{
  "spdxVersion": "SPDX-2.3",
  "dataLicense": "CC0-1.0",
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "build/payload/haproxy-3.3.16-alpine-tpio.1",
  "documentNamespace": "http://trivy.dev/container_image/build/payload/haproxy-3.3.16-alpine-tpio.1-197fe605-4b7a-49d2-a089-0300b253f312",
  "creationInfo": {
    "creators": [
      "Organization: aquasecurity",
      "Tool: trivy-0.75.0"
    ],
    "created": "2026-10-09T13:15:57Z"
  },
  "packages": [
    {
      "name": "build/payload/haproxy-3.3.16-alpine-tpio.1",
      "SPDXID": "SPDXRef-ContainerImage-9dccd363b8dabb78",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "primaryPackagePurpose": "CONTAINER",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:17f07005db95b07172347d9c797ed1dfc1c5bb244636b2b731f53776ccad4b47"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:505596b57fdaf0b23227e189045a1314d5e7bf741b9b807404da223d56704ce4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:99ba3de7e8bb9c4b17bb3a66cac161c3c7562031c2f03811f4076c0a1879b765"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:a48f34bed8d95fc573cd2c695f1811255d6078d10f4c962829a973583e3319cf"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:ed3784415ed121074254ead322e3afa752ed30c0d5cd37146e59659a01e379a1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "ImageID: sha256:c8b6e1aab3d83e797640be71b6a99627e7fdfe797802a9ef04d9f396f5f1d748"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.buildah.version: 1.39.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.claim: package-fixable CRITICAL/HIGH cleared vs upstream digest; not FIPS/FedRAMP"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.ladder: a+c"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.replaces: ecr-public.aws.com/docker/library/haproxy:3.3.10-alpine@sha256:29c775f541ba6364ac95de998a8d3d16eb4882470c4fd7bbe8de8315edfdd883"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.upstream: ecr-public.aws.com/docker/library/haproxy:3.3.16-alpine@sha256:96088e311f0f8c13d0fa197255d47fedb4c35090049319187b0038b848d86f82"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "Labels:org.opencontainers.image.version: 3.3.16-alpine"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "SchemaVersion: 2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "Size: 49203712"
        }
      ]
    },
    {
      "name": ".haproxy-rundeps",
      "SPDXID": "SPDXRef-Package-724f04db6180fb4c",
      "versionInfo": "20260929.003331",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "a67f496c55e788781a38346458592928ba34e3b3"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/.haproxy-rundeps@20260929.003331?arch=noarch\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:ed3784415ed121074254ead322e3afa752ed30c0d5cd37146e59659a01e379a1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:ffc57ba144fa91d4528e49079dabcdb650db38d86b626b5a6272ea74a884770a"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: .haproxy-rundeps@20260929.003331"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "alpine-baselayout",
      "SPDXID": "SPDXRef-Package-78f2352835e07de4",
      "versionInfo": "3.7.2-r1",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "f0fcfdc2f4da058af6473bc45c4eab62916225b2"
        }
      ],
      "sourceInfo": "built package from: alpine-baselayout 3.7.2-r1",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/alpine-baselayout@3.7.2-r1?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: alpine-baselayout@3.7.2-r1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "alpine-baselayout-data",
      "SPDXID": "SPDXRef-Package-b7ec7684e4f488ac",
      "versionInfo": "3.7.2-r1",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "c6f9bded17d844b6f1b0bb5766d2c35c0d5c8508"
        }
      ],
      "sourceInfo": "built package from: alpine-baselayout 3.7.2-r1",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/alpine-baselayout-data@3.7.2-r1?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: alpine-baselayout-data@3.7.2-r1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "alpine-keys",
      "SPDXID": "SPDXRef-Package-f05d9b389bcd3e0d",
      "versionInfo": "2.6-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "d8d6b80e53c059a77e4915da78ba964f3ffea240"
        }
      ],
      "sourceInfo": "built package from: alpine-keys 2.6-r0",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/alpine-keys@2.6-r0?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: alpine-keys@2.6-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "alpine-release",
      "SPDXID": "SPDXRef-Package-e4b3b2f4eefb7828",
      "versionInfo": "3.24.2-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "6fd1be469ca235e9c62f1b73fa3e5bffafdeb6b5"
        }
      ],
      "sourceInfo": "built package from: alpine-base 3.24.2-r0",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/alpine-release@3.24.2-r0?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: alpine-release@3.24.2-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "apk-tools",
      "SPDXID": "SPDXRef-Package-435395930dabff21",
      "versionInfo": "3.0.8-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "786130a8f2d3ac69fc316118757b7e8151b8b8c3"
        }
      ],
      "sourceInfo": "built package from: apk-tools 3.0.8-r0",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/apk-tools@3.0.8-r0?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: apk-tools@3.0.8-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "busybox",
      "SPDXID": "SPDXRef-Package-bb5964eb5c21375a",
      "versionInfo": "1.37.0-r31",
      "supplier": "Organization: Sören Tempel \u003csoeren+alpine@soeren-tempel.net\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "b5405ebc02f7dd8be95b6265c54b243d5456ab8f"
        }
      ],
      "sourceInfo": "built package from: busybox 1.37.0-r31",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: busybox@1.37.0-r31"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "busybox-binsh",
      "SPDXID": "SPDXRef-Package-87cc7844e330f719",
      "versionInfo": "1.37.0-r31",
      "supplier": "Organization: Sören Tempel \u003csoeren+alpine@soeren-tempel.net\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "5cbd14acc6f1804c5bac6c77dc2c492f010b0fc7"
        }
      ],
      "sourceInfo": "built package from: busybox 1.37.0-r31",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: busybox-binsh@1.37.0-r31"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "ca-certificates",
      "SPDXID": "SPDXRef-Package-83b9d0cb01896062",
      "versionInfo": "20260909-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "5fca7df9ec42a2490de8b105f8d44937e83fe2e2"
        }
      ],
      "sourceInfo": "built package from: ca-certificates 20260909-r0",
      "licenseConcluded": "MPL-2.0 AND MIT",
      "licenseDeclared": "MPL-2.0 AND MIT",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/ca-certificates@20260909-r0?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:505596b57fdaf0b23227e189045a1314d5e7bf741b9b807404da223d56704ce4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:9b53ea747fbf5eed40b806c096e303f884feba303aebfeb9458e27b34966dd48"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: ca-certificates@20260909-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "ca-certificates-bundle",
      "SPDXID": "SPDXRef-Package-d0a2dc554881dfab",
      "versionInfo": "20260909-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "791237cee877988893a354b5f6c9c44f35d4edb9"
        }
      ],
      "sourceInfo": "built package from: ca-certificates 20260909-r0",
      "licenseConcluded": "MPL-2.0 AND MIT",
      "licenseDeclared": "MPL-2.0 AND MIT",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/ca-certificates-bundle@20260909-r0?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: ca-certificates-bundle@20260909-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "libapk",
      "SPDXID": "SPDXRef-Package-33f7f19a4544f9da",
      "versionInfo": "3.0.8-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "b93ce9573c1d0db3eea7ce32841ad0857abc4a54"
        }
      ],
      "sourceInfo": "built package from: apk-tools 3.0.8-r0",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/libapk@3.0.8-r0?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: libapk@3.0.8-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "libcrypto3",
      "SPDXID": "SPDXRef-Package-825836df5a7f891b",
      "versionInfo": "3.5.9-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "1c0dee9734cf22fc97cdd181913bbd710e6dfb08"
        }
      ],
      "sourceInfo": "built package from: openssl 3.5.9-r0",
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/libcrypto3@3.5.9-r0?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:99ba3de7e8bb9c4b17bb3a66cac161c3c7562031c2f03811f4076c0a1879b765"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:a58e8f0a41a283f43c69def986b24933cfa645c264bfaad01ee56b8408daf749"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: libcrypto3@3.5.9-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "libncursesw",
      "SPDXID": "SPDXRef-Package-a98d281e71363679",
      "versionInfo": "6.6_p20260516-r0",
      "supplier": "Organization: Milan P. Stanić \u003cmps@arvanta.net\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "9f318e6e324d6827274829194cf6ac6afbaded12"
        }
      ],
      "sourceInfo": "built package from: ncurses 6.6_p20260516-r0",
      "licenseConcluded": "LicenseRef-c848d14b78731407",
      "licenseDeclared": "LicenseRef-c848d14b78731407",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/libncursesw@6.6_p20260516-r0?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:505596b57fdaf0b23227e189045a1314d5e7bf741b9b807404da223d56704ce4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:9b53ea747fbf5eed40b806c096e303f884feba303aebfeb9458e27b34966dd48"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: libncursesw@6.6_p20260516-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "libssl3",
      "SPDXID": "SPDXRef-Package-fff7bbf4fad5c969",
      "versionInfo": "3.5.9-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "20c4c90ea9d20a9dd3a04deadf2c6c4f64233643"
        }
      ],
      "sourceInfo": "built package from: openssl 3.5.9-r0",
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/libssl3@3.5.9-r0?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:99ba3de7e8bb9c4b17bb3a66cac161c3c7562031c2f03811f4076c0a1879b765"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:a58e8f0a41a283f43c69def986b24933cfa645c264bfaad01ee56b8408daf749"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: libssl3@3.5.9-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "lua5.4-libs",
      "SPDXID": "SPDXRef-Package-32d1d3a341c5ca8b",
      "versionInfo": "5.4.8-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "701bd1e29ab892e1c139f1faba612fecb46a3188"
        }
      ],
      "sourceInfo": "built package from: lua5.4 5.4.8-r0",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/lua5.4-libs@5.4.8-r0?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:ed3784415ed121074254ead322e3afa752ed30c0d5cd37146e59659a01e379a1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:ffc57ba144fa91d4528e49079dabcdb650db38d86b626b5a6272ea74a884770a"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: lua5.4-libs@5.4.8-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "musl",
      "SPDXID": "SPDXRef-Package-9fdcccde8dddaa78",
      "versionInfo": "1.2.6-r2",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0f7e5827e4e1a73631beda27b78431a8ba240e05"
        }
      ],
      "sourceInfo": "built package from: musl 1.2.6-r2",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/musl@1.2.6-r2?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: musl@1.2.6-r2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "musl-utils",
      "SPDXID": "SPDXRef-Package-e09d7673f680ddcf",
      "versionInfo": "1.2.6-r2",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "75ada3c48d63ec5d87c42fdf934a3fdd11298dc5"
        }
      ],
      "sourceInfo": "built package from: musl 1.2.6-r2",
      "licenseConcluded": "MIT AND BSD-2-Clause AND GPL-2.0-or-later",
      "licenseDeclared": "MIT AND BSD-2-Clause AND GPL-2.0-or-later",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/musl-utils@1.2.6-r2?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: musl-utils@1.2.6-r2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "ncurses-terminfo-base",
      "SPDXID": "SPDXRef-Package-a2fabfb1822abf8d",
      "versionInfo": "6.6_p20260516-r0",
      "supplier": "Organization: Milan P. Stanić \u003cmps@arvanta.net\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "9d551d828e9c8ee52c5801c1d6046828ebf15752"
        }
      ],
      "sourceInfo": "built package from: ncurses 6.6_p20260516-r0",
      "licenseConcluded": "LicenseRef-c848d14b78731407",
      "licenseDeclared": "LicenseRef-c848d14b78731407",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/ncurses-terminfo-base@6.6_p20260516-r0?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:505596b57fdaf0b23227e189045a1314d5e7bf741b9b807404da223d56704ce4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:9b53ea747fbf5eed40b806c096e303f884feba303aebfeb9458e27b34966dd48"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: ncurses-terminfo-base@6.6_p20260516-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "pcre2",
      "SPDXID": "SPDXRef-Package-e6e0c2c21da2eaa6",
      "versionInfo": "10.49-r0",
      "supplier": "Organization: Jakub Jirutka \u003cjakub@jirutka.cz\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "ec992b00baf71bba1dd9e2179613f9233af35c8d"
        }
      ],
      "sourceInfo": "built package from: pcre2 10.49-r0",
      "licenseConcluded": "BSD-3-Clause",
      "licenseDeclared": "BSD-3-Clause",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/pcre2@10.49-r0?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:99ba3de7e8bb9c4b17bb3a66cac161c3c7562031c2f03811f4076c0a1879b765"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:a58e8f0a41a283f43c69def986b24933cfa645c264bfaad01ee56b8408daf749"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: pcre2@10.49-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "readline",
      "SPDXID": "SPDXRef-Package-a55473160021581d",
      "versionInfo": "8.3.3-r1",
      "supplier": "Organization: qaqland \u003cqaq@qaq.land\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "945b16e378bc00e44d89d4de8124bba7647fdf4d"
        }
      ],
      "sourceInfo": "built package from: readline 8.3.3-r1",
      "licenseConcluded": "GPL-3.0-or-later",
      "licenseDeclared": "GPL-3.0-or-later",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/readline@8.3.3-r1?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:505596b57fdaf0b23227e189045a1314d5e7bf741b9b807404da223d56704ce4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:9b53ea747fbf5eed40b806c096e303f884feba303aebfeb9458e27b34966dd48"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: readline@8.3.3-r1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "scanelf",
      "SPDXID": "SPDXRef-Package-1278ad18ab2ea71e",
      "versionInfo": "1.3.9-r1",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "013f903d0ba219673aebbdd04f74bb5ed82b01f0"
        }
      ],
      "sourceInfo": "built package from: pax-utils 1.3.9-r1",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/scanelf@1.3.9-r1?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: scanelf@1.3.9-r1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "socat",
      "SPDXID": "SPDXRef-Package-c66d655d794aad84",
      "versionInfo": "1.8.1.3-r0",
      "supplier": "Organization: mio \u003cmiyopan@e.email\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "fd8748918ae73006543fef797566b5a7ef964f94"
        }
      ],
      "sourceInfo": "built package from: socat 1.8.1.3-r0",
      "licenseConcluded": "LicenseRef-13318a4e1cc6817a",
      "licenseDeclared": "LicenseRef-13318a4e1cc6817a",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/socat@1.8.1.3-r0?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:505596b57fdaf0b23227e189045a1314d5e7bf741b9b807404da223d56704ce4"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:9b53ea747fbf5eed40b806c096e303f884feba303aebfeb9458e27b34966dd48"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: socat@1.8.1.3-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "ssl_client",
      "SPDXID": "SPDXRef-Package-7a2b3f1ff7853418",
      "versionInfo": "1.37.0-r31",
      "supplier": "Organization: Sören Tempel \u003csoeren+alpine@soeren-tempel.net\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "c220f4a5125a313af733e98def94132bb1e9d40d"
        }
      ],
      "sourceInfo": "built package from: busybox 1.37.0-r31",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:74d97c428c51a828f9051a7a40a53ff1fc99e54fc30323ce36760701b0b7f711"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:4fdc56a1d49fc749f4b6d53e468a046cd1a019e7b108b1e5c954a43548e3997d"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: ssl_client@1.37.0-r31"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "zlib",
      "SPDXID": "SPDXRef-Package-1ee4ee444ed922e0",
      "versionInfo": "1.3.2-r1",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "4f525c8cc204f84b8b4ca40db3be389958f056c6"
        }
      ],
      "sourceInfo": "built package from: zlib 1.3.2-r1",
      "licenseConcluded": "Zlib",
      "licenseDeclared": "Zlib",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/zlib@1.3.2-r1?arch=x86_64\u0026distro=3.24.2"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:99ba3de7e8bb9c4b17bb3a66cac161c3c7562031c2f03811f4076c0a1879b765"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:a58e8f0a41a283f43c69def986b24933cfa645c264bfaad01ee56b8408daf749"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgID: zlib@1.3.2-r1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "alpine",
      "SPDXID": "SPDXRef-OperatingSystem-feb0d1d5bf63a911",
      "versionInfo": "3.24.2",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "primaryPackagePurpose": "OPERATING-SYSTEM",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "Class: os-pkgs"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:57Z",
          "annotationType": "OTHER",
          "comment": "Type: alpine"
        }
      ]
    }
  ],
  "hasExtractedLicensingInfos": [
    {
      "licenseId": "LicenseRef-13318a4e1cc6817a",
      "extractedText": "This component is licensed under \"GPL-2.0-only WITH OpenSSL-Exception\"",
      "name": "GPL-2.0-only WITH OpenSSL-Exception"
    },
    {
      "licenseId": "LicenseRef-c848d14b78731407",
      "extractedText": "This component is licensed under \"X-11\"",
      "name": "X-11"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-ContainerImage-9dccd363b8dabb78",
      "relatedSpdxElement": "SPDXRef-OperatingSystem-feb0d1d5bf63a911",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relatedSpdxElement": "SPDXRef-ContainerImage-9dccd363b8dabb78",
      "relationshipType": "DESCRIBES"
    },
    {
      "spdxElementId": "SPDXRef-OperatingSystem-feb0d1d5bf63a911",
      "relatedSpdxElement": "SPDXRef-Package-435395930dabff21",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-OperatingSystem-feb0d1d5bf63a911",
      "relatedSpdxElement": "SPDXRef-Package-724f04db6180fb4c",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-OperatingSystem-feb0d1d5bf63a911",
      "relatedSpdxElement": "SPDXRef-Package-78f2352835e07de4",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-OperatingSystem-feb0d1d5bf63a911",
      "relatedSpdxElement": "SPDXRef-Package-7a2b3f1ff7853418",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-OperatingSystem-feb0d1d5bf63a911",
      "relatedSpdxElement": "SPDXRef-Package-83b9d0cb01896062",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-OperatingSystem-feb0d1d5bf63a911",
      "relatedSpdxElement": "SPDXRef-Package-c66d655d794aad84",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-OperatingSystem-feb0d1d5bf63a911",
      "relatedSpdxElement": "SPDXRef-Package-e09d7673f680ddcf",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-OperatingSystem-feb0d1d5bf63a911",
      "relatedSpdxElement": "SPDXRef-Package-e4b3b2f4eefb7828",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-Package-1278ad18ab2ea71e",
      "relatedSpdxElement": "SPDXRef-Package-9fdcccde8dddaa78",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-1ee4ee444ed922e0",
      "relatedSpdxElement": "SPDXRef-Package-9fdcccde8dddaa78",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-32d1d3a341c5ca8b",
      "relatedSpdxElement": "SPDXRef-Package-9fdcccde8dddaa78",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-33f7f19a4544f9da",
      "relatedSpdxElement": "SPDXRef-Package-1ee4ee444ed922e0",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-33f7f19a4544f9da",
      "relatedSpdxElement": "SPDXRef-Package-825836df5a7f891b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-33f7f19a4544f9da",
      "relatedSpdxElement": "SPDXRef-Package-9fdcccde8dddaa78",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-33f7f19a4544f9da",
      "relatedSpdxElement": "SPDXRef-Package-fff7bbf4fad5c969",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-435395930dabff21",
      "relatedSpdxElement": "SPDXRef-Package-1ee4ee444ed922e0",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-435395930dabff21",
      "relatedSpdxElement": "SPDXRef-Package-33f7f19a4544f9da",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-435395930dabff21",
      "relatedSpdxElement": "SPDXRef-Package-825836df5a7f891b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-435395930dabff21",
      "relatedSpdxElement": "SPDXRef-Package-9fdcccde8dddaa78",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-435395930dabff21",
      "relatedSpdxElement": "SPDXRef-Package-d0a2dc554881dfab",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-724f04db6180fb4c",
      "relatedSpdxElement": "SPDXRef-Package-32d1d3a341c5ca8b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-724f04db6180fb4c",
      "relatedSpdxElement": "SPDXRef-Package-825836df5a7f891b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-724f04db6180fb4c",
      "relatedSpdxElement": "SPDXRef-Package-9fdcccde8dddaa78",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-724f04db6180fb4c",
      "relatedSpdxElement": "SPDXRef-Package-e6e0c2c21da2eaa6",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-724f04db6180fb4c",
      "relatedSpdxElement": "SPDXRef-Package-fff7bbf4fad5c969",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-78f2352835e07de4",
      "relatedSpdxElement": "SPDXRef-Package-87cc7844e330f719",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-78f2352835e07de4",
      "relatedSpdxElement": "SPDXRef-Package-b7ec7684e4f488ac",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-7a2b3f1ff7853418",
      "relatedSpdxElement": "SPDXRef-Package-825836df5a7f891b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-7a2b3f1ff7853418",
      "relatedSpdxElement": "SPDXRef-Package-9fdcccde8dddaa78",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-7a2b3f1ff7853418",
      "relatedSpdxElement": "SPDXRef-Package-fff7bbf4fad5c969",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-825836df5a7f891b",
      "relatedSpdxElement": "SPDXRef-Package-9fdcccde8dddaa78",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-83b9d0cb01896062",
      "relatedSpdxElement": "SPDXRef-Package-825836df5a7f891b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-83b9d0cb01896062",
      "relatedSpdxElement": "SPDXRef-Package-87cc7844e330f719",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-83b9d0cb01896062",
      "relatedSpdxElement": "SPDXRef-Package-9fdcccde8dddaa78",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-87cc7844e330f719",
      "relatedSpdxElement": "SPDXRef-Package-bb5964eb5c21375a",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-a55473160021581d",
      "relatedSpdxElement": "SPDXRef-Package-9fdcccde8dddaa78",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-a55473160021581d",
      "relatedSpdxElement": "SPDXRef-Package-a98d281e71363679",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-a98d281e71363679",
      "relatedSpdxElement": "SPDXRef-Package-9fdcccde8dddaa78",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-a98d281e71363679",
      "relatedSpdxElement": "SPDXRef-Package-a2fabfb1822abf8d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-bb5964eb5c21375a",
      "relatedSpdxElement": "SPDXRef-Package-9fdcccde8dddaa78",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-c66d655d794aad84",
      "relatedSpdxElement": "SPDXRef-Package-825836df5a7f891b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-c66d655d794aad84",
      "relatedSpdxElement": "SPDXRef-Package-9fdcccde8dddaa78",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-c66d655d794aad84",
      "relatedSpdxElement": "SPDXRef-Package-a55473160021581d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-c66d655d794aad84",
      "relatedSpdxElement": "SPDXRef-Package-fff7bbf4fad5c969",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-e09d7673f680ddcf",
      "relatedSpdxElement": "SPDXRef-Package-1278ad18ab2ea71e",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-e09d7673f680ddcf",
      "relatedSpdxElement": "SPDXRef-Package-9fdcccde8dddaa78",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-e4b3b2f4eefb7828",
      "relatedSpdxElement": "SPDXRef-Package-f05d9b389bcd3e0d",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-e6e0c2c21da2eaa6",
      "relatedSpdxElement": "SPDXRef-Package-9fdcccde8dddaa78",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-fff7bbf4fad5c969",
      "relatedSpdxElement": "SPDXRef-Package-825836df5a7f891b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-fff7bbf4fad5c969",
      "relatedSpdxElement": "SPDXRef-Package-9fdcccde8dddaa78",
      "relationshipType": "DEPENDS_ON"
    }
  ]
}