{
  "spdxVersion": "SPDX-2.3",
  "dataLicense": "CC0-1.0",
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "build/payload/redis-8.6.4-alpine-tpio.1",
  "documentNamespace": "http://trivy.dev/container_image/build/payload/redis-8.6.4-alpine-tpio.1-45772477-9972-4f52-84b0-b2306f84061a",
  "creationInfo": {
    "creators": [
      "Organization: aquasecurity",
      "Tool: trivy-0.75.0"
    ],
    "created": "2026-10-09T13:15:20Z"
  },
  "packages": [
    {
      "name": "build/payload/redis-8.6.4-alpine-tpio.1",
      "SPDXID": "SPDXRef-ContainerImage-460c7268e38c3643",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "primaryPackagePurpose": "CONTAINER",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:2ee1a2f78a3c2daf5a73fbe3e80a1e0aa6ae3da88d9b1423c75dda0d50c9f344"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:3fb2fda4a3240d350d002684b9c14cd755ad15fb855b7869ec7fad4279bf682b"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:8a9db4fea55ccf4c2c259d59a70906c6d56f1c552e3ae7e887dc9e67e054242e"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:bb7f3593fe63d734b58a7cefd865286a6b454c5c504e9eb49ddac01e8b6f8620"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:e404d4cce0a3a1cd5550a717eec441ef8a433bb6ebbceebd586e998c6657d5a7"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "DiffID: sha256:f3fa0188eb3dc6b55d3502a6b332a855f90726023fab2400e98ea3270551f2e5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "ImageID: sha256:7b545d66c050cad6ff890a51e5da20ca1cde3a54c1323a83ae10abd83745284f"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.buildah.version: 1.39.3"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.claim: package-fixable CRITICAL/HIGH cleared vs upstream digest; not FIPS/FedRAMP"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.ladder: c"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.license: RSALv2 OR SSPLv1 OR AGPLv3 (redis 8.x); alpine packages per their own licenses"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.replaces: ecr-public.aws.com/docker/library/redis:8.6.4-alpine@sha256:2cc044fc5a07c9b701f8f1255a309ae9ad7856e694ac03513bf3648c01e40763"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "Labels:io.thepeoples.hardened.upstream: ecr-public.aws.com/docker/library/redis:8.6.4-alpine@sha256:2cc044fc5a07c9b701f8f1255a309ae9ad7856e694ac03513bf3648c01e40763"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "Labels:org.opencontainers.image.version: 8.6.4-alpine"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "SchemaVersion: 2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "Size: 105954304"
        }
      ]
    },
    {
      "name": ".redis-rundeps",
      "SPDXID": "SPDXRef-Package-1f4a5718b25edfa",
      "versionInfo": "20260622.195840",
      "supplier": "NOASSERTION",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "63f6c143b96a3bba079e7f13d3d825b212323381"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/.redis-rundeps@20260622.195840?arch=noarch\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:2ee1a2f78a3c2daf5a73fbe3e80a1e0aa6ae3da88d9b1423c75dda0d50c9f344"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:4090443663d4cb2885939df8401e66ebe13922e9b50d0bbbc80c8accdc03ab73"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: .redis-rundeps@20260622.195840"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "alpine-baselayout",
      "SPDXID": "SPDXRef-Package-4210a2c3e687b650",
      "versionInfo": "3.7.2-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "545aa6f291209af89932b761d9e422c2778596cc"
        }
      ],
      "sourceInfo": "built package from: alpine-baselayout 3.7.2-r0",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/alpine-baselayout@3.7.2-r0?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:b92c171e7d71f4b8021bd956d4a0331d2bf380775d23e7a5a09dfe9c1618e14f"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: alpine-baselayout@3.7.2-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "alpine-baselayout-data",
      "SPDXID": "SPDXRef-Package-f66193f5c32653cd",
      "versionInfo": "3.7.2-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "85816632dbce07ba7e9e7a629fa59eddbd1687fb"
        }
      ],
      "sourceInfo": "built package from: alpine-baselayout 3.7.2-r0",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/alpine-baselayout-data@3.7.2-r0?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:b92c171e7d71f4b8021bd956d4a0331d2bf380775d23e7a5a09dfe9c1618e14f"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: alpine-baselayout-data@3.7.2-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "alpine-keys",
      "SPDXID": "SPDXRef-Package-e7804dbab8627f52",
      "versionInfo": "2.6-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "5c45a821cd6b84d543bbd7ff12a7de1855c5cd13"
        }
      ],
      "sourceInfo": "built package from: alpine-keys 2.6-r0",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/alpine-keys@2.6-r0?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:b92c171e7d71f4b8021bd956d4a0331d2bf380775d23e7a5a09dfe9c1618e14f"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: alpine-keys@2.6-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "alpine-release",
      "SPDXID": "SPDXRef-Package-674689a5a073b7c4",
      "versionInfo": "3.23.6-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "9a222ee46b43276b7e607f66dab5faf915d13984"
        }
      ],
      "sourceInfo": "built package from: alpine-base 3.23.6-r0",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/alpine-release@3.23.6-r0?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:bb7f3593fe63d734b58a7cefd865286a6b454c5c504e9eb49ddac01e8b6f8620"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:9a5c159cf9e9b7b745f289c7295fc18fec7054d46f2f9ad472ab080b0d38dcb5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: alpine-release@3.23.6-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "apk-tools",
      "SPDXID": "SPDXRef-Package-922c904526977e6e",
      "versionInfo": "3.0.8-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "fa7a8422abbbb5e179033cee5455124007817b22"
        }
      ],
      "sourceInfo": "built package from: apk-tools 3.0.8-r0",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/apk-tools@3.0.8-r0?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:bb7f3593fe63d734b58a7cefd865286a6b454c5c504e9eb49ddac01e8b6f8620"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:9a5c159cf9e9b7b745f289c7295fc18fec7054d46f2f9ad472ab080b0d38dcb5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: apk-tools@3.0.8-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "busybox",
      "SPDXID": "SPDXRef-Package-58fd9f961e6093a5",
      "versionInfo": "1.37.0-r30",
      "supplier": "Organization: Sören Tempel \u003csoeren+alpine@soeren-tempel.net\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "f1347801bb96b1aa40d17f82237c3f4ff02a4725"
        }
      ],
      "sourceInfo": "built package from: busybox 1.37.0-r30",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/busybox@1.37.0-r30?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:b92c171e7d71f4b8021bd956d4a0331d2bf380775d23e7a5a09dfe9c1618e14f"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: busybox@1.37.0-r30"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "busybox-binsh",
      "SPDXID": "SPDXRef-Package-43c31574ab18a617",
      "versionInfo": "1.37.0-r30",
      "supplier": "Organization: Sören Tempel \u003csoeren+alpine@soeren-tempel.net\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "188d2d0110afa58e8a3e3e5fd424b2d996df7a09"
        }
      ],
      "sourceInfo": "built package from: busybox 1.37.0-r30",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/busybox-binsh@1.37.0-r30?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:b92c171e7d71f4b8021bd956d4a0331d2bf380775d23e7a5a09dfe9c1618e14f"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: busybox-binsh@1.37.0-r30"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "ca-certificates-bundle",
      "SPDXID": "SPDXRef-Package-abebd61c4515454b",
      "versionInfo": "20260909-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0b7f24b8a713bf4bb869de377505a5040239a7bc"
        }
      ],
      "sourceInfo": "built package from: ca-certificates 20260909-r0",
      "licenseConcluded": "MPL-2.0 AND MIT",
      "licenseDeclared": "MPL-2.0 AND MIT",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/ca-certificates-bundle@20260909-r0?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:bb7f3593fe63d734b58a7cefd865286a6b454c5c504e9eb49ddac01e8b6f8620"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:9a5c159cf9e9b7b745f289c7295fc18fec7054d46f2f9ad472ab080b0d38dcb5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: ca-certificates-bundle@20260909-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "libapk",
      "SPDXID": "SPDXRef-Package-12dbda65cd614047",
      "versionInfo": "3.0.8-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "2913286d1d02641d392289ba525850be6856df11"
        }
      ],
      "sourceInfo": "built package from: apk-tools 3.0.8-r0",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/libapk@3.0.8-r0?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:bb7f3593fe63d734b58a7cefd865286a6b454c5c504e9eb49ddac01e8b6f8620"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:9a5c159cf9e9b7b745f289c7295fc18fec7054d46f2f9ad472ab080b0d38dcb5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: libapk@3.0.8-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "libcap-ng",
      "SPDXID": "SPDXRef-Package-a0882ed20585bc44",
      "versionInfo": "0.8.5-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "95dfcda98a0acfd14fec1b5ff082b6b4b011c9d4"
        }
      ],
      "sourceInfo": "built package from: libcap-ng 0.8.5-r0",
      "licenseConcluded": "GPL-2.0-or-later AND LGPL-2.1-or-later",
      "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/libcap-ng@0.8.5-r0?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:e404d4cce0a3a1cd5550a717eec441ef8a433bb6ebbceebd586e998c6657d5a7"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:fbc27622c828d430ad07f6ecbd0742ca69d57fe9db709e98265b373175fd8ee7"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: libcap-ng@0.8.5-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "libcrypto3",
      "SPDXID": "SPDXRef-Package-b54b0ee825895e09",
      "versionInfo": "3.5.9-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "51bb7f66684cf98585860c2d8adcc3f2aa0f6772"
        }
      ],
      "sourceInfo": "built package from: openssl 3.5.9-r0",
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/libcrypto3@3.5.9-r0?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:bb7f3593fe63d734b58a7cefd865286a6b454c5c504e9eb49ddac01e8b6f8620"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:9a5c159cf9e9b7b745f289c7295fc18fec7054d46f2f9ad472ab080b0d38dcb5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: libcrypto3@3.5.9-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "libgcc",
      "SPDXID": "SPDXRef-Package-74a0b0c40f35d970",
      "versionInfo": "15.2.0-r2",
      "supplier": "Organization: Ariadne Conill \u003cariadne@dereferenced.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "57fccbe9eebf23f2c4f38ee2a24f8b0bdd508ff7"
        }
      ],
      "sourceInfo": "built package from: gcc 15.2.0-r2",
      "licenseConcluded": "GPL-2.0-or-later AND LGPL-2.1-or-later",
      "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/libgcc@15.2.0-r2?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:2ee1a2f78a3c2daf5a73fbe3e80a1e0aa6ae3da88d9b1423c75dda0d50c9f344"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:4090443663d4cb2885939df8401e66ebe13922e9b50d0bbbc80c8accdc03ab73"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: libgcc@15.2.0-r2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "libssl3",
      "SPDXID": "SPDXRef-Package-575ca56853f59e20",
      "versionInfo": "3.5.9-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "ef4bf11c06114b8a3ea8412bc4b2d75b403b06e5"
        }
      ],
      "sourceInfo": "built package from: openssl 3.5.9-r0",
      "licenseConcluded": "Apache-2.0",
      "licenseDeclared": "Apache-2.0",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/libssl3@3.5.9-r0?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:bb7f3593fe63d734b58a7cefd865286a6b454c5c504e9eb49ddac01e8b6f8620"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:9a5c159cf9e9b7b745f289c7295fc18fec7054d46f2f9ad472ab080b0d38dcb5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: libssl3@3.5.9-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "libstdc++",
      "SPDXID": "SPDXRef-Package-c266b18693a676a5",
      "versionInfo": "15.2.0-r2",
      "supplier": "Organization: Ariadne Conill \u003cariadne@dereferenced.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "528d77417a16706468af852f2859ad00f176e266"
        }
      ],
      "sourceInfo": "built package from: gcc 15.2.0-r2",
      "licenseConcluded": "GPL-2.0-or-later AND LGPL-2.1-or-later",
      "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/libstdc%2B%2B@15.2.0-r2?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:2ee1a2f78a3c2daf5a73fbe3e80a1e0aa6ae3da88d9b1423c75dda0d50c9f344"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:4090443663d4cb2885939df8401e66ebe13922e9b50d0bbbc80c8accdc03ab73"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: libstdc++@15.2.0-r2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "musl",
      "SPDXID": "SPDXRef-Package-70af4d59d218cbf",
      "versionInfo": "1.2.5-r23",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "1b6c50426d3c0656e9c5a567a5a59601c7f4307a"
        }
      ],
      "sourceInfo": "built package from: musl 1.2.5-r23",
      "licenseConcluded": "MIT",
      "licenseDeclared": "MIT",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/musl@1.2.5-r23?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:b92c171e7d71f4b8021bd956d4a0331d2bf380775d23e7a5a09dfe9c1618e14f"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: musl@1.2.5-r23"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "musl-utils",
      "SPDXID": "SPDXRef-Package-74e5bed40e75528",
      "versionInfo": "1.2.5-r23",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "92fdbe96d25f13fe3a3d297ada56e4fb907aacec"
        }
      ],
      "sourceInfo": "built package from: musl 1.2.5-r23",
      "licenseConcluded": "MIT AND BSD-2-Clause AND GPL-2.0-or-later",
      "licenseDeclared": "MIT AND BSD-2-Clause AND GPL-2.0-or-later",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/musl-utils@1.2.5-r23?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:b92c171e7d71f4b8021bd956d4a0331d2bf380775d23e7a5a09dfe9c1618e14f"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: musl-utils@1.2.5-r23"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "scanelf",
      "SPDXID": "SPDXRef-Package-997f2258d6fcdd68",
      "versionInfo": "1.3.8-r2",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "6ea36dd44ef9f6364f0cdfabe09ea15d2fdbe229"
        }
      ],
      "sourceInfo": "built package from: pax-utils 1.3.8-r2",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/scanelf@1.3.8-r2?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:b92c171e7d71f4b8021bd956d4a0331d2bf380775d23e7a5a09dfe9c1618e14f"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: scanelf@1.3.8-r2"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "setpriv",
      "SPDXID": "SPDXRef-Package-981858dfd5a2405",
      "versionInfo": "2.41.6-r1",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "852de8931b59784fe5a3f0caf01365b74cac4495"
        }
      ],
      "sourceInfo": "built package from: util-linux 2.41.6-r1",
      "licenseConcluded": "GPL-2.0-or-later",
      "licenseDeclared": "GPL-2.0-or-later",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/setpriv@2.41.6-r1?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:bb7f3593fe63d734b58a7cefd865286a6b454c5c504e9eb49ddac01e8b6f8620"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:9a5c159cf9e9b7b745f289c7295fc18fec7054d46f2f9ad472ab080b0d38dcb5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: setpriv@2.41.6-r1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "ssl_client",
      "SPDXID": "SPDXRef-Package-b4b4bb79a86b5a4a",
      "versionInfo": "1.37.0-r30",
      "supplier": "Organization: Sören Tempel \u003csoeren+alpine@soeren-tempel.net\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "5b6ec0939cfc9be47d9677a3152c547cc18b5edd"
        }
      ],
      "sourceInfo": "built package from: busybox 1.37.0-r30",
      "licenseConcluded": "GPL-2.0-only",
      "licenseDeclared": "GPL-2.0-only",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/ssl_client@1.37.0-r30?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:31ad4a471c6852bfec14d757cc75a566c82a9769f12c3918cf6bf52cc0eeb3d0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:b92c171e7d71f4b8021bd956d4a0331d2bf380775d23e7a5a09dfe9c1618e14f"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: ssl_client@1.37.0-r30"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "tzdata",
      "SPDXID": "SPDXRef-Package-eaa228cb3228895",
      "versionInfo": "2026e-r0",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "c12e2c000960e072c28e1f9c3b8a49f035898f38"
        }
      ],
      "sourceInfo": "built package from: tzdata 2026e-r0",
      "licenseConcluded": "LicenseRef-1ccb5c3ceeb27ca8",
      "licenseDeclared": "LicenseRef-1ccb5c3ceeb27ca8",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/tzdata@2026e-r0?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:bb7f3593fe63d734b58a7cefd865286a6b454c5c504e9eb49ddac01e8b6f8620"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:9a5c159cf9e9b7b745f289c7295fc18fec7054d46f2f9ad472ab080b0d38dcb5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: tzdata@2026e-r0"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "zlib",
      "SPDXID": "SPDXRef-Package-5babfc74e9a8218c",
      "versionInfo": "1.3.2-r1",
      "supplier": "Organization: Natanael Copa \u003cncopa@alpinelinux.org\u003e",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "8eeb776cd3d11e9fc9a16a74196361b485a79d01"
        }
      ],
      "sourceInfo": "built package from: zlib 1.3.2-r1",
      "licenseConcluded": "Zlib",
      "licenseDeclared": "Zlib",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:apk/alpine/zlib@1.3.2-r1?arch=x86_64\u0026distro=3.23.5"
        }
      ],
      "primaryPackagePurpose": "LIBRARY",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDiffID: sha256:bb7f3593fe63d734b58a7cefd865286a6b454c5c504e9eb49ddac01e8b6f8620"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "LayerDigest: sha256:9a5c159cf9e9b7b745f289c7295fc18fec7054d46f2f9ad472ab080b0d38dcb5"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgID: zlib@1.3.2-r1"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "PkgType: alpine"
        }
      ]
    },
    {
      "name": "alpine",
      "SPDXID": "SPDXRef-OperatingSystem-12632fd8ce832d73",
      "versionInfo": "3.23.5",
      "downloadLocation": "NONE",
      "filesAnalyzed": false,
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "primaryPackagePurpose": "OPERATING-SYSTEM",
      "annotations": [
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "Class: os-pkgs"
        },
        {
          "annotator": "Tool: trivy-0.75.0",
          "annotationDate": "2026-10-09T13:15:20Z",
          "annotationType": "OTHER",
          "comment": "Type: alpine"
        }
      ]
    }
  ],
  "hasExtractedLicensingInfos": [
    {
      "licenseId": "LicenseRef-1ccb5c3ceeb27ca8",
      "extractedText": "This component is licensed under \"Public-Domain\"",
      "name": "Public-Domain"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-ContainerImage-460c7268e38c3643",
      "relatedSpdxElement": "SPDXRef-OperatingSystem-12632fd8ce832d73",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relatedSpdxElement": "SPDXRef-ContainerImage-460c7268e38c3643",
      "relationshipType": "DESCRIBES"
    },
    {
      "spdxElementId": "SPDXRef-OperatingSystem-12632fd8ce832d73",
      "relatedSpdxElement": "SPDXRef-Package-1f4a5718b25edfa",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-OperatingSystem-12632fd8ce832d73",
      "relatedSpdxElement": "SPDXRef-Package-4210a2c3e687b650",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-OperatingSystem-12632fd8ce832d73",
      "relatedSpdxElement": "SPDXRef-Package-674689a5a073b7c4",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-OperatingSystem-12632fd8ce832d73",
      "relatedSpdxElement": "SPDXRef-Package-74e5bed40e75528",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-OperatingSystem-12632fd8ce832d73",
      "relatedSpdxElement": "SPDXRef-Package-922c904526977e6e",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-OperatingSystem-12632fd8ce832d73",
      "relatedSpdxElement": "SPDXRef-Package-981858dfd5a2405",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-OperatingSystem-12632fd8ce832d73",
      "relatedSpdxElement": "SPDXRef-Package-b4b4bb79a86b5a4a",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-OperatingSystem-12632fd8ce832d73",
      "relatedSpdxElement": "SPDXRef-Package-eaa228cb3228895",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-Package-12dbda65cd614047",
      "relatedSpdxElement": "SPDXRef-Package-575ca56853f59e20",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-12dbda65cd614047",
      "relatedSpdxElement": "SPDXRef-Package-5babfc74e9a8218c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-12dbda65cd614047",
      "relatedSpdxElement": "SPDXRef-Package-70af4d59d218cbf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-12dbda65cd614047",
      "relatedSpdxElement": "SPDXRef-Package-b54b0ee825895e09",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-1f4a5718b25edfa",
      "relatedSpdxElement": "SPDXRef-Package-575ca56853f59e20",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-1f4a5718b25edfa",
      "relatedSpdxElement": "SPDXRef-Package-70af4d59d218cbf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-1f4a5718b25edfa",
      "relatedSpdxElement": "SPDXRef-Package-74a0b0c40f35d970",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-1f4a5718b25edfa",
      "relatedSpdxElement": "SPDXRef-Package-b54b0ee825895e09",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-1f4a5718b25edfa",
      "relatedSpdxElement": "SPDXRef-Package-c266b18693a676a5",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-4210a2c3e687b650",
      "relatedSpdxElement": "SPDXRef-Package-43c31574ab18a617",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-4210a2c3e687b650",
      "relatedSpdxElement": "SPDXRef-Package-f66193f5c32653cd",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-43c31574ab18a617",
      "relatedSpdxElement": "SPDXRef-Package-58fd9f961e6093a5",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-575ca56853f59e20",
      "relatedSpdxElement": "SPDXRef-Package-70af4d59d218cbf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-575ca56853f59e20",
      "relatedSpdxElement": "SPDXRef-Package-b54b0ee825895e09",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-58fd9f961e6093a5",
      "relatedSpdxElement": "SPDXRef-Package-70af4d59d218cbf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-5babfc74e9a8218c",
      "relatedSpdxElement": "SPDXRef-Package-70af4d59d218cbf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-674689a5a073b7c4",
      "relatedSpdxElement": "SPDXRef-Package-e7804dbab8627f52",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-74a0b0c40f35d970",
      "relatedSpdxElement": "SPDXRef-Package-70af4d59d218cbf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-74e5bed40e75528",
      "relatedSpdxElement": "SPDXRef-Package-70af4d59d218cbf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-74e5bed40e75528",
      "relatedSpdxElement": "SPDXRef-Package-997f2258d6fcdd68",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-922c904526977e6e",
      "relatedSpdxElement": "SPDXRef-Package-12dbda65cd614047",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-922c904526977e6e",
      "relatedSpdxElement": "SPDXRef-Package-5babfc74e9a8218c",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-922c904526977e6e",
      "relatedSpdxElement": "SPDXRef-Package-70af4d59d218cbf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-922c904526977e6e",
      "relatedSpdxElement": "SPDXRef-Package-abebd61c4515454b",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-922c904526977e6e",
      "relatedSpdxElement": "SPDXRef-Package-b54b0ee825895e09",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-981858dfd5a2405",
      "relatedSpdxElement": "SPDXRef-Package-70af4d59d218cbf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-981858dfd5a2405",
      "relatedSpdxElement": "SPDXRef-Package-a0882ed20585bc44",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-997f2258d6fcdd68",
      "relatedSpdxElement": "SPDXRef-Package-70af4d59d218cbf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-a0882ed20585bc44",
      "relatedSpdxElement": "SPDXRef-Package-70af4d59d218cbf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-b4b4bb79a86b5a4a",
      "relatedSpdxElement": "SPDXRef-Package-575ca56853f59e20",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-b4b4bb79a86b5a4a",
      "relatedSpdxElement": "SPDXRef-Package-70af4d59d218cbf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-b4b4bb79a86b5a4a",
      "relatedSpdxElement": "SPDXRef-Package-b54b0ee825895e09",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-b54b0ee825895e09",
      "relatedSpdxElement": "SPDXRef-Package-70af4d59d218cbf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-c266b18693a676a5",
      "relatedSpdxElement": "SPDXRef-Package-70af4d59d218cbf",
      "relationshipType": "DEPENDS_ON"
    },
    {
      "spdxElementId": "SPDXRef-Package-c266b18693a676a5",
      "relatedSpdxElement": "SPDXRef-Package-74a0b0c40f35d970",
      "relationshipType": "DEPENDS_ON"
    }
  ]
}