{ "_type": "https://in-toto.io/Statement/v0.1", "predicateType": "https://cosign.sigstore.dev/attestation/vuln/v1", "subject": [ { "name": "", "digest": { "sha256": "" } } ], "predicate": { "invocation": { "parameters": null, "uri": "", "event_id": "", "builder.id": "" }, "scanner": { "uri": "pkg:github.com/neuvector/scanner@0212004", "version": "0212004", "db": { "uri": "pkg:github.com/neuvector/vul-dbgen@4.148", "version": "4.148" }, "result": { "error_message": "", "report": { "image_id": "ddbb079ef578c2ebb8fe994bde128976d1f7d29d08ab7037338ad89bde83ff97", "registry": "", "repository": "bci/bci-nano", "tag": "15.7-1.1", "digest": "", "size": 4915854, "author": "", "base_os": "sles:15.7", "created_at": "0001-01-01T00:00:00Z", "cvedb_version": "4.148", "cvedb_create_time": "2026-04-27T20:56:56Z", "layers": [], "vulnerabilities": [], "modules": [ { "name": "system-user-root", "version": "20190513-3.3.1", "source": "sles:15.7" }, { "name": "filesystem", "version": "15.0-11.8.1", "source": "sles:15.7" }, { "name": "bash-sh", "version": "4.4-150400.27.6.1", "source": "sles:15.7" }, { "name": "timezone", "version": "2025b-150600.91.6.2", "source": "sles:15.7" }, { "name": "sles-release", "version": "15.7-150700.67.6.1", "source": "sles:15.7" }, { "name": "ca-certificates-mozilla-prebuilt", "version": "2.84-150200.44.1", "source": "sles:15.7" }, { "name": "skelcd-EULA-bci", "version": "20250430-150700.1.1", "source": "sles:15.7" } ], "checks": [ { "test_number": "I.4.1", "category": "image", "type": "image", "profile": "Level 1", "scored": true, "automated": false, "description": "Ensure a user for the container has been created", "remediation": "", "tags": [], "level": "WARN", "message": [] }, { "test_number": "I.4.6", "category": "image", "type": "image", "profile": "Level 1", "scored": false, "automated": false, "description": "Ensure that HEALTHCHECK instructions have been added to container images", "remediation": "", "tags": [], "level": "WARN", "message": [] } ], "envs": [ "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" ], "labels": { "com.suse.bci.nano.authors": "https://github.com/SUSE/bci/discussions", "com.suse.bci.nano.created": "2026-04-29T12:18:16.105806960Z", "com.suse.bci.nano.description": "A nano environment for containers based on the SUSE Linux Enterprise Base Container Image.", "com.suse.bci.nano.disturl": "obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/7033441f186c43226371e075a0b81340-nano-image", "com.suse.bci.nano.eula": "sle-bci", "com.suse.bci.nano.lifecycle-url": "https://www.suse.com/lifecycle#suse-linux-enterprise-server-15", "com.suse.bci.nano.name": "15.7-1.1", "com.suse.bci.nano.reference": "registry.suse.com/bci/bci-nano:15.7-1.1", "com.suse.bci.nano.release-stage": "released", "com.suse.bci.nano.source": "https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP7/nano-image?rev=7033441f186c43226371e075a0b81340", "com.suse.bci.nano.supportlevel": "l3", "com.suse.bci.nano.title": "SLE BCI 15 SP7 Nano", "com.suse.bci.nano.until": "2031-07-31", "com.suse.bci.nano.url": "https://www.suse.com/products/base-container-images/", "com.suse.bci.nano.vendor": "SUSE LLC", "com.suse.bci.nano.version": "15.7-1.1", "com.suse.eula": "sle-bci", "com.suse.lifecycle-url": "https://www.suse.com/lifecycle#suse-linux-enterprise-server-15", "com.suse.release-stage": "released", "com.suse.supportlevel": "l3", "com.suse.supportlevel.until": "2031-07-31", "io.artifacthub.package.logo-url": "https://opensource.suse.com/bci/SLE_BCI_logomark_green.svg", "io.artifacthub.package.readme-url": "https://build.opensuse.org/public/source/devel:BCI:SLE-15-SP7/nano-image/README.md?rev=7033441f186c43226371e075a0b81340", "org.openbuildservice.disturl": "obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/7033441f186c43226371e075a0b81340-nano-image", "org.opencontainers.image.authors": "https://github.com/SUSE/bci/discussions", "org.opencontainers.image.created": "2026-04-29T12:18:16.105806960Z", "org.opencontainers.image.description": "A nano environment for containers based on the SUSE Linux Enterprise Base Container Image.", "org.opencontainers.image.ref.name": "15.7-1.1", "org.opencontainers.image.source": "https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP7/nano-image?rev=7033441f186c43226371e075a0b81340", "org.opencontainers.image.title": "SLE BCI 15 SP7 Nano", "org.opencontainers.image.url": "https://www.suse.com/products/base-container-images/", "org.opencontainers.image.vendor": "SUSE LLC", "org.opencontainers.image.version": "15.7-1.1", "org.opensuse.reference": "registry.suse.com/bci/bci-nano:15.7-1.1" }, "cmds": [ "", "LABEL org.openbuildservice.disturl=obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/7033441f186c43226371e075a0b81340-nano-image", "LABEL io.artifacthub.package.logo-url=https://opensource.suse.com/bci/SLE_BCI_logomark_green.svg", "LABEL io.artifacthub.package.readme-url=https://build.opensuse.org/public/source/devel:BCI:SLE-15-SP7/nano-image/README.md?rev=7033441f186c43226371e075a0b81340", "LABEL com.suse.release-stage=released", "LABEL com.suse.bci.nano.release-stage=released", "LABEL com.suse.lifecycle-url=https://www.suse.com/lifecycle#suse-linux-enterprise-server-15", "LABEL com.suse.bci.nano.lifecycle-url=https://www.suse.com/lifecycle#suse-linux-enterprise-server-15", "LABEL com.suse.eula=sle-bci", "LABEL com.suse.bci.nano.eula=sle-bci", "LABEL com.suse.supportlevel.until=2031-07-31", "LABEL com.suse.bci.nano.until=2031-07-31", "LABEL com.suse.supportlevel=l3", "LABEL com.suse.bci.nano.supportlevel=l3", "LABEL org.openbuildservice.disturl=obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/7033441f186c43226371e075a0b81340-nano-image", "LABEL com.suse.bci.nano.disturl=obs://build.opensuse.org/devel:BCI:SLE-15-SP7/containerfile/7033441f186c43226371e075a0b81340-nano-image", "LABEL org.opensuse.reference=registry.suse.com/bci/bci-nano:15.7-1.1", "LABEL com.suse.bci.nano.reference=registry.suse.com/bci/bci-nano:15.7-1.1", "LABEL org.opencontainers.image.ref.name=15.7-1.1", "LABEL com.suse.bci.nano.name=15.7-1.1", "LABEL org.opencontainers.image.source=https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP7/nano-image?rev=7033441f186c43226371e075a0b81340", "LABEL com.suse.bci.nano.source=https://build.opensuse.org/package/show/devel:BCI:SLE-15-SP7/nano-image?rev=7033441f186c43226371e075a0b81340", "LABEL org.opencontainers.image.vendor=SUSE LLC", "LABEL com.suse.bci.nano.vendor=SUSE LLC", "LABEL org.opencontainers.image.created=2026-04-29T12:18:16.105806960Z", "LABEL com.suse.bci.nano.created=2026-04-29T12:18:16.105806960Z", "LABEL org.opencontainers.image.url=https://www.suse.com/products/base-container-images/", "LABEL com.suse.bci.nano.url=https://www.suse.com/products/base-container-images/", "LABEL org.opencontainers.image.version=15.7-1.1", "LABEL com.suse.bci.nano.version=15.7-1.1", "LABEL org.opencontainers.image.description=A nano environment for containers based on the SUSE Linux Enterprise Base Container Image.", "LABEL com.suse.bci.nano.description=A nano environment for containers based on the SUSE Linux Enterprise Base Container Image.", "LABEL org.opencontainers.image.title=SLE BCI 15 SP7 Nano", "LABEL com.suse.bci.nano.title=SLE BCI 15 SP7 Nano", "LABEL org.opencontainers.image.authors=https://github.com/SUSE/bci/discussions", "LABEL com.suse.bci.nano.authors=https://github.com/SUSE/bci/discussions", "COPY dir:0c97a3532fd136a2280bd58b066909ebf7834dbfb89cb0154aa5858d1220ebbf in /" ], "signature_data": { "verification_timestamp": "" } } } }, "metadata": { "scanStartedOn": "2026-04-29T12:20:05.373269280+00:00", "scanFinishedOn": "2026-04-29T12:20:05.373269280+00:00" } } }