.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libdnf@0.63.0-21.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libxcrypt@4.1.1-6.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/zlib@1.2.11-25.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/mpfr@3.1.6-1.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/publicsuffix-list-dafsa@20180723-1.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libsemanage@2.9-12.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gdbm@1.18-2.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libassuan@2.5.1-3.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libxml2@2.9.7-21.el8_10.6" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libgpg-error@1.31-1.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/pcre2@10.32-3.el8_6" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/lua-libs@5.3.4-12.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libdb-utils@5.3.28-42.el8_4" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gobject-introspection@1.56.1-1.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/tar@1.30-11.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/openldap@2.4.46-21.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-pip-wheel@9.0.3-24.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gawk@4.2.1-4.el8" : {
        "evidence" : [ ]
      },
      "pkg:github/beatlabs/delete-old-branches-action@v0.0.10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/info@6.5-7.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/python3-setuptools-wheel@39.2.0-9.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gnutls@3.6.16-8.el8_10.6" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/p11-kit@0.23.22-2.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/basesystem@11-5.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/dbus-libs@1.12.8-28.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gpgme@1.13.1-12.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libzstd@1.4.4-1.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libtasn1@4.13-6.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/librepo@1.14.2-5.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/javapackages-filesystem@5.3.0-1.module%2Bel8%2B2447%2B6f56d9a6" : {
        "evidence" : [ ]
      },
      "pkg:oci/openjdk-17-runtime@sha256%3A481a3d9ce2017d7a0757a11b3b1c27ae8f8eb0f549cf8a959045aa46316adc3d" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/nettle@3.4.1-7.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/sed@4.5-5.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libpeas@1.22.0-6.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gpg-pubkey@fd431d51-4ae0493b" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libselinux@2.9-11.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/shadow-utils@4.6-23.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gmp@6.1.2-11.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/ncurses-libs@6.1-10.20180224.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/lz4-libs@1.8.3-5.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libcap@2.48-6.el8_10.1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/json-glib@1.4.4-1.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/platform-python-setuptools@39.2.0-9.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/java-17-openjdk-headless@17.0.20.0.8-1.1.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libusbx@1.0.30-1.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/npth@1.5-4.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/rpm-libs@4.14.3-32.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/ncurses-base@6.1-10.20180224.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gdbm-libs@1.18-2.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/ca-certificates@2025.2.80_v9.0.304-80.2.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libmount@2.32.1-48.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libsepol@2.9-3.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/file-libs@5.33-27.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/nss-sysinit@3.112.0-8.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libssh-config@0.9.6-16.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libpsl@0.20.2-6.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/crypto-policies@20230731-1.git3177e06.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/glibc@2.28-251.el8_10.40" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.40" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/audit-libs@3.1.2-1.el8_10.1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/avahi-libs@0.7-27.el8_10.1" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/chkconfig@1.19.2-1.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libksba@1.3.5-9.el8_7" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libunistring@0.9.9-3.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libnsl2@1.2.0-2.20180605git4a062cf.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libcurl@7.61.1-34.el8_10.11" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/grep@3.1-6.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libsmartcols@2.32.1-48.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/rpm@4.14.3-32.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/popt@1.18-1.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/langpacks-en@1.0-12.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/brotli@1.0.6-4.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/openssl-libs@1.1.1k-17.el8_6" : {
        "evidence" : [ ]
      },
      "pkg:github/actions/checkout@v4" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libidn2@2.2.0-1.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libdb@5.3.28-42.el8_4" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libarchive@3.3.3-7.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/gpg-pubkey@d4082792-5b32db75" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/p11-kit-trust@0.23.22-2.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libtirpc@1.1.4-12.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/crypto-policies-scripts@20230731-1.git3177e06.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libmodulemd@2.13.0-1.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/redhat-release@8.10-0.3.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libstdc%2B%2B@8.5.0-28.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libyaml@0.1.7-5.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/elfutils-libelf@0.190-2.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libacl@2.4.0-1.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/curl@7.61.1-34.el8_10.11" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/nss@3.112.0-8.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/libssh@0.9.6-16.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:pypi/setuptools@39.2.0" : {
        "concluded" : {
          "identifiers" : [ {
            "id" : "MIT",
            "name" : "MIT License",
            "isDeprecated" : false,
            "isOsiApproved" : true,
            "isFsfLibre" : true,
            "category" : "PERMISSIVE"
          } ],
          "expression" : "MIT",
          "name" : "MIT License",
          "category" : "PERMISSIVE",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        },
        "evidence" : [ {
          "identifiers" : [ {
            "id" : "MIT",
            "name" : "MIT License",
            "isDeprecated" : false,
            "isOsiApproved" : true,
            "isFsfLibre" : true,
            "category" : "PERMISSIVE"
          } ],
          "expression" : "MIT",
          "name" : "MIT License",
          "category" : "PERMISSIVE",
          "source" : "deps.dev",
          "sourceUrl" : "https://api.deps.dev"
        } ]
      },
      "pkg:rpm/redhat/libsigsegv@2.11-5.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/json-c@0.13.1-3.el8" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/glib2@2.56.4-170.el8_10" : {
        "evidence" : [ ]
      },
      "pkg:rpm/redhat/findutils@4.6.0-24.el8_10" : {
        "evidence" : [ ]
      }
    }
  } ]
}