This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

Welcome

Anchore Open Source Software (OSS) is a suite of tools for Software Bill of Materials (SBOM) Generation, Vulnerability Scanning, and License Scanning.

Start by going to the project overview of Anchore OSS to learn more about the basic concepts and functions.

Installing the Tools

The tools are available through official and community curated distribution channels.

Using the Tools

Step-by-step guides for common use cases:

Or checkout the Reference section for CLI and configuration details.

Contributing

Interested in contributing to Anchore OSS?

Check out the contribution guides for how to get started!

1 - Projects

Overview of Anchore Open Source tools

We maintain three popular command-line tools, some libraries, and supporting utilities. Most are written in Go, with a few in Python. They are all released under the Apache-2.0 license. For the full list, see our GitHub org.

Anchore’s tools follow a simple workflow: search and raise up evidence in the form of a Software Bill of Materials (SBOM) using Syft, then analyze that SBOM with Grype for security vulnerabilities and Grant for open source license compliance.

%%{init: {'theme':'base', 'themeVariables': { 'primaryColor':'#f8fafc','primaryTextColor':'#1e293b','primaryBorderColor':'#cbd5e1','lineColor':'#94a3b8','secondaryColor':'#f8fafc','tertiaryColor':'#f8fafc'}}}%%
graph LR
    software["📦 Your Software<br/><small>Container Images<br/>Filesystems<br/>Archives</small>"]
    syft["🔍 Syft<br/><small>SBOM Generator</small>"]
    sbom@{ shape: doc, label: "📋 SBOM<br/><small>Software Bill<br/>of Materials</small>"}
    grype["🛡️ Grype<br/><small>Vulnerability<br/>Scanner</small>"]
    grant["⚖️ Grant<br/><small>License<br/>Scanner</small>"]
    vulns@{ shape: doc, label: "Security Report<br/><small>CVE findings</small>"}
    licenses@{ shape: doc, label: "License Report<br/><small>Compliance info</small>"}

    software -.->|scan| syft
    syft -->|generates| sbom
    sbom -->|analyze| grype
    sbom -->|analyze| grant
    grype -->|produces| vulns
    grant -->|produces| licenses

    classDef inputStyle fill:#f8fafc,stroke:#cbd5e1,stroke-width:2px,stroke-dasharray: 5 5,color:#64748b
    classDef syftStyle fill:#fdf4ff,stroke:#e879f9,stroke-width:2px,color:#6b21a8
    classDef grypeStyle fill:#eff6ff,stroke:#3b82f6,stroke-width:2px,color:#1e3a8a
    classDef grantStyle fill:#f0fdf4,stroke:#00b388,stroke-width:2px,color:#065f46
    classDef docStyle fill:#ffffff,stroke:#cbd5e1,stroke-width:1px,color:#475569

    class software inputStyle
    class syft syftStyle
    class grype grypeStyle
    class grant grantStyle
    class sbom,vulns,licenses docStyle

This modular approach lets you generate the SBOM once with Syft, then use Grype and Grant independently to scan for different types of risk.

Syft

SBOM Generator and library

Syft (pronounced like sift) is an open-source command-line tool and Go library. Its primary function is to scan container images, file systems, and archives to automatically generate a Software Bill of Materials, making it easier to understand the composition of software.

GitHub Repo | Installing | SBOM Generation Guide

Grype

Vulnerability Scanner

Grype (rhymes with hype) is an open-source vulnerability scanner specifically designed to analyze container images and filesystems. It works by comparing the software components it finds against a database of known vulnerabilities, providing a report of potential risks so they can be addressed.

GitHub Repo | Installing | Vulnerability Scanning Guide

Grant

License Scanner

Grant is an open-source command-line tool designed to discover and report on the software licenses present in container images, SBOM documents, or filesystems. It helps users understand the licenses of their software dependencies and can check them against user-defined policies to ensure compliance.

GitHub Repo | Installing | License Scanning Guide

2 - Installation

Official and community maintained packages of Anchore OSS Tools

Any of the tools can be installed with:

curl -sSfL https://get.anchore.io/TOOLNAME | sudo sh -s -- -b /usr/local/bin

However, there are additional installation options for each tool, so see the individual pages for more information.

2.1 - Installing Syft

Official builds

The Anchore OSS team publish official source archives and binary builds of Syft for Linux, macOS and Windows. There are also numerous community-maintained builds of the tools for different platforms.

Installer script

Syft binaries are provided for Linux, macOS and Windows.

curl -sSfL https://get.anchore.io/syft | sudo sh -s -- -b /usr/local/bin

Install script options:

-b: Specify a custom installation directory (defaults to ./bin)
-d: More verbose logging levels (-d for debug, -dd for trace)
-v: Verify the signature of the downloaded artifact before installation (requires cosign to be installed)

Updating Syft

Syft checks for new versions on launch. It will print a message at the end of the output if the version in use is not the latest.

A newer version of syft is available for download: 1.20.0 (installed version is 1.19.2)

Docker container

docker pull anchore/syft

GitHub releases

Download the file for your operating system and architecture from the GitHub releases page
In the case of .deb or .rpm, install them using your package manager
For compressed archives, unpack the file, and copy the syft binary to a folder in your path such as /usr/local/bin

Community builds of syft

Alpine Linux

apk add syft

Thanks to Michał Polański for maintaining this package.

deb-get

deb-get install syft

deb-get Syft package

Homebrew

brew tap anchore/syft
brew install syft

HomeBrew packaging for Syft

Thanks to the Syft community for maintaining this package.

Kali Linux

sudo apt install syft

Thanks to Sophie Brun for maintaining this package.

Nix

Syft is available in the stable channel since NixOS 22.05.

nix-env -i syft

Alternatively, just try it out in an ephemeral nix shell.

nix-shell -p syft

WinGet

winget install Anchore.syft

WinGet packaging for Syft

Thanks to Alan Pope for maintaining this package.

Scoop

scoop bucket add main
scoop install main/syft

Snapcraft

snap install syft

Thanks to Alan Pope for maintaining this package.

2.2 - Installing Grype

Official builds

The Anchore OSS team publish official source archives and binary builds of Grype for Linux, macOS and Windows. There are also numerous community-maintained builds of the tools for different platforms.

Installer script

Grype binaries are provided for Linux, macOS and Windows.

curl -sSfL https://get.anchore.io/grype | sudo sh -s -- -b /usr/local/bin

Install script options:

-b: Specify a custom installation directory (defaults to ./bin)
-d: More verbose logging levels (-d for debug, -dd for trace)
-v: Verify the signature of the downloaded artifact before installation (requires cosign to be installed)

Updating Grype

Grype checks for new versions on launch. It will print a message at the end of the output if the version in use is not the latest.

A newer version of grype is available for download: 0.92.0 (installed version is 0.91.2)

Docker container

docker pull anchore/grype

GitHub releases

Download the file for your operating system and architecture from the GitHub releases page
In the case of .deb or .rpm, install them using your package manager
For compressed archives, unpack the file, and copy the grype binary to a folder in your path such as /usr/local/bin

Community builds of Grype

Arch Linux

sudo pacman -S grype-bin

Homebrew

brew tap anchore/grype
brew install grype

MacPorts

sudo port install grype

Winget

winget install Anchore.Grype

Scoop

scoop bucket add main
scoop install main/grype

Snapcraft

snap install grype

2.3 - Installing Grant

Official builds

The Anchore OSS team publish official source archives and binary builds for Linux and macOS. There are also some community-maintained builds of the tools for different platforms.

Installer script

Grant binaries are provided for Linux and macOS.

curl -sSfL https://get.anchore.io/grant | sudo sh -s -- -b /usr/local/bin

Install script options:

-b: Specify a custom installation directory (defaults to ./bin)
-d: More verbose logging levels (-d for debug, -dd for trace)
-v: Verify the signature of the downloaded artifact before installation (requires cosign to be installed)

GitHub releases

Download the file for your operating system and architecture from the GitHub releases page
In the case of .deb or .rpm, install them using your package manager
For compressed archives, unpack the file, and copy the grant binary to a folder in your path such as /usr/local/bin

Community builds of grant

Homebrew

brew tap anchore/grant
brew install grant

2.4 - Verifying Downloads

Verifying release assets after downloading

Why verify downloads?

Verifying your downloads ensures that:

The files haven’t been tampered with during transit
You’re installing authentic Anchore software
Your supply chain is secure from the start

All release artifacts include checksums, and the checksum file itself is cryptographically signed using cosign for verification.

Note

Installation scripts support automatic verification using the -v flag if you have cosign installed. This performs the same verification steps outlined below.

Prerequisites

Before verifying downloads, you need:

The binary you want to verify (see Installation)
Cosign installed (for signature verification)

Note: Checksum verification doesn’t require additional tools beyond your operating system’s built-in utilities.

Cosign signature verification

This method verifies that your download is both authentic (from Anchore) and hasn’t been tampered with.

Step 1: Download the files

Download your tool binary and the verification files from the appropriate GitHub releases page:

You’ll need:

The binary file (e.g., syft_1.54.0_darwin_arm64.tar.gz)
checksums.txt
the signature material for checksums.txt, which depends on the release:
- Syft v1.54.0 and later: checksums.txt.sigstore.json (a single sigstore bundle holding the signature, certificate, and transparency log proof)
- older Syft releases, Grype, and Grant: checksums.txt.pem and checksums.txt.sig

Step 2: Verify the signature

Use cosign to verify the checksum file’s signature.

For releases with a checksums.txt.sigstore.json bundle (cosign v2.5.0 or newer is required):

cosign verify-blob <path to checksums.txt> \
  --bundle <path to checksums.txt.sigstore.json> \
  --certificate-identity-regexp 'https://github\.com/anchore/<tool-name>/\.github/workflows/.+' \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

For releases with a separate checksums.txt.pem and checksums.txt.sig:

cosign verify-blob <path to checksums.txt> \
  --certificate <path to checksums.txt.pem> \
  --signature <path to checksums.txt.sig> \
  --certificate-identity-regexp 'https://github\.com/anchore/<tool-name>/\.github/workflows/.+' \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Replace <tool-name> with syft, grype, or grant depending on which tool you’re verifying.

Expected output on success:

Verified OK

Step 3: Verify the checksum

Once the signature is confirmed as valid, verify that the SHA256 checksum matches your downloaded file:

sha256sum --ignore-missing -c checksums.txt

Expected output on success:

<your-binary-file>: OK

Complete example

Here’s a complete example verifying Syft v1.54.0 for macOS ARM64:

Download the files:

# Download the binary
wget https://github.com/anchore/syft/releases/download/v1.54.0/syft_1.54.0_darwin_arm64.tar.gz

# Download verification files
wget https://github.com/anchore/syft/releases/download/v1.54.0/syft_1.54.0_checksums.txt
wget https://github.com/anchore/syft/releases/download/v1.54.0/syft_1.54.0_checksums.txt.sigstore.json

Verify the signature:

cosign verify-blob ./syft_1.54.0_checksums.txt \
  --bundle ./syft_1.54.0_checksums.txt.sigstore.json \
  --certificate-identity-regexp 'https://github\.com/anchore/syft/\.github/workflows/.+' \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Output:

Verified OK

Verify the checksum:

sha256sum --ignore-missing -c syft_1.54.0_checksums.txt

Output:

syft_1.54.0_darwin_arm64.tar.gz: OK

Checksum verification

If you can’t use cosign, you can verify checksums manually. This verifies file integrity but not authenticity.

Security Note

Checksum verification only confirms the file hasn’t been corrupted. It doesn’t verify that the file is authentic. Use cosign verification when possible for better security.

Step 1: Download the files

Download your tool binary and the checksums file:

# Example for Syft v1.23.1
wget https://github.com/anchore/syft/releases/download/v1.23.1/syft_1.23.1_darwin_arm64.tar.gz
wget https://github.com/anchore/syft/releases/download/v1.23.1/syft_1.23.1_checksums.txt

Step 2: Verify the checksum

sha256sum --ignore-missing -c syft_1.23.1_checksums.txt

Expected output:

syft_1.23.1_darwin_arm64.tar.gz: OK

Troubleshooting

Verification failed

If cosign verification fails, check these common issues:

Mismatched certificate identity: Ensure you’re using the correct tool name (syft, grype, or grant) in the certificate identity pattern
Outdated cosign: Update to the latest version of cosign. Verifying a checksums.txt.sigstore.json bundle requires cosign v2.5.0 or newer
Wrong signature material for the release: Syft v1.54.0 and later only publish checksums.txt.sigstore.json; use --bundle instead of --certificate / --signature
Network connectivity: Cosign requires internet access to verify against transparency logs
Corrupted download: Try downloading the verification files again

Checksum doesn’t match

If the checksum verification fails:

Download again: The file may have been corrupted during download
Check the filename: Ensure you’re comparing the checksum for the correct file (right version, architecture, and tool)
Do not proceed: A mismatched checksum indicates a potential security issue or corruption

Security Warning

If verification fails repeatedly with newly downloaded files, do not use the binary. Report the issue on the appropriate GitHub repository.

Platform-specific issues

macOS:

If you get a “command not found” error for sha256sum, use shasum -a 256 instead
Example: shasum -a 256 syft_1.23.1_darwin_arm64.tar.gz

Windows:

Use PowerShell’s Get-FileHash command:

Get-FileHash .\syft_1.23.1_windows_amd64.zip -Algorithm SHA256

Need help?

If you’re still having issues:

Check the GitHub Discussions for your tool
Review the Cosign documentation
Open an issue on the appropriate repository

3 - Guides

Step-by-step guides for common use cases

3.1 - SBOM Generation

Learn how to create a Software Bill of Materials (SBOMs) for container images, filesystems, and archives using Syft.

3.1.1 - Getting Started

Use Syft to generate your first SBOM from container images, directories, or archives.

What is an SBOM?

A Software Bill of Materials (SBOM) is a detailed list of all libraries and components that make up software.

For developers, it’s crucial for tracking dependencies, identifying vulnerabilities, and ensuring license compliance.
For organizations, it provides transparency into the software supply chain to assess security risks.

Syft is a CLI tool for generating an SBOM from container images and filesystems.

Installation

Syft is provided as a single compiled executable and requires no external dependencies to run. Run the command for your platform to download the latest release.

curl -sSfL https://get.anchore.io/syft | sudo sh -s -- -b /usr/local/bin

brew install syft

winget install Anchore.Syft

Check out installation guide for full list of official and community-maintained packaging options.

Find packages within a container image

Run syft against a small container image; the output will be a simple human-readable table of the installed packages found:

syft alpine:latest

NAME                    VERSION      TYPE
alpine-baselayout       3.6.8-r1     apk
alpine-baselayout-data  3.6.8-r1     apk
alpine-keys             2.5-r0       apk
alpine-release          3.21.3-r0    apk
apk-tools               2.14.6-r3    apk
busybox                 1.37.0-r12   apk
busybox-binsh           1.37.0-r12   apk
...

Learn more

Syft supports more than just containers. Learn more about Supported Scan Targets

Create an industry-standard SBOM

This command will display the human-readable table and write SBOMs in both SPDX and CycloneDX formats, the two primary industry standards.

syft alpine:latest \                 # what we're scanning
  -o table \                         # a human-readable table to stdout
  -o spdx-json=alpine.spdx.json \    # SPDX-JSON formatted SBOM to a file
  -o cyclonedx-json=alpine.cdx.json  # CycloneDX-JSON formatted SBOM to a file

The same table will be displayed, and two SBOM files will be created in the current directory.

Learn more

Syft supports multiple SBOM output formats, find out more about Output Formats.

Examine the SBOM file contents

We can use jq to extract specific package data from the SBOM files (by default Syft outputs JSON on a single line, but you can enable pretty-printing with the SYFT_FORMAT_PRETTY=true environment variable). Both formats structure package information differently:

SPDX format:

jq '.packages[].name' alpine.spdx.json

CycloneDX format:

jq '.components[].name' alpine.cdx.json

Both commands show the packages that Syft found in the container image:

"alpine-baselayout"
"alpine-baselayout-data"
"alpine-keys"
"alpine-release"
"apk-tools"
"busybox"
"busybox-binsh"
...

By default, Syft shows only software visible in the final container image (the “squashed” representation). To include software from all image layers, regardless of its presence in the final image, use --scope all-layers:

syft <image> --scope all-layers

More JSON examples

For more examples of working with Syft’s JSON output using jq, see the jq recipes.

FAQ

Does Syft need internet access?

Only for downloading container images. By default, scanning works offline, but Syft can download supplemental information from online sources when enabled with the --enrich option.

What about private container registries?

Syft supports authentication for private registries. See Private Registries.

Can I use Syft in CI/CD pipelines?

Absolutely! Syft is designed for automation. Generate SBOMs during builds and scan them for vulnerabilities.

What data does Syft send externally?

Nothing. Syft runs entirely locally and doesn’t send any data to external services.

Next steps

Continue the guide

Next: Learn about all the different Supported Scan Targets Syft can analyze –from container images to local directories and archives.

Now that you’ve generated your first SBOM, here are additional resources:

Scan for vulnerabilities: Use Grype to find security issues in your SBOMs
Check licenses: Learn about License Scanning to understand dependency licenses
Customize output: Explore different Output Formats for various tools and workflows
Query SBOM data: Master Working with Syft JSON for advanced data extraction

3.1.2 - Supported Scan Targets

Explore the different scan targets Syft supports including container images, OCI registries, directories, files, and archives.

TL;DR

Syft automatically detects scan target type, simply pass it as an argument: syft <target>
Supports container images (Docker/Podman/Containerd/registries), directories, files, and archives
Use --from <type> to explicitly specify scan target type (e.g., --from registry to bypass local daemons)

Syft can generate an SBOM from a variety of scan targets including container images, directories, files, and archives. In most cases, you can simply point Syft at what you want to analyze and it will automatically detect and catalog it correctly.

Catalog a container image from your local daemon or a remote registry:

syft alpine:latest

Catalog a directory (useful for analyzing source code or installed applications):

syft /path/to/project

Catalog a container image archive:

syft image.tar

To explicitly specify the scan target type, use the --from flag:

`--from ARG`	Description
`docker`	Use images from the Docker daemon
`podman`	Use images from the Podman daemon
`containerd`	Use images from the Containerd daemon
`docker-archive`	Use a tarball from disk for archives created from `docker save`
`oci-archive`	Use a tarball from disk for OCI archives (from Skopeo or otherwise)
`oci-dir`	Read directly from a path on disk for OCI layout directories (from Skopeo or otherwise)
`singularity`	Read directly from a Singularity Image Format (SIF) container file on disk
`dir`	Read directly from a path on disk (any directory)
`file`	Read directly from a path on disk (any single file)
`registry`	Pull image directly from a registry (bypass any container runtimes)

Instead of using the --from flag explicitly, you can instead:

provide no hint and let Syft automatically detect the scan target type implicitly based on the input provided
provide the scan target type as a URI scheme in the target argument (e.g., docker:alpine:latest, oci-archive:/path/to/image.tar, dir:/path/to/dir)

Scan Target-Specific Behaviors

Container Image Scan Targets

When working with container images, Syft applies the following defaults and behaviors:

Registry: If no registry is specified in the image reference (e.g. alpine:latest instead of docker.io/alpine:latest), Syft assumes docker.io
Platform: For unspecific image references (tags) or multi-arch images pointing to an index (not a manifest), Syft analyzes the linux/amd64 manifest by default. Use the --platform flag to target a different platform.

When you provide an image reference without specifying a scan target type (i.e. no --from flag), Syft attempts to resolve the image using the following scan targets in order:

Docker daemon
Podman daemon
Containerd daemon
Direct registry access

For example, when you run syft alpine:latest, Syft will first check your local Docker daemon for the image. If Docker isn’t available, it tries Podman, then Containerd, and finally attempts to pull directly from the registry.

You can override this default behavior with the default-image-pull-source configuration option to always prefer a specific scan target. See Configuration for more details.

Directory Scan Targets

When you provide a directory path as the scan target, Syft recursively scans the directory tree to catalog installed software packages and files.

When you point Syft at a directory (especially system directories like /), it automatically skips certain filesystem types to improve scan performance and avoid indexing areas that don’t contain installed software packages.

Filesystems always skipped

proc / procfs - Virtual filesystem for process information
sysfs - Virtual filesystem for kernel and device information
devfs / devtmpfs / udev - Device filesystems

Filesystems conditionally skipped

tmpfs filesystems are only skipped when mounted at these specific locations:

/dev - Device files
/sys - System information
/run and /var/run - Runtime data and process IDs
/var/lock - Lock files

These paths are excluded because they contain virtual or temporary runtime data rather than installed software packages. Skipping them significantly improves scan performance and enables you to catalog entire system root directories without getting stuck scanning thousands of irrelevant entries.

Syft identifies these filesystems by reading your system’s mount table (/proc/self/mountinfo on Linux). When a directory matches one of these criteria, the entire directory tree under that mount point is skipped.

File types excluded

These file types are never indexed during directory scans:

Character devices
Block devices
Sockets
FIFOs (named pipes)
Irregular files

Regular files, directories, and symbolic links are always processed.

Archive Scan Targets

Syft automatically detects and unpacks common archive formats, then catalogs their contents. If an archive is a container image archive (from docker save or skopeo copy), Syft treats it as a container image.

Supported archive formats:

Standard archives:

.zip
.tar (uncompressed)
.rar (read-only extraction)

Compressed tar variants:

.tar.gz / .tgz
.tar.bz2 / .tbz2
.tar.br / .tbr (brotli)
.tar.lz4 / .tlz4
.tar.sz / .tsz (snappy)
.tar.xz / .txz
.tar.zst / .tzst (zstandard)

Standalone compression formats (extracted if containing tar):

.gz (gzip)
.bz2 (bzip2)
.br (brotli)
.lz4
.sz (snappy)
.xz
.zst / .zstd (zstandard)

OCI Archives and Layout Scan Targets

Syft automatically detects OCI archive and directory structures (including OCI layouts and SIF files) and catalogs them accordingly.

OCI archives and layouts are particularly useful for CI/CD pipelines, as they allow you to catalog images, scan for vulnerabilities, or perform other checks without publishing to a registry. This provides a powerful pattern for build-time gating.

Create OCI scan targets without a registry

OCI archive from an image:

skopeo copy \
  docker://alpine@sha256:eafc1edb577d2e9b458664a15f23ea1c370214193226069eb22921169fc7e43f \
  oci-archive:alpine.tar

OCI layout directory from an image:

skopeo copy \
  docker://alpine@sha256:eafc1edb577d2e9b458664a15f23ea1c370214193226069eb22921169fc7e43f \
  oci:alpine

Container image archive from an image:

docker save -o alpine.tar alpine:latest

Container Runtime Configuration

Image Availability and Authentication

When using container runtime scan targets (Docker, Podman, or Containerd):

Missing images: If an image doesn’t exist locally in the container runtime, Syft attempts to pull it from the registry via the runtime
Private images: You must be logged in to the registry via the container runtime (e.g., docker login) or have credentials configured for direct registry access. See Authentication with Private Registries for more details.

Environment Variables

Syft respects the following environment variables for each container runtime:

Scan Target	Environment Variables	Description
Docker	`DOCKER_HOST`	Docker daemon socket/host address (supports `ssh://` for remote connections)
	`DOCKER_TLS_VERIFY`	Enable TLS verification (auto-sets `DOCKER_CERT_PATH` if not set)
	`DOCKER_CERT_PATH`	Path to TLS certificates (defaults to `~/.docker` if `DOCKER_TLS_VERIFY` is set)
	`DOCKER_CONFIG`	Override default Docker config directory
Podman	`CONTAINER_HOST`	Podman socket/host address (e.g., `unix:///run/podman/podman.sock` or `ssh://user@host/path/to/socket`)
	`CONTAINER_SSHKEY`	SSH identity file path for remote Podman connections
	`CONTAINER_PASSPHRASE`	Passphrase for the SSH key
Containerd	`CONTAINERD_ADDRESS`	Containerd socket address (overrides default `/run/containerd/containerd.sock`)
	`CONTAINERD_NAMESPACE`	Containerd namespace (defaults to `default`)

Podman Daemon Requirements

Unlike Docker Desktop, which typically auto-starts, Podman requires explicitly starting the service.

Syft attempts to connect to Podman using the following methods in order:

Unix Socket (primary)
- Checks CONTAINER_HOST environment variable first
- Falls back to Podman config files
- Finally tries default socket locations ($XDG_RUNTIME_DIR/podman/podman.sockand/run/podman/podman.sock`)
SSH (fallback)
- Configured via CONTAINER_HOST, CONTAINER_SSHKEY, and CONTAINER_PASSPHRASE environment variables
- Used for remote Podman instances

Direct Registry Access

The registry scan target bypasses container runtimes entirely and pulls images directly from the registry.

Credentials are resolved in the following order:

Syft first attempts to use default Docker credentials from ~/.docker/config.json if they exist
If default credentials are not available, you can provide credentials via environment variables. See Authentication with Private Registries for more details.

Troubleshooting

Image not found in local daemon

If Syft reports an image doesn’t exist but you know it’s available:

Check which daemon has the image: Run docker images, podman images, or nerdctl images to see where the image exists
Specify the scan target type explicitly: Use --from docker, --from podman, or --from containerd to target the correct daemon
Pull from registry: Use --from registry to bypass local daemons and pull directly

Authentication failures with private registries

If you get authentication errors when scanning private images:

For daemon scan targets: Ensure you’re logged in via the daemon (e.g., docker login registry.example.com)
For registry scan target: Configure credentials in ~/.docker/config.json or use environment variables (see Private Registries)
Verify credentials: Check that your credentials haven’t expired and have appropriate permissions

Podman connection issues

If Syft can’t connect to Podman:

Start the service: Run podman system service to start the Podman socket
Check socket location: Verify the socket exists at $XDG_RUNTIME_DIR/podman/podman.sock or /run/podman/podman.sock
Use environment variable: Set CONTAINER_HOST to point to your Podman socket location

Slow directory scans

If scanning a directory takes too long:

Exclude unnecessary paths: Use file selection options to skip build artifacts, caches, or virtual environments (see File Selection)
Avoid system directories: Scanning / includes all mounted filesystems; consider scanning specific application directories instead
Check mount points: Ensure you’re not accidentally scanning network mounts or remote filesystems

Next steps

Continue the guide

Next: Learn about Output Formats to understand how to generate SBOMs in different standard formats like SPDX and CycloneDX.

Additional resources:

Authenticate with registries: Set up Private Registry Authentication for scanning private images
Control what gets scanned: Use File Selection to include or exclude specific files
Configure defaults: See Configuration for setting default source preferences

3.1.3 - Output Formats

Choose from multiple SBOM output formats including SPDX, CycloneDX, and Syft’s native JSON format.

TL;DR

Choose a format with -o <format>:
- table (default)
- json (complete data)
- spdx-json/spdx-tag-value
- cyclonedx-json/cyclonedx-xml
Write to file: -o json=sbom.json
Generate multiple formats at once: use multiple -o flags

Syft supports multiple output formats to fit different workflows and requirements by using the -o (or --output) flag:

syft <image> -o <format>

Available formats

`-o ARG`	Description
`table`	A columnar summary (default)
`json`	Native output for Syft—use this to get as much information out of Syft as possible! (see the JSON schema)
`purls`	A line-separated list of Package URLs (PURLs) for all discovered packages
`github-json`	A JSON report conforming to GitHub’s dependency snapshot format
`template`	Lets you specify a custom output format via Go templates (see Templates for more detail)
`text`	A row-oriented, human-and-machine-friendly output

CycloneDX

CycloneDX is an OWASP-maintained industry standard SBOM format.

`-o ARG`	Description
`cyclonedx-json`	A JSON report conforming to the CycloneDX specification
`cyclonedx-xml`	An XML report conforming to the CycloneDX specification

SPDX

SPDX (Software Package Data Exchange) is an ISO/IEC 5962:2021 industry standard SBOM format.

`-o ARG`	Description
`spdx-json`	A JSON report conforming to the SPDX JSON Schema
`spdx-tag-value`	A tag-value formatted report conforming to the SPDX specification

Format versions

Some output formats support multiple schema versions. Specify a version by appending @<version> to the format name:

syft <source> -o <format>@<version>

Examples:

# Use CycloneDX JSON version 1.4
syft <source> -o cyclonedx-json@1.4

# Use SPDX JSON version 2.2
syft <source> -o spdx-json@2.2

# Default to latest version if not specified
syft <source> -o cyclonedx-json

Formats with version support:

cyclonedx-json: 1.2, 1.3, 1.4, 1.5, 1.6, 1.7
cyclonedx-xml: 1.0, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7
spdx-json: 2.2, 2.3, 3.0
spdx-tag-value: 2.1, 2.2, 2.3

When no version is specified, Syft uses the latest supported version of the format.

Format examples

NAME     VERSION  TYPE
busybox  1.38.0   binary

{
  "artifacts": [
    {
      "id": "b42fb417fc668909",
      "name": "busybox",
      "version": "1.38.0",
      "type": "binary",
      "foundBy": "binary-classifier-cataloger",
      "locations": [
        {
          "path": "/bin/busybox",
          "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed",
          "accessPath": "/bin/busybox",
          "annotations": {
            "evidence": "primary"
          }
        }
      ],
      "licenses": [],
      "language": "",
      "cpes": [
        {
          "cpe": "cpe:2.3:a:busybox:busybox:1.38.0:*:*:*:*:*:*:*",
          "source": "nvd-cpe-dictionary"
        }
      ],
      "purl": "pkg:generic/busybox@1.38.0",
      "metadataType": "binary-signature",
      "metadata": {
        "matches": [
          {
            "classifier": "busybox-binary",
            "location": {
              "path": "/bin/busybox",
              "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed",
              "accessPath": "/bin/busybox",
              "annotations": {
                "evidence": "primary"
              }
            }
          }
        ]
      }
    }
  ],
  "artifactRelationships": [
    {
      "parent": "8770c41a081d6f877b47de296ece92874bdc560a554faed767e6fa1f63e6d976",
      "child": "b42fb417fc668909",
      "type": "contains"
    },
    {
      "parent": "b42fb417fc668909",
      "child": "637ef94705caf530",
      "type": "evident-by",
      "metadata": {
        "kind": "primary"
      }
    }
  ],
  "files": [
    {
      "id": "3d0fe85163571426",
      "location": {
        "path": "/bin/[",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "3aa04cfd7a230c3a",
      "location": {
        "path": "/bin/[[",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "91be6851c69f66ac",
      "location": {
        "path": "/bin/acpid",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d759c205b9b8b1cc",
      "location": {
        "path": "/bin/add-shell",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "df9fc04f72fda839",
      "location": {
        "path": "/bin/addgroup",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "254b919f2cdb2b3e",
      "location": {
        "path": "/bin/adduser",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "584cede59ba8cbc4",
      "location": {
        "path": "/bin/adjtimex",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "5a08844b97e1f7d7",
      "location": {
        "path": "/bin/ar",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "de28e9c4f436eb56",
      "location": {
        "path": "/bin/arch",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b10da1d6f45f76f6",
      "location": {
        "path": "/bin/arp",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "db0a11f28254b132",
      "location": {
        "path": "/bin/arping",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f62264befb2746b1",
      "location": {
        "path": "/bin/ascii",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "025298e95462a7d2",
      "location": {
        "path": "/bin/ash",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "dbb372c618bff4aa",
      "location": {
        "path": "/bin/awk",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b442659ef33087c4",
      "location": {
        "path": "/bin/base32",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b1fce11935a8aea6",
      "location": {
        "path": "/bin/base64",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "389985495eb2e1d2",
      "location": {
        "path": "/bin/basename",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f5b83db42d036545",
      "location": {
        "path": "/bin/bc",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6dd6c7f697b0225c",
      "location": {
        "path": "/bin/beep",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "3fc5a80a44b59318",
      "location": {
        "path": "/bin/blkdiscard",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "1bc6535e9cbb77ea",
      "location": {
        "path": "/bin/blkid",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f0408212bfabfab4",
      "location": {
        "path": "/bin/blockdev",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "e57bc33074f2da21",
      "location": {
        "path": "/bin/bootchartd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "205b587fbb940436",
      "location": {
        "path": "/bin/brctl",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "881b8598d2d647d7",
      "location": {
        "path": "/bin/bunzip2",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "637ef94705caf530",
      "location": {
        "path": "/bin/busybox",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "metadata": {
        "mode": 755,
        "type": "RegularFile",
        "userID": 0,
        "groupID": 0,
        "mimeType": "application/x-sharedlib",
        "size": 1041984
      },
      "digests": [
        {
          "algorithm": "sha1",
          "value": "ad043255229d0a1f0a99e1cebaf70d32914c50e1"
        },
        {
          "algorithm": "sha256",
          "value": "c849b73ca587db87c78f3fefce435c9ead2bbd0f3bb66257531eb8235a41ec45"
        }
      ],
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      }
    },
    {
      "id": "debb5ff8f906db74",
      "location": {
        "path": "/bin/bzcat",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "03a3fc2d201fabe7",
      "location": {
        "path": "/bin/bzip2",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d96b5c66183af217",
      "location": {
        "path": "/bin/cal",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "3999ca51a44fd3a4",
      "location": {
        "path": "/bin/cat",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "7c805559e8e47527",
      "location": {
        "path": "/bin/chat",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "48145c06aef0119f",
      "location": {
        "path": "/bin/chattr",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "bd5fa525c3b8e6ec",
      "location": {
        "path": "/bin/chgrp",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "860f77175d584e94",
      "location": {
        "path": "/bin/chmod",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f13ee247b6b716ef",
      "location": {
        "path": "/bin/chown",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "41424d507ba8cb99",
      "location": {
        "path": "/bin/chpasswd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "bf6d0e064552a266",
      "location": {
        "path": "/bin/chpst",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "408124d4a273c216",
      "location": {
        "path": "/bin/chroot",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "7940385640b6079e",
      "location": {
        "path": "/bin/chrt",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "1d2be76285149338",
      "location": {
        "path": "/bin/chvt",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "4a2486006e15e54c",
      "location": {
        "path": "/bin/cksum",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6e1a4770610ec15e",
      "location": {
        "path": "/bin/clear",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d84566228e00e187",
      "location": {
        "path": "/bin/cmp",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "3d86aea4d783119d",
      "location": {
        "path": "/bin/comm",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d89e752129bbe301",
      "location": {
        "path": "/bin/conspy",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "789733c06828d83e",
      "location": {
        "path": "/bin/cp",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "0e2967d850a7d97d",
      "location": {
        "path": "/bin/cpio",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "1b52197203589519",
      "location": {
        "path": "/bin/crc32",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ae9857921e2bb4e8",
      "location": {
        "path": "/bin/crond",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "53f9524c400ef431",
      "location": {
        "path": "/bin/crontab",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "5cc9c0d7f6748655",
      "location": {
        "path": "/bin/cryptpw",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "1bc85789e483ce70",
      "location": {
        "path": "/bin/cttyhack",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "e06b8551d1c1962e",
      "location": {
        "path": "/bin/cut",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b18606b5d277a7ed",
      "location": {
        "path": "/bin/date",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "324bd83b105405c1",
      "location": {
        "path": "/bin/dc",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "e54f5a4d589ab30f",
      "location": {
        "path": "/bin/dd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "20da2aad31c4602d",
      "location": {
        "path": "/bin/deallocvt",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f2448c5227ffd298",
      "location": {
        "path": "/bin/delgroup",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "fe0c3cf03766c008",
      "location": {
        "path": "/bin/deluser",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ed98383121c8e281",
      "location": {
        "path": "/bin/depmod",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "96cddbe74dc755bf",
      "location": {
        "path": "/bin/devmem",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "029812fde648600d",
      "location": {
        "path": "/bin/df",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "bb25f1cdfaa9d3fe",
      "location": {
        "path": "/bin/dhcprelay",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d7aecedf9a67e3d0",
      "location": {
        "path": "/bin/diff",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ce1f5a21c0bb02e0",
      "location": {
        "path": "/bin/dirname",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "120b4aea6889f88b",
      "location": {
        "path": "/bin/dmesg",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "bdc59b76dfbf64b9",
      "location": {
        "path": "/bin/dnsd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ba3cf2e53be5ec58",
      "location": {
        "path": "/bin/dnsdomainname",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "71fa5b0785d556f4",
      "location": {
        "path": "/bin/dos2unix",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f22bd74da92320e1",
      "location": {
        "path": "/bin/dpkg",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d06fbc51631c3cb8",
      "location": {
        "path": "/bin/dpkg-deb",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "49ab90aa68d41dbd",
      "location": {
        "path": "/bin/du",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "8a31e7fc78b066c2",
      "location": {
        "path": "/bin/dumpkmap",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "81b05a43f5c3ca9a",
      "location": {
        "path": "/bin/dumpleases",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "e2430465b4e31056",
      "location": {
        "path": "/bin/echo",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "7c189f34a6dab7bc",
      "location": {
        "path": "/bin/ed",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "de910e21d3c65d7f",
      "location": {
        "path": "/bin/egrep",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "193ca00a316e0043",
      "location": {
        "path": "/bin/eject",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "0499e0629cd7aa1f",
      "location": {
        "path": "/bin/env",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "613b00a71fc63930",
      "location": {
        "path": "/bin/envdir",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "52c628310e10d040",
      "location": {
        "path": "/bin/envuidgid",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "fe915097a7f89c44",
      "location": {
        "path": "/bin/ether-wake",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b900be3c9e235f80",
      "location": {
        "path": "/bin/expand",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "bbfcee96df649e27",
      "location": {
        "path": "/bin/expr",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "3e923c46766158f5",
      "location": {
        "path": "/bin/factor",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "2419ce0aa751f47e",
      "location": {
        "path": "/bin/fakeidentd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "98c92da302d77d7a",
      "location": {
        "path": "/bin/fallocate",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "584e51caff13f935",
      "location": {
        "path": "/bin/false",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "402c4bd9cb09adf2",
      "location": {
        "path": "/bin/fatattr",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "251eb35032428806",
      "location": {
        "path": "/bin/fbset",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "75e115dd79fcfe94",
      "location": {
        "path": "/bin/fbsplash",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "831dff4e29ba2f19",
      "location": {
        "path": "/bin/fdflush",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "c03780931742ce83",
      "location": {
        "path": "/bin/fdformat",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "80e56badb9f38593",
      "location": {
        "path": "/bin/fdisk",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "89ce5dc8e0555c24",
      "location": {
        "path": "/bin/fgconsole",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "c9919efcca49acfb",
      "location": {
        "path": "/bin/fgrep",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b844847c769f2ce5",
      "location": {
        "path": "/bin/find",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "762070cfd45cde77",
      "location": {
        "path": "/bin/findfs",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "a30a8f11f08c3f30",
      "location": {
        "path": "/bin/flock",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "1ac619645baaed08",
      "location": {
        "path": "/bin/fold",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "8fc223441608a1d7",
      "location": {
        "path": "/bin/free",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "378cbe4d33c29361",
      "location": {
        "path": "/bin/freeramdisk",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "de9337f387e481fe",
      "location": {
        "path": "/bin/fsck",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b664d320ab50ca71",
      "location": {
        "path": "/bin/fsck.minix",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "7bcacd1263206f9c",
      "location": {
        "path": "/bin/fsfreeze",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "60b8b773cd17f2be",
      "location": {
        "path": "/bin/fstrim",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "e923554caa27ab14",
      "location": {
        "path": "/bin/fsync",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "fdcc4414491b6486",
      "location": {
        "path": "/bin/ftpd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "0bb6ef8ca281577b",
      "location": {
        "path": "/bin/ftpget",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f081d71b5b813897",
      "location": {
        "path": "/bin/ftpput",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "1e50a61dfd72a3c3",
      "location": {
        "path": "/bin/fuser",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f1f51c7204617746",
      "location": {
        "path": "/bin/getconf",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "full",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "befaeae5d17c778d",
      "location": {
        "path": "/bin/getfattr",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f0025aeaf32b3da3",
      "location": {
        "path": "/bin/getopt",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "87bc433ff3bd287d",
      "location": {
        "path": "/bin/getty",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "5a9ce783d96f552c",
      "location": {
        "path": "/bin/grep",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "845635abc3addfef",
      "location": {
        "path": "/bin/groups",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "2a0c1cf0f442d8e4",
      "location": {
        "path": "/bin/gunzip",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "c6bf8076b8b89db0",
      "location": {
        "path": "/bin/gzip",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "4401fcccfc934295",
      "location": {
        "path": "/bin/halt",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b536f3ccdd6b4894",
      "location": {
        "path": "/bin/hd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "14eebfef771a95b9",
      "location": {
        "path": "/bin/hdparm",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "5ef986d591e43895",
      "location": {
        "path": "/bin/head",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "7600fc6b695cac33",
      "location": {
        "path": "/bin/hexdump",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ccaaf54ef71f810d",
      "location": {
        "path": "/bin/hexedit",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "e59f061a81f08af8",
      "location": {
        "path": "/bin/hostid",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "30ab0da61210d688",
      "location": {
        "path": "/bin/hostname",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b6ddd6c54f292261",
      "location": {
        "path": "/bin/httpd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6d968bdce382d1d2",
      "location": {
        "path": "/bin/hush",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "062b02f123b821f6",
      "location": {
        "path": "/bin/hwclock",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "2dcbcc9818130302",
      "location": {
        "path": "/bin/i2cdetect",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6d76a2c3c67d1050",
      "location": {
        "path": "/bin/i2cdump",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "8155be978d161f7b",
      "location": {
        "path": "/bin/i2cget",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "5136b113f1ae1ce0",
      "location": {
        "path": "/bin/i2cset",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "8093b5582196a170",
      "location": {
        "path": "/bin/i2ctransfer",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "a0f31233fce88601",
      "location": {
        "path": "/bin/id",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "a7569e4cca588c85",
      "location": {
        "path": "/bin/ifconfig",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b0c388a1694e60de",
      "location": {
        "path": "/bin/ifdown",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "967e03003a3dcf59",
      "location": {
        "path": "/bin/ifenslave",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "3a2fe14a63e90abf",
      "location": {
        "path": "/bin/ifplugd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ef5fa45ae63ed694",
      "location": {
        "path": "/bin/ifup",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "de13c2f43a0f3573",
      "location": {
        "path": "/bin/inetd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "65e6b1378cf01f39",
      "location": {
        "path": "/bin/init",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "67c13b1ccd1365da",
      "location": {
        "path": "/bin/inotifyd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "44c3bc3960fbd2ff",
      "location": {
        "path": "/bin/insmod",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "71b83f808fe16d7c",
      "location": {
        "path": "/bin/install",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "76b1df2be239a6a8",
      "location": {
        "path": "/bin/ionice",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ab6a0e9d4e42b269",
      "location": {
        "path": "/bin/iostat",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "17433b2433190193",
      "location": {
        "path": "/bin/ip",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "c70e4030caf1dacb",
      "location": {
        "path": "/bin/ipaddr",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ebd3cb97530c69fb",
      "location": {
        "path": "/bin/ipcalc",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "9909c99941bfdd99",
      "location": {
        "path": "/bin/ipcrm",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "19a912c3573d4243",
      "location": {
        "path": "/bin/ipcs",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "3a0b050b0ad09f44",
      "location": {
        "path": "/bin/iplink",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "c8e33998d2314a15",
      "location": {
        "path": "/bin/ipneigh",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "18cb1d6aeef016a1",
      "location": {
        "path": "/bin/iproute",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "5e4dc75fc2deee36",
      "location": {
        "path": "/bin/iprule",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ae1c4b50dc87d60b",
      "location": {
        "path": "/bin/iptunnel",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "7bf0b20ab0736925",
      "location": {
        "path": "/bin/kbd_mode",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6b54d23b0a773009",
      "location": {
        "path": "/bin/kill",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "65518b5d1a77765b",
      "location": {
        "path": "/bin/killall",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "8abd7d059096a933",
      "location": {
        "path": "/bin/killall5",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "30b19e0a50b35298",
      "location": {
        "path": "/bin/klogd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "58628a8f5d0fb154",
      "location": {
        "path": "/bin/last",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "e57bfccff6e375d7",
      "location": {
        "path": "/bin/less",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d257f25f62aed2d1",
      "location": {
        "path": "/bin/link",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "046c711f767ffb81",
      "location": {
        "path": "/bin/linux32",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "bd3868a90aa80b46",
      "location": {
        "path": "/bin/linux64",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "249f662b9b7b30bb",
      "location": {
        "path": "/bin/linuxrc",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "350a14f1feb018c0",
      "location": {
        "path": "/bin/ln",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "49bf9ed9090c812f",
      "location": {
        "path": "/bin/loadfont",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "5776b90805863690",
      "location": {
        "path": "/bin/loadkmap",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "5e56129ecee67f9b",
      "location": {
        "path": "/bin/logger",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "23840b4c2d52f542",
      "location": {
        "path": "/bin/login",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "558ad65288737fe9",
      "location": {
        "path": "/bin/logname",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "5b453353dc0cb5e4",
      "location": {
        "path": "/bin/logread",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "645151f25b3bedc7",
      "location": {
        "path": "/bin/losetup",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "c4c1cdbec5238528",
      "location": {
        "path": "/bin/lpd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "0846d135e2830b7f",
      "location": {
        "path": "/bin/lpq",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b874ecc2cf1307bc",
      "location": {
        "path": "/bin/lpr",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d21ed27cdf4d0f5b",
      "location": {
        "path": "/bin/ls",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "14c67ec6a1f51841",
      "location": {
        "path": "/bin/lsattr",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b6cbfd364befba9e",
      "location": {
        "path": "/bin/lsblk",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "345940d2a8b8823d",
      "location": {
        "path": "/bin/lsmod",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "30da93d0f684b343",
      "location": {
        "path": "/bin/lsof",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "7ccda817e61594df",
      "location": {
        "path": "/bin/lspci",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "385f9b56dd84752d",
      "location": {
        "path": "/bin/lsscsi",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "eae47271ec71eecb",
      "location": {
        "path": "/bin/lsusb",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "774cf62237bd0968",
      "location": {
        "path": "/bin/lzcat",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "1cb241929297a70d",
      "location": {
        "path": "/bin/lzma",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ff9271ed14bdb64a",
      "location": {
        "path": "/bin/lzop",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "fff5f81c36d10de3",
      "location": {
        "path": "/bin/makedevs",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "cc29ece149ca5118",
      "location": {
        "path": "/bin/makemime",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "a90364706a7de5c9",
      "location": {
        "path": "/bin/man",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f0b0fd7521459395",
      "location": {
        "path": "/bin/md5sum",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "8c95e753a611f583",
      "location": {
        "path": "/bin/mdev",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6a386175872a7799",
      "location": {
        "path": "/bin/mesg",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "2dc5d14c10902cd9",
      "location": {
        "path": "/bin/microcom",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "9a8206faed162b72",
      "location": {
        "path": "/bin/mim",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "092107a66621a6dd",
      "location": {
        "path": "/bin/mkdir",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6ab0c5e53e7e7dd1",
      "location": {
        "path": "/bin/mkdosfs",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "37fff707f3b8c275",
      "location": {
        "path": "/bin/mke2fs",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "91b1b2896bcdb5da",
      "location": {
        "path": "/bin/mkfifo",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "209972e6d82b62d5",
      "location": {
        "path": "/bin/mkfs.ext2",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b975c6f82814108e",
      "location": {
        "path": "/bin/mkfs.minix",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "cc942d73a6ed480a",
      "location": {
        "path": "/bin/mkfs.vfat",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "e4d32a972ba0adfe",
      "location": {
        "path": "/bin/mknod",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6794fba4c1d5c931",
      "location": {
        "path": "/bin/mkpasswd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "e8d1e0b946457366",
      "location": {
        "path": "/bin/mkswap",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d0660502b60d268b",
      "location": {
        "path": "/bin/mktemp",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "9695db05e8e76def",
      "location": {
        "path": "/bin/modinfo",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "28862b7af9dcd014",
      "location": {
        "path": "/bin/modprobe",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "2a3bdcbf3b407a89",
      "location": {
        "path": "/bin/more",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "633945acfc74e455",
      "location": {
        "path": "/bin/mount",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "8c1fa31b7ec3197d",
      "location": {
        "path": "/bin/mountpoint",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "1e9ee4b531583430",
      "location": {
        "path": "/bin/mpstat",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "62c2e5b8756ec9d6",
      "location": {
        "path": "/bin/mt",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "4b542b09c6436f33",
      "location": {
        "path": "/bin/mv",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "31fbe469cbd73bc9",
      "location": {
        "path": "/bin/nameif",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "84d95ff80a388485",
      "location": {
        "path": "/bin/nanddump",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "1907477538f07a5d",
      "location": {
        "path": "/bin/nandwrite",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "21ea4bb6c1523a4c",
      "location": {
        "path": "/bin/nbd-client",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "89685ca4e34fa355",
      "location": {
        "path": "/bin/nc",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "2a6a808a43f921cc",
      "location": {
        "path": "/bin/netstat",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "147a48fbce918cbf",
      "location": {
        "path": "/bin/nice",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6baaf4e3201a9c00",
      "location": {
        "path": "/bin/nl",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "e04c343a7e1ab10e",
      "location": {
        "path": "/bin/nmeter",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "73047a8c6a2b2bcc",
      "location": {
        "path": "/bin/nohup",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d07a71bbb90ee3d3",
      "location": {
        "path": "/bin/nologin",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "806c1a61a44055fb",
      "location": {
        "path": "/bin/nproc",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "239d9bc22981f506",
      "location": {
        "path": "/bin/nsenter",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "a736c726616a3d62",
      "location": {
        "path": "/bin/nslookup",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d5d865a5058499a7",
      "location": {
        "path": "/bin/ntpd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "2d786e1f45b1556b",
      "location": {
        "path": "/bin/od",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f000d622b9b52c60",
      "location": {
        "path": "/bin/openvt",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "bd080ff5eaa40cb1",
      "location": {
        "path": "/bin/partprobe",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "943d3ea5769e6b46",
      "location": {
        "path": "/bin/passwd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ae3ed32eeb1fbd24",
      "location": {
        "path": "/bin/paste",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f5694e00bd33c573",
      "location": {
        "path": "/bin/patch",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "8878b9a92e01b4b9",
      "location": {
        "path": "/bin/pgrep",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "5c2bfbbfb18f2ef1",
      "location": {
        "path": "/bin/pidof",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "4fff12f3c667121c",
      "location": {
        "path": "/bin/ping",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "a97dfe028de502c7",
      "location": {
        "path": "/bin/ping6",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "74553e22b20f2233",
      "location": {
        "path": "/bin/pipe_progress",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "0b346e014a0902db",
      "location": {
        "path": "/bin/pivot_root",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f1242ea13f73e592",
      "location": {
        "path": "/bin/pkill",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "bacb4ef5ab6a7df4",
      "location": {
        "path": "/bin/pmap",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "de6572fbdcc7e7fb",
      "location": {
        "path": "/bin/popmaildir",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "90ea8077147403d6",
      "location": {
        "path": "/bin/poweroff",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "cd98d8b234738d9c",
      "location": {
        "path": "/bin/powertop",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "7f945ec4c5e42e18",
      "location": {
        "path": "/bin/printenv",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "28bff72f05d93ad8",
      "location": {
        "path": "/bin/printf",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "a7116cba77714f5e",
      "location": {
        "path": "/bin/ps",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "1b84e4a4edd50c21",
      "location": {
        "path": "/bin/pscan",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "bd85eecfa515a6a6",
      "location": {
        "path": "/bin/pstree",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "48e3fc6ad59b14de",
      "location": {
        "path": "/bin/pwd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d28e1d89f0c75197",
      "location": {
        "path": "/bin/pwdx",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b9717db4a7a323e6",
      "location": {
        "path": "/bin/raidautorun",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "0487628263c9e7df",
      "location": {
        "path": "/bin/rdate",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "032a2932ba0804cc",
      "location": {
        "path": "/bin/rdev",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "4b3b5d4184ea085e",
      "location": {
        "path": "/bin/readahead",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d58786fe6a96080f",
      "location": {
        "path": "/bin/readlink",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6dd3e0327079b3e8",
      "location": {
        "path": "/bin/readprofile",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "8a8c632998f39a5d",
      "location": {
        "path": "/bin/realpath",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6e7309b98de365be",
      "location": {
        "path": "/bin/reboot",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "c5d91fcdafa1c962",
      "location": {
        "path": "/bin/reformime",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "1d686e203effa794",
      "location": {
        "path": "/bin/remove-shell",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "c623b9cb7de36c19",
      "location": {
        "path": "/bin/renice",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "cdc451e32a35a92e",
      "location": {
        "path": "/bin/reset",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "339b8d0fbeadeb70",
      "location": {
        "path": "/bin/resize",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6df838457918479a",
      "location": {
        "path": "/bin/resume",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6019d2b319e218c9",
      "location": {
        "path": "/bin/rev",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6657afe039159deb",
      "location": {
        "path": "/bin/rm",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "7c015d49e718f376",
      "location": {
        "path": "/bin/rmdir",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "c6a4c7dd58bfcab0",
      "location": {
        "path": "/bin/rmmod",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d1a46b20f63a0186",
      "location": {
        "path": "/bin/route",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "bdfeb2332eaac81b",
      "location": {
        "path": "/bin/rpm",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "a0ceb6abc71e3b37",
      "location": {
        "path": "/bin/rpm2cpio",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ddebdb437a77ef88",
      "location": {
        "path": "/bin/rtcwake",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "68c89ce56f5ee025",
      "location": {
        "path": "/bin/run-init",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "8a96ea954d4d0609",
      "location": {
        "path": "/bin/run-parts",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "31b5a540f2cc2622",
      "location": {
        "path": "/bin/runlevel",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "25391ca0235d40df",
      "location": {
        "path": "/bin/runsv",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "bcea27b1a87ace9e",
      "location": {
        "path": "/bin/runsvdir",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "a76abc30be9ed5b2",
      "location": {
        "path": "/bin/rx",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "c2c666796265176c",
      "location": {
        "path": "/bin/script",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "1ce3de01c4ade92a",
      "location": {
        "path": "/bin/scriptreplay",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "7579a5db28f856f8",
      "location": {
        "path": "/bin/sed",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "70b78c0dd24546a5",
      "location": {
        "path": "/bin/seedrng",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "20eb3c033b6d3cb8",
      "location": {
        "path": "/bin/sendmail",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "e63f6812f94aea24",
      "location": {
        "path": "/bin/seq",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "74a5a0ad35c48731",
      "location": {
        "path": "/bin/setarch",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "337b6747ed4f8e53",
      "location": {
        "path": "/bin/setconsole",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "0b2be47a9f4c3aa9",
      "location": {
        "path": "/bin/setfattr",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "17c14e21557ddf43",
      "location": {
        "path": "/bin/setfont",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "8e22849ac65ca530",
      "location": {
        "path": "/bin/setkeycodes",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "e9ab785304a76b27",
      "location": {
        "path": "/bin/setlogcons",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d8d7701573af474e",
      "location": {
        "path": "/bin/setpriv",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "1563c45a343f86f0",
      "location": {
        "path": "/bin/setserial",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6e966444290b7384",
      "location": {
        "path": "/bin/setsid",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d84ac2440b0d06a7",
      "location": {
        "path": "/bin/setuidgid",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ba7449b7da42ff0f",
      "location": {
        "path": "/bin/sh",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d54e86a043d56696",
      "location": {
        "path": "/bin/sha1sum",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f1f1b8125abc49c2",
      "location": {
        "path": "/bin/sha256sum",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d2e2d324889b32c9",
      "location": {
        "path": "/bin/sha384sum",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "7ccfc1a8e1b85827",
      "location": {
        "path": "/bin/sha3sum",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "43e559c8ef831ca5",
      "location": {
        "path": "/bin/sha512sum",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "9df131edd84d4b52",
      "location": {
        "path": "/bin/showkey",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "2c2411bb7735198a",
      "location": {
        "path": "/bin/shred",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "2e4f8fe2fa25e5d8",
      "location": {
        "path": "/bin/shuf",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "a8ce5df2e4a7c95b",
      "location": {
        "path": "/bin/slattach",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "9fd8a331478a7256",
      "location": {
        "path": "/bin/sleep",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "e67bf29e153ef852",
      "location": {
        "path": "/bin/smemcap",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "8c6f2b09f0a44897",
      "location": {
        "path": "/bin/softlimit",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "c925ef303bf11ad3",
      "location": {
        "path": "/bin/sort",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "5042c6ac657067a9",
      "location": {
        "path": "/bin/split",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "08088389748837f2",
      "location": {
        "path": "/bin/ssl_client",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "3ef70e5c76555ad5",
      "location": {
        "path": "/bin/ssl_server",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "bb707c598fe3bd5a",
      "location": {
        "path": "/bin/start-stop-daemon",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f6d1b0a5f9f5ed16",
      "location": {
        "path": "/bin/stat",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b4420f624069e02b",
      "location": {
        "path": "/bin/strings",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "600b48e2e90ec6bc",
      "location": {
        "path": "/bin/stty",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "71e19026ac8d319d",
      "location": {
        "path": "/bin/su",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d5c26a8b1c56c2c8",
      "location": {
        "path": "/bin/sulogin",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "cc54f32c143b653a",
      "location": {
        "path": "/bin/sum",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ac826978f6995a31",
      "location": {
        "path": "/bin/sv",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "0ef2e96ba8cf84ad",
      "location": {
        "path": "/bin/svc",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "863ee0ec24e98eb4",
      "location": {
        "path": "/bin/svlogd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "cd717b1a2d74f3d8",
      "location": {
        "path": "/bin/svok",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "23ffbc7df9a50e02",
      "location": {
        "path": "/bin/swapoff",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "51c5266e932fa6cb",
      "location": {
        "path": "/bin/swapon",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "bd1019e1dfb017ed",
      "location": {
        "path": "/bin/switch_root",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "8dab709c7050f177",
      "location": {
        "path": "/bin/sync",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "7da9d68fab337314",
      "location": {
        "path": "/bin/sysctl",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ace19b2c0163dcce",
      "location": {
        "path": "/bin/syslogd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "8872201b37431de3",
      "location": {
        "path": "/bin/tac",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d1b4eedd181c0d08",
      "location": {
        "path": "/bin/tail",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "995c9997d359ee5b",
      "location": {
        "path": "/bin/tar",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "fa9ee4fa2fbcf61c",
      "location": {
        "path": "/bin/taskset",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "0d467ae917d80c8d",
      "location": {
        "path": "/bin/tc",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6d80b8ef998c5497",
      "location": {
        "path": "/bin/tcpsvd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "095e39df937e7a11",
      "location": {
        "path": "/bin/tee",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "5e9901fa010db423",
      "location": {
        "path": "/bin/telnet",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "456967cab2e3e612",
      "location": {
        "path": "/bin/telnetd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "8f09d7c53d9e000b",
      "location": {
        "path": "/bin/test",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ccf8997b542595d1",
      "location": {
        "path": "/bin/tftp",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "5474ee6620d733bd",
      "location": {
        "path": "/bin/tftpd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "47bce9e6d8d8105f",
      "location": {
        "path": "/bin/time",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "521f7463419bfc1a",
      "location": {
        "path": "/bin/timeout",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6c86c4ca36a84104",
      "location": {
        "path": "/bin/top",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "e6590098db1081fb",
      "location": {
        "path": "/bin/touch",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "086125c636d60b40",
      "location": {
        "path": "/bin/tr",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f8b5c5c4fc654fa3",
      "location": {
        "path": "/bin/traceroute",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b746455e1ced1d81",
      "location": {
        "path": "/bin/traceroute6",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ff32115dfe8f143e",
      "location": {
        "path": "/bin/tree",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "01fbffc6cf66a83e",
      "location": {
        "path": "/bin/true",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "c5c0051ea543f1e7",
      "location": {
        "path": "/bin/truncate",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "c8e563d4578356ee",
      "location": {
        "path": "/bin/ts",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "35ec820854ac1986",
      "location": {
        "path": "/bin/tsort",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "2bed791f12251116",
      "location": {
        "path": "/bin/tty",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "a473d109c948ff89",
      "location": {
        "path": "/bin/ttysize",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "e24b9e96a1596fba",
      "location": {
        "path": "/bin/tunctl",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6d129a02eda9085a",
      "location": {
        "path": "/bin/ubiattach",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ddede2930af785a7",
      "location": {
        "path": "/bin/ubidetach",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "79ad54351f59c570",
      "location": {
        "path": "/bin/ubimkvol",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "5501a8a9c164f78f",
      "location": {
        "path": "/bin/ubirename",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "b86172d38791f986",
      "location": {
        "path": "/bin/ubirmvol",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "86915d281db90710",
      "location": {
        "path": "/bin/ubirsvol",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "9851b45232305beb",
      "location": {
        "path": "/bin/ubiupdatevol",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "72c95eb8cfd2d5a7",
      "location": {
        "path": "/bin/udhcpc",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "e1bd1a3364770706",
      "location": {
        "path": "/bin/udhcpc6",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "1f754dac42c0d7e0",
      "location": {
        "path": "/bin/udhcpd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "5f6d10c3d7b3ad87",
      "location": {
        "path": "/bin/udpsvd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "2e03ed396ff155fc",
      "location": {
        "path": "/bin/uevent",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "272fb87eef27b7a0",
      "location": {
        "path": "/bin/umount",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d1510d4075c8e1e5",
      "location": {
        "path": "/bin/uname",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "4e5eb356a614104c",
      "location": {
        "path": "/bin/unexpand",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "708086442b0c973a",
      "location": {
        "path": "/bin/uniq",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "238bd76d308a2aa3",
      "location": {
        "path": "/bin/unix2dos",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "858f1fb0b4c8be23",
      "location": {
        "path": "/bin/unlink",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "bc00f199747b9d63",
      "location": {
        "path": "/bin/unlzma",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "650c329692a51e20",
      "location": {
        "path": "/bin/unshare",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "a459054a7dd4bc18",
      "location": {
        "path": "/bin/unxz",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "baab318d2af554d8",
      "location": {
        "path": "/bin/unzip",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "985025c5afd50019",
      "location": {
        "path": "/bin/uptime",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "4d3cb9300b595231",
      "location": {
        "path": "/bin/users",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "fe0af6b0484ba795",
      "location": {
        "path": "/bin/usleep",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f14bda7e882e464d",
      "location": {
        "path": "/bin/uudecode",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f5705a4f6778d1ef",
      "location": {
        "path": "/bin/uuencode",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "cd622cf622913cdf",
      "location": {
        "path": "/bin/uuidgen",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "c4cde3bbfd7e87d8",
      "location": {
        "path": "/bin/vconfig",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "443a0b3038cbdeed",
      "location": {
        "path": "/bin/vi",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "65f022e8020252e3",
      "location": {
        "path": "/bin/vlock",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "4490f2cd95c5a6af",
      "location": {
        "path": "/bin/vmstat",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ff2fad4dffbde0d0",
      "location": {
        "path": "/bin/volname",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "f3a29b73e2ff3ed4",
      "location": {
        "path": "/bin/w",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d5746de0f945bb52",
      "location": {
        "path": "/bin/wall",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "c051db121110f405",
      "location": {
        "path": "/bin/watch",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "4b32dc87dae3c312",
      "location": {
        "path": "/bin/watchdog",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "8cf6369024a050e2",
      "location": {
        "path": "/bin/wc",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6d2b889cd047f81b",
      "location": {
        "path": "/bin/wget",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "ba414c49a4cf0243",
      "location": {
        "path": "/bin/which",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "4b044616264d55b4",
      "location": {
        "path": "/bin/who",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "176c2393b77c4455",
      "location": {
        "path": "/bin/whoami",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "7d294517bda4c960",
      "location": {
        "path": "/bin/whois",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "a051c44cb99ad1f7",
      "location": {
        "path": "/bin/xargs",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "77d0f471b4d804a1",
      "location": {
        "path": "/bin/xxd",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "2a7f0d3771d1c87e",
      "location": {
        "path": "/bin/xz",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "969a674bb52ff55b",
      "location": {
        "path": "/bin/xzcat",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "1f8d5789c601924d",
      "location": {
        "path": "/bin/yes",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "a2e3fc00942b1a9e",
      "location": {
        "path": "/bin/zcat",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "a171a979777326be",
      "location": {
        "path": "/bin/zcip",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["libm.so.6", "libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "partial",
          "pie": true,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6401940b3ba37775",
      "location": {
        "path": "/lib/ld-linux-x86-64.so.2",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": [],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "full",
          "pie": false,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "6243d7fbbbe74455",
      "location": {
        "path": "/lib/libc.so.6",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": true,
        "importedLibraries": ["ld-linux-x86-64.so.2"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": true,
          "nx": true,
          "relRO": "full",
          "pie": false,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "7dc85f4c48ba2367",
      "location": {
        "path": "/lib/libm.so.6",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": false,
        "importedLibraries": ["libc.so.6", "ld-linux-x86-64.so.2"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": true,
          "nx": true,
          "relRO": "full",
          "pie": false,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "0c7201d705137ee8",
      "location": {
        "path": "/lib/libnss_compat.so.2",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": false,
        "importedLibraries": ["libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": true,
          "nx": true,
          "relRO": "full",
          "pie": false,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "d82051fcd3641435",
      "location": {
        "path": "/lib/libnss_dns.so.2",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": false,
        "importedLibraries": ["libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "full",
          "pie": false,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "c1f35fbdad4711ab",
      "location": {
        "path": "/lib/libnss_files.so.2",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": false,
        "importedLibraries": ["libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "full",
          "pie": false,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "658eba943093af1a",
      "location": {
        "path": "/lib/libnss_hesiod.so.2",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": false,
        "importedLibraries": ["libresolv.so.2", "libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": true,
          "nx": true,
          "relRO": "full",
          "pie": false,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "2765dbaab7c5776a",
      "location": {
        "path": "/lib/libpthread.so.0",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": false,
        "importedLibraries": ["libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": false,
          "nx": true,
          "relRO": "full",
          "pie": false,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    },
    {
      "id": "4533d91ccb7999b4",
      "location": {
        "path": "/lib/libresolv.so.2",
        "layerID": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "executable": {
        "format": "elf",
        "hasExports": true,
        "hasEntrypoint": false,
        "importedLibraries": ["libc.so.6"],
        "elfSecurityFeatures": {
          "symbolTableStripped": true,
          "stackCanary": true,
          "nx": true,
          "relRO": "full",
          "pie": false,
          "dso": true,
          "safeStack": false
        }
      },
      "unknowns": ["unknowns-labeler: no package identified in executable file"]
    }
  ],
  "source": {
    "id": "8770c41a081d6f877b47de296ece92874bdc560a554faed767e6fa1f63e6d976",
    "name": "busybox",
    "version": "sha256:8770c41a081d6f877b47de296ece92874bdc560a554faed767e6fa1f63e6d976",
    "type": "image",
    "metadata": {
      "userInput": "busybox:latest",
      "imageID": "sha256:aaef90e065235eb0b2d9938be85d1b81add2902cf89affe2cdfa19be33476ac0",
      "manifestDigest": "sha256:8770c41a081d6f877b47de296ece92874bdc560a554faed767e6fa1f63e6d976",
      "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
      "tags": ["busybox:latest"],
      "imageSize": 4445814,
      "layers": [
        {
          "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
          "digest": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed",
          "size": 4445814
        }
      ],
      "manifest": "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",
      "config": "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",
      "repoDigests": ["busybox@sha256:fd7dc98638c8e305f4dc34e979f1c0fdfdcaeb0fbf8fcff77ae834b6da3d7e6e"],
      "architecture": "amd64",
      "os": "linux"
    }
  },
  "distro": {
    "prettyName": "BusyBox v1.38.0",
    "name": "busybox",
    "id": "busybox",
    "idLike": ["busybox"],
    "version": "1.38.0",
    "versionID": "1.38.0"
  },
  "descriptor": {
    "name": "syft",
    "version": "1.54.0",
    "configuration": {
      "catalogers": {
        "requested": {
          "default": ["image", "file"]
        },
        "used": [
          "alpm-db-cataloger",
          "apk-db-cataloger",
          "apple-app-bundle-cataloger",
          "binary-classifier-cataloger",
          "bitnami-cataloger",
          "cargo-auditable-binary-cataloger",
          "conan-info-cataloger",
          "dotnet-deps-binary-cataloger",
          "dotnet-packages-lock-cataloger",
          "dpkg-db-cataloger",
          "elf-binary-package-cataloger",
          "file-content-cataloger",
          "file-digest-cataloger",
          "file-executable-cataloger",
          "file-metadata-cataloger",
          "gguf-cataloger",
          "go-module-binary-cataloger",
          "graalvm-native-image-cataloger",
          "homebrew-cataloger",
          "java-archive-cataloger",
          "java-jvm-cataloger",
          "javascript-package-cataloger",
          "linux-kernel-cataloger",
          "lua-rock-cataloger",
          "nix-cataloger",
          "pe-binary-package-cataloger",
          "perl-cpan-installed-cataloger",
          "php-composer-installed-cataloger",
          "php-interpreter-cataloger",
          "php-pear-serialized-cataloger",
          "portage-cataloger",
          "python-installed-package-cataloger",
          "r-package-cataloger",
          "rpm-db-cataloger",
          "ruby-installed-gemspec-cataloger",
          "safetensors-cataloger",
          "snap-cataloger",
          "wordpress-plugins-cataloger"
        ]
      },
      "data-generation": {
        "generate-cpes": true
      },
      "files": {
        "content": {
          "globs": null,
          "skip-files-above-size": 0
        },
        "hashers": ["sha-1", "sha-256"],
        "selection": "owned-by-package"
      },
      "licenses": {
        "coverage": 75,
        "include-content": "none"
      },
      "packages": {
        "binary": [
          "python-binary",
          "python-binary-lib",
          "pypy-binary-lib",
          "go-binary",
          "julia-binary",
          "julia-binary",
          "helm",
          "redis-binary",
          "valkey-binary",
          "nodejs-binary",
          "busybox-binary",
          "util-linux-binary",
          "haproxy-binary",
          "perl-binary",
          "php-composer-binary",
          "httpd-binary",
          "memcached-binary",
          "traefik-binary",
          "arangodb-binary",
          "postgresql-binary",
          "mysql-binary",
          "mysql-binary",
          "mysql-binary",
          "mysqld-mysql-cluster-legacy-binary",
          "mysqld-binary",
          "ndbd-binary",
          "ndbmtd-binary",
          "ndb_mgmd-binary",
          "xtrabackup-binary",
          "mariadb-binary",
          "rust-standard-library-linux",
          "rust-standard-library-macos",
          "ruby-binary",
          "erlang-binary",
          "erlang-alpine-binary",
          "erlang-library",
          "swipl-binary",
          "dart-binary",
          "deno-binary",
          "bun-binary",
          "haskell-ghc-binary",
          "haskell-cabal-binary",
          "haskell-stack-binary",
          "consul-binary",
          "hashicorp-vault-binary",
          "nginx-binary",
          "bash-binary",
          "openssl-binary",
          "openldap-search-binary",
          "qt-qtbase-lib",
          "gcc-binary",
          "fluent-bit-binary",
          "wordpress-cli-binary",
          "curl-binary",
          "lighttpd-binary",
          "proftpd-binary",
          "zstd-binary",
          "xz-binary",
          "gzip-binary",
          "sqlcipher-binary",
          "jq-binary",
          "chrome-binary",
          "firefox-binary",
          "ffmpeg-binary",
          "ffmpeg-library",
          "ffmpeg-library",
          "elixir-binary",
          "elixir-library",
          "istio-binary",
          "istio-binary",
          "grafana-binary",
          "grafana-binary",
          "envoy-binary",
          "mongodb-binary",
          "ingress-nginx-binary",
          "filebeat-binary",
          "metricbeat-binary",
          "heartbeat-binary",
          "packetbeat-binary",
          "auditbeat-binary",
          "elastic-agent-binary",
          "krb5-library",
          "heimdal-krb5-library",
          "java-binary",
          "java-jdb-binary"
        ],
        "cpp": {
          "vcpkg-allow-git-clone": false
        },
        "dotnet": {
          "dep-packages-must-claim-dll": true,
          "dep-packages-must-have-dll": false,
          "exclude-project-references": true,
          "propagate-dll-claims-to-parents": true,
          "relax-dll-claims-when-bundling-detected": true
        },
        "golang": {
          "capture-symbols": "none",
          "local-mod-cache-dir": "/root/go/pkg/mod",
          "local-vendor-dir": "",
          "main-module-version": {
            "from-build-settings": true,
            "from-contents": false,
            "from-ld-flags": true
          },
          "proxies": ["https://proxy.golang.org", "direct"],
          "search-local-mod-cache-licenses": false,
          "search-local-vendor-licenses": false,
          "search-remote-licenses": false,
          "use-packages-lib": true
        },
        "java-archive": {
          "include-indexed-archives": true,
          "include-unindexed-archives": false,
          "maven-base-url": "https://repo1.maven.org/maven2",
          "maven-localrepository-dir": "/root/.m2/repository",
          "max-parent-recursive-depth": 0,
          "resolve-transitive-dependencies": false,
          "use-maven-localrepository": false,
          "use-network": false
        },
        "javascript": {
          "include-dev-dependencies": false,
          "npm-base-url": "https://registry.npmjs.org",
          "search-remote-licenses": false
        },
        "linux-kernel": {
          "catalog-modules": true
        },
        "nix": {
          "capture-owned-files": false
        },
        "python": {
          "guess-unpinned-requirements": false,
          "pypi-base-url": "https://pypi.org/pypi",
          "search-remote-licenses": false
        }
      },
      "relationships": {
        "exclude-binary-packages-with-file-ownership-overlap": true,
        "package-file-ownership": true,
        "package-file-ownership-overlap": true
      },
      "search": {
        "scope": "squashed"
      }
    }
  },
  "schema": {
    "version": "16.1.11",
    "url": "https://raw.githubusercontent.com/anchore/syft/main/schema/json/schema-16.1.11.json"
  }
}

pkg:generic/busybox@1.38.0

{
  "$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:6cbd8e76-ae8c-4e65-8bd9-e8d5a8bb53ff",
  "version": 1,
  "metadata": {
    "timestamp": "2026-10-02T02:15:52Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "author": "anchore",
          "name": "syft",
          "version": "1.54.0"
        }
      ]
    },
    "component": {
      "bom-ref": "faf1a1fdc47058b6",
      "type": "container",
      "name": "busybox",
      "version": "sha256:8770c41a081d6f877b47de296ece92874bdc560a554faed767e6fa1f63e6d976"
    }
  },
  "components": [
    {
      "bom-ref": "pkg:generic/busybox@1.38.0?package-id=b42fb417fc668909",
      "type": "application",
      "name": "busybox",
      "version": "1.38.0",
      "cpe": "cpe:2.3:a:busybox:busybox:1.38.0:*:*:*:*:*:*:*",
      "purl": "pkg:generic/busybox@1.38.0",
      "properties": [
        {
          "name": "syft:package:foundBy",
          "value": "binary-classifier-cataloger"
        },
        {
          "name": "syft:package:type",
          "value": "binary"
        },
        {
          "name": "syft:package:metadataType",
          "value": "binary-signature"
        },
        {
          "name": "syft:location:0:layerID",
          "value": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
        },
        {
          "name": "syft:location:0:path",
          "value": "/bin/busybox"
        }
      ]
    },
    {
      "bom-ref": "os:busybox@1.38.0",
      "type": "operating-system",
      "name": "busybox",
      "version": "1.38.0",
      "description": "BusyBox v1.38.0",
      "swid": {
        "tagId": "busybox",
        "name": "busybox",
        "version": "1.38.0"
      },
      "properties": [
        {
          "name": "syft:distro:extendedSupport",
          "value": "false"
        },
        {
          "name": "syft:distro:id",
          "value": "busybox"
        },
        {
          "name": "syft:distro:idLike:0",
          "value": "busybox"
        },
        {
          "name": "syft:distro:prettyName",
          "value": "BusyBox v1.38.0"
        },
        {
          "name": "syft:distro:versionID",
          "value": "1.38.0"
        }
      ]
    },
    {
      "bom-ref": "637ef94705caf530",
      "type": "file",
      "name": "/bin/busybox",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ad043255229d0a1f0a99e1cebaf70d32914c50e1"
        },
        {
          "alg": "SHA-256",
          "content": "c849b73ca587db87c78f3fefce435c9ead2bbd0f3bb66257531eb8235a41ec45"
        }
      ]
    }
  ]
}

<?xml version="1.0" encoding="UTF-8"?>
<bom xmlns="http://cyclonedx.org/schema/bom/1.7" serialNumber="urn:uuid:0d66d303-9089-4aa6-8284-e13a4f76643e" version="1">
  <metadata>
    <timestamp>2026-10-02T02:15:52Z</timestamp>
    <tools>
      <components>
        <component type="application">
          <author>anchore</author>
          <name>syft</name>
          <version>1.54.0</version>
        </component>
      </components>
    </tools>
    <component bom-ref="faf1a1fdc47058b6" type="container">
      <name>busybox</name>
      <version>sha256:8770c41a081d6f877b47de296ece92874bdc560a554faed767e6fa1f63e6d976</version>
    </component>
  </metadata>
  <components>
    <component bom-ref="pkg:generic/busybox@1.38.0?package-id=b42fb417fc668909" type="application">
      <name>busybox</name>
      <version>1.38.0</version>
      <cpe>cpe:2.3:a:busybox:busybox:1.38.0:*:*:*:*:*:*:*</cpe>
      <purl>pkg:generic/busybox@1.38.0</purl>
      <properties>
        <property name="syft:package:foundBy">binary-classifier-cataloger</property>
        <property name="syft:package:type">binary</property>
        <property name="syft:package:metadataType">binary-signature</property>
        <property name="syft:location:0:layerID">sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed</property>
        <property name="syft:location:0:path">/bin/busybox</property>
      </properties>
    </component>
    <component bom-ref="os:busybox@1.38.0" type="operating-system">
      <name>busybox</name>
      <version>1.38.0</version>
      <description>BusyBox v1.38.0</description>
      <swid tagId="busybox" name="busybox" version="1.38.0"></swid>
      <properties>
        <property name="syft:distro:extendedSupport">false</property>
        <property name="syft:distro:id">busybox</property>
        <property name="syft:distro:idLike:0">busybox</property>
        <property name="syft:distro:prettyName">BusyBox v1.38.0</property>
        <property name="syft:distro:versionID">1.38.0</property>
      </properties>
    </component>
    <component bom-ref="637ef94705caf530" type="file">
      <name>/bin/busybox</name>
      <hashes>
        <hash alg="SHA-1">ad043255229d0a1f0a99e1cebaf70d32914c50e1</hash>
        <hash alg="SHA-256">c849b73ca587db87c78f3fefce435c9ead2bbd0f3bb66257531eb8235a41ec45</hash>
      </hashes>
    </component>
  </components>
</bom>

{
  "spdxVersion": "SPDX-2.3",
  "dataLicense": "CC0-1.0",
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "busybox",
  "documentNamespace": "https://anchore.com/syft/image/busybox-462a7c20-78dd-4212-97ec-412955b7d412",
  "creationInfo": {
    "licenseListVersion": "3.29",
    "creators": ["Organization: Anchore, Inc", "Tool: syft-1.54.0"],
    "created": "2026-10-02T02:15:52Z"
  },
  "packages": [
    {
      "name": "busybox",
      "SPDXID": "SPDXRef-Package-binary-busybox-b42fb417fc668909",
      "versionInfo": "1.38.0",
      "supplier": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "filesAnalyzed": false,
      "sourceInfo": "acquired package info from the following paths: /bin/busybox",
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "SECURITY",
          "referenceType": "cpe23Type",
          "referenceLocator": "cpe:2.3:a:busybox:busybox:1.38.0:*:*:*:*:*:*:*"
        },
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:generic/busybox@1.38.0"
        }
      ]
    },
    {
      "name": "busybox",
      "SPDXID": "SPDXRef-DocumentRoot-Image-busybox",
      "versionInfo": "sha256:8770c41a081d6f877b47de296ece92874bdc560a554faed767e6fa1f63e6d976",
      "supplier": "NOASSERTION",
      "downloadLocation": "NOASSERTION",
      "filesAnalyzed": false,
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8770c41a081d6f877b47de296ece92874bdc560a554faed767e6fa1f63e6d976"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseDeclared": "NOASSERTION",
      "copyrightText": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE-MANAGER",
          "referenceType": "purl",
          "referenceLocator": "pkg:oci/busybox@sha256%3A8770c41a081d6f877b47de296ece92874bdc560a554faed767e6fa1f63e6d976?arch=amd64&tag=latest"
        }
      ],
      "primaryPackagePurpose": "CONTAINER"
    }
  ],
  "files": [
    {
      "fileName": "bin/[",
      "SPDXID": "SPDXRef-File-bin---3d0fe85163571426",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/[[",
      "SPDXID": "SPDXRef-File-bin----3aa04cfd7a230c3a",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/acpid",
      "SPDXID": "SPDXRef-File-bin-acpid-91be6851c69f66ac",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/add-shell",
      "SPDXID": "SPDXRef-File-bin-add-shell-d759c205b9b8b1cc",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/addgroup",
      "SPDXID": "SPDXRef-File-bin-addgroup-df9fc04f72fda839",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/adduser",
      "SPDXID": "SPDXRef-File-bin-adduser-254b919f2cdb2b3e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/adjtimex",
      "SPDXID": "SPDXRef-File-bin-adjtimex-584cede59ba8cbc4",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ar",
      "SPDXID": "SPDXRef-File-bin-ar-5a08844b97e1f7d7",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/arch",
      "SPDXID": "SPDXRef-File-bin-arch-de28e9c4f436eb56",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/arp",
      "SPDXID": "SPDXRef-File-bin-arp-b10da1d6f45f76f6",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/arping",
      "SPDXID": "SPDXRef-File-bin-arping-db0a11f28254b132",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ascii",
      "SPDXID": "SPDXRef-File-bin-ascii-f62264befb2746b1",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ash",
      "SPDXID": "SPDXRef-File-bin-ash-025298e95462a7d2",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/awk",
      "SPDXID": "SPDXRef-File-bin-awk-dbb372c618bff4aa",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/base32",
      "SPDXID": "SPDXRef-File-bin-base32-b442659ef33087c4",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/base64",
      "SPDXID": "SPDXRef-File-bin-base64-b1fce11935a8aea6",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/basename",
      "SPDXID": "SPDXRef-File-bin-basename-389985495eb2e1d2",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/bc",
      "SPDXID": "SPDXRef-File-bin-bc-f5b83db42d036545",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/beep",
      "SPDXID": "SPDXRef-File-bin-beep-6dd6c7f697b0225c",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/blkdiscard",
      "SPDXID": "SPDXRef-File-bin-blkdiscard-3fc5a80a44b59318",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/blkid",
      "SPDXID": "SPDXRef-File-bin-blkid-1bc6535e9cbb77ea",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/blockdev",
      "SPDXID": "SPDXRef-File-bin-blockdev-f0408212bfabfab4",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/bootchartd",
      "SPDXID": "SPDXRef-File-bin-bootchartd-e57bc33074f2da21",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/brctl",
      "SPDXID": "SPDXRef-File-bin-brctl-205b587fbb940436",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/bunzip2",
      "SPDXID": "SPDXRef-File-bin-bunzip2-881b8598d2d647d7",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/busybox",
      "SPDXID": "SPDXRef-File-bin-busybox-637ef94705caf530",
      "fileTypes": ["APPLICATION", "BINARY"],
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "ad043255229d0a1f0a99e1cebaf70d32914c50e1"
        },
        {
          "algorithm": "SHA256",
          "checksumValue": "c849b73ca587db87c78f3fefce435c9ead2bbd0f3bb66257531eb8235a41ec45"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/bzcat",
      "SPDXID": "SPDXRef-File-bin-bzcat-debb5ff8f906db74",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/bzip2",
      "SPDXID": "SPDXRef-File-bin-bzip2-03a3fc2d201fabe7",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/cal",
      "SPDXID": "SPDXRef-File-bin-cal-d96b5c66183af217",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/cat",
      "SPDXID": "SPDXRef-File-bin-cat-3999ca51a44fd3a4",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/chat",
      "SPDXID": "SPDXRef-File-bin-chat-7c805559e8e47527",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/chattr",
      "SPDXID": "SPDXRef-File-bin-chattr-48145c06aef0119f",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/chgrp",
      "SPDXID": "SPDXRef-File-bin-chgrp-bd5fa525c3b8e6ec",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/chmod",
      "SPDXID": "SPDXRef-File-bin-chmod-860f77175d584e94",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/chown",
      "SPDXID": "SPDXRef-File-bin-chown-f13ee247b6b716ef",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/chpasswd",
      "SPDXID": "SPDXRef-File-bin-chpasswd-41424d507ba8cb99",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/chpst",
      "SPDXID": "SPDXRef-File-bin-chpst-bf6d0e064552a266",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/chroot",
      "SPDXID": "SPDXRef-File-bin-chroot-408124d4a273c216",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/chrt",
      "SPDXID": "SPDXRef-File-bin-chrt-7940385640b6079e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/chvt",
      "SPDXID": "SPDXRef-File-bin-chvt-1d2be76285149338",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/cksum",
      "SPDXID": "SPDXRef-File-bin-cksum-4a2486006e15e54c",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/clear",
      "SPDXID": "SPDXRef-File-bin-clear-6e1a4770610ec15e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/cmp",
      "SPDXID": "SPDXRef-File-bin-cmp-d84566228e00e187",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/comm",
      "SPDXID": "SPDXRef-File-bin-comm-3d86aea4d783119d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/conspy",
      "SPDXID": "SPDXRef-File-bin-conspy-d89e752129bbe301",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/cp",
      "SPDXID": "SPDXRef-File-bin-cp-789733c06828d83e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/cpio",
      "SPDXID": "SPDXRef-File-bin-cpio-0e2967d850a7d97d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/crc32",
      "SPDXID": "SPDXRef-File-bin-crc32-1b52197203589519",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/crond",
      "SPDXID": "SPDXRef-File-bin-crond-ae9857921e2bb4e8",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/crontab",
      "SPDXID": "SPDXRef-File-bin-crontab-53f9524c400ef431",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/cryptpw",
      "SPDXID": "SPDXRef-File-bin-cryptpw-5cc9c0d7f6748655",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/cttyhack",
      "SPDXID": "SPDXRef-File-bin-cttyhack-1bc85789e483ce70",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/cut",
      "SPDXID": "SPDXRef-File-bin-cut-e06b8551d1c1962e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/date",
      "SPDXID": "SPDXRef-File-bin-date-b18606b5d277a7ed",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/dc",
      "SPDXID": "SPDXRef-File-bin-dc-324bd83b105405c1",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/dd",
      "SPDXID": "SPDXRef-File-bin-dd-e54f5a4d589ab30f",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/deallocvt",
      "SPDXID": "SPDXRef-File-bin-deallocvt-20da2aad31c4602d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/delgroup",
      "SPDXID": "SPDXRef-File-bin-delgroup-f2448c5227ffd298",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/deluser",
      "SPDXID": "SPDXRef-File-bin-deluser-fe0c3cf03766c008",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/depmod",
      "SPDXID": "SPDXRef-File-bin-depmod-ed98383121c8e281",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/devmem",
      "SPDXID": "SPDXRef-File-bin-devmem-96cddbe74dc755bf",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/df",
      "SPDXID": "SPDXRef-File-bin-df-029812fde648600d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/dhcprelay",
      "SPDXID": "SPDXRef-File-bin-dhcprelay-bb25f1cdfaa9d3fe",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/diff",
      "SPDXID": "SPDXRef-File-bin-diff-d7aecedf9a67e3d0",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/dirname",
      "SPDXID": "SPDXRef-File-bin-dirname-ce1f5a21c0bb02e0",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/dmesg",
      "SPDXID": "SPDXRef-File-bin-dmesg-120b4aea6889f88b",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/dnsd",
      "SPDXID": "SPDXRef-File-bin-dnsd-bdc59b76dfbf64b9",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/dnsdomainname",
      "SPDXID": "SPDXRef-File-bin-dnsdomainname-ba3cf2e53be5ec58",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/dos2unix",
      "SPDXID": "SPDXRef-File-bin-dos2unix-71fa5b0785d556f4",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/dpkg",
      "SPDXID": "SPDXRef-File-bin-dpkg-f22bd74da92320e1",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/dpkg-deb",
      "SPDXID": "SPDXRef-File-bin-dpkg-deb-d06fbc51631c3cb8",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/du",
      "SPDXID": "SPDXRef-File-bin-du-49ab90aa68d41dbd",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/dumpkmap",
      "SPDXID": "SPDXRef-File-bin-dumpkmap-8a31e7fc78b066c2",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/dumpleases",
      "SPDXID": "SPDXRef-File-bin-dumpleases-81b05a43f5c3ca9a",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/echo",
      "SPDXID": "SPDXRef-File-bin-echo-e2430465b4e31056",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ed",
      "SPDXID": "SPDXRef-File-bin-ed-7c189f34a6dab7bc",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/egrep",
      "SPDXID": "SPDXRef-File-bin-egrep-de910e21d3c65d7f",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/eject",
      "SPDXID": "SPDXRef-File-bin-eject-193ca00a316e0043",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/env",
      "SPDXID": "SPDXRef-File-bin-env-0499e0629cd7aa1f",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/envdir",
      "SPDXID": "SPDXRef-File-bin-envdir-613b00a71fc63930",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/envuidgid",
      "SPDXID": "SPDXRef-File-bin-envuidgid-52c628310e10d040",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ether-wake",
      "SPDXID": "SPDXRef-File-bin-ether-wake-fe915097a7f89c44",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/expand",
      "SPDXID": "SPDXRef-File-bin-expand-b900be3c9e235f80",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/expr",
      "SPDXID": "SPDXRef-File-bin-expr-bbfcee96df649e27",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/factor",
      "SPDXID": "SPDXRef-File-bin-factor-3e923c46766158f5",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fakeidentd",
      "SPDXID": "SPDXRef-File-bin-fakeidentd-2419ce0aa751f47e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fallocate",
      "SPDXID": "SPDXRef-File-bin-fallocate-98c92da302d77d7a",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/false",
      "SPDXID": "SPDXRef-File-bin-false-584e51caff13f935",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fatattr",
      "SPDXID": "SPDXRef-File-bin-fatattr-402c4bd9cb09adf2",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fbset",
      "SPDXID": "SPDXRef-File-bin-fbset-251eb35032428806",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fbsplash",
      "SPDXID": "SPDXRef-File-bin-fbsplash-75e115dd79fcfe94",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fdflush",
      "SPDXID": "SPDXRef-File-bin-fdflush-831dff4e29ba2f19",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fdformat",
      "SPDXID": "SPDXRef-File-bin-fdformat-c03780931742ce83",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fdisk",
      "SPDXID": "SPDXRef-File-bin-fdisk-80e56badb9f38593",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fgconsole",
      "SPDXID": "SPDXRef-File-bin-fgconsole-89ce5dc8e0555c24",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fgrep",
      "SPDXID": "SPDXRef-File-bin-fgrep-c9919efcca49acfb",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/find",
      "SPDXID": "SPDXRef-File-bin-find-b844847c769f2ce5",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/findfs",
      "SPDXID": "SPDXRef-File-bin-findfs-762070cfd45cde77",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/flock",
      "SPDXID": "SPDXRef-File-bin-flock-a30a8f11f08c3f30",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fold",
      "SPDXID": "SPDXRef-File-bin-fold-1ac619645baaed08",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/free",
      "SPDXID": "SPDXRef-File-bin-free-8fc223441608a1d7",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/freeramdisk",
      "SPDXID": "SPDXRef-File-bin-freeramdisk-378cbe4d33c29361",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fsck",
      "SPDXID": "SPDXRef-File-bin-fsck-de9337f387e481fe",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fsck.minix",
      "SPDXID": "SPDXRef-File-bin-fsck.minix-b664d320ab50ca71",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fsfreeze",
      "SPDXID": "SPDXRef-File-bin-fsfreeze-7bcacd1263206f9c",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fstrim",
      "SPDXID": "SPDXRef-File-bin-fstrim-60b8b773cd17f2be",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fsync",
      "SPDXID": "SPDXRef-File-bin-fsync-e923554caa27ab14",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ftpd",
      "SPDXID": "SPDXRef-File-bin-ftpd-fdcc4414491b6486",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ftpget",
      "SPDXID": "SPDXRef-File-bin-ftpget-0bb6ef8ca281577b",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ftpput",
      "SPDXID": "SPDXRef-File-bin-ftpput-f081d71b5b813897",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/fuser",
      "SPDXID": "SPDXRef-File-bin-fuser-1e50a61dfd72a3c3",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/getconf",
      "SPDXID": "SPDXRef-File-bin-getconf-f1f51c7204617746",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/getfattr",
      "SPDXID": "SPDXRef-File-bin-getfattr-befaeae5d17c778d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/getopt",
      "SPDXID": "SPDXRef-File-bin-getopt-f0025aeaf32b3da3",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/getty",
      "SPDXID": "SPDXRef-File-bin-getty-87bc433ff3bd287d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/grep",
      "SPDXID": "SPDXRef-File-bin-grep-5a9ce783d96f552c",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/groups",
      "SPDXID": "SPDXRef-File-bin-groups-845635abc3addfef",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/gunzip",
      "SPDXID": "SPDXRef-File-bin-gunzip-2a0c1cf0f442d8e4",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/gzip",
      "SPDXID": "SPDXRef-File-bin-gzip-c6bf8076b8b89db0",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/halt",
      "SPDXID": "SPDXRef-File-bin-halt-4401fcccfc934295",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/hd",
      "SPDXID": "SPDXRef-File-bin-hd-b536f3ccdd6b4894",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/hdparm",
      "SPDXID": "SPDXRef-File-bin-hdparm-14eebfef771a95b9",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/head",
      "SPDXID": "SPDXRef-File-bin-head-5ef986d591e43895",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/hexdump",
      "SPDXID": "SPDXRef-File-bin-hexdump-7600fc6b695cac33",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/hexedit",
      "SPDXID": "SPDXRef-File-bin-hexedit-ccaaf54ef71f810d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/hostid",
      "SPDXID": "SPDXRef-File-bin-hostid-e59f061a81f08af8",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/hostname",
      "SPDXID": "SPDXRef-File-bin-hostname-30ab0da61210d688",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/httpd",
      "SPDXID": "SPDXRef-File-bin-httpd-b6ddd6c54f292261",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/hush",
      "SPDXID": "SPDXRef-File-bin-hush-6d968bdce382d1d2",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/hwclock",
      "SPDXID": "SPDXRef-File-bin-hwclock-062b02f123b821f6",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/i2cdetect",
      "SPDXID": "SPDXRef-File-bin-i2cdetect-2dcbcc9818130302",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/i2cdump",
      "SPDXID": "SPDXRef-File-bin-i2cdump-6d76a2c3c67d1050",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/i2cget",
      "SPDXID": "SPDXRef-File-bin-i2cget-8155be978d161f7b",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/i2cset",
      "SPDXID": "SPDXRef-File-bin-i2cset-5136b113f1ae1ce0",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/i2ctransfer",
      "SPDXID": "SPDXRef-File-bin-i2ctransfer-8093b5582196a170",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/id",
      "SPDXID": "SPDXRef-File-bin-id-a0f31233fce88601",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ifconfig",
      "SPDXID": "SPDXRef-File-bin-ifconfig-a7569e4cca588c85",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ifdown",
      "SPDXID": "SPDXRef-File-bin-ifdown-b0c388a1694e60de",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ifenslave",
      "SPDXID": "SPDXRef-File-bin-ifenslave-967e03003a3dcf59",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ifplugd",
      "SPDXID": "SPDXRef-File-bin-ifplugd-3a2fe14a63e90abf",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ifup",
      "SPDXID": "SPDXRef-File-bin-ifup-ef5fa45ae63ed694",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/inetd",
      "SPDXID": "SPDXRef-File-bin-inetd-de13c2f43a0f3573",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/init",
      "SPDXID": "SPDXRef-File-bin-init-65e6b1378cf01f39",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/inotifyd",
      "SPDXID": "SPDXRef-File-bin-inotifyd-67c13b1ccd1365da",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/insmod",
      "SPDXID": "SPDXRef-File-bin-insmod-44c3bc3960fbd2ff",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/install",
      "SPDXID": "SPDXRef-File-bin-install-71b83f808fe16d7c",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ionice",
      "SPDXID": "SPDXRef-File-bin-ionice-76b1df2be239a6a8",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/iostat",
      "SPDXID": "SPDXRef-File-bin-iostat-ab6a0e9d4e42b269",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ip",
      "SPDXID": "SPDXRef-File-bin-ip-17433b2433190193",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ipaddr",
      "SPDXID": "SPDXRef-File-bin-ipaddr-c70e4030caf1dacb",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ipcalc",
      "SPDXID": "SPDXRef-File-bin-ipcalc-ebd3cb97530c69fb",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ipcrm",
      "SPDXID": "SPDXRef-File-bin-ipcrm-9909c99941bfdd99",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ipcs",
      "SPDXID": "SPDXRef-File-bin-ipcs-19a912c3573d4243",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/iplink",
      "SPDXID": "SPDXRef-File-bin-iplink-3a0b050b0ad09f44",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ipneigh",
      "SPDXID": "SPDXRef-File-bin-ipneigh-c8e33998d2314a15",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/iproute",
      "SPDXID": "SPDXRef-File-bin-iproute-18cb1d6aeef016a1",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/iprule",
      "SPDXID": "SPDXRef-File-bin-iprule-5e4dc75fc2deee36",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/iptunnel",
      "SPDXID": "SPDXRef-File-bin-iptunnel-ae1c4b50dc87d60b",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/kbd_mode",
      "SPDXID": "SPDXRef-File-bin-kbd-mode-7bf0b20ab0736925",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/kill",
      "SPDXID": "SPDXRef-File-bin-kill-6b54d23b0a773009",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/killall",
      "SPDXID": "SPDXRef-File-bin-killall-65518b5d1a77765b",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/killall5",
      "SPDXID": "SPDXRef-File-bin-killall5-8abd7d059096a933",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/klogd",
      "SPDXID": "SPDXRef-File-bin-klogd-30b19e0a50b35298",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/last",
      "SPDXID": "SPDXRef-File-bin-last-58628a8f5d0fb154",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/less",
      "SPDXID": "SPDXRef-File-bin-less-e57bfccff6e375d7",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/link",
      "SPDXID": "SPDXRef-File-bin-link-d257f25f62aed2d1",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/linux32",
      "SPDXID": "SPDXRef-File-bin-linux32-046c711f767ffb81",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/linux64",
      "SPDXID": "SPDXRef-File-bin-linux64-bd3868a90aa80b46",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/linuxrc",
      "SPDXID": "SPDXRef-File-bin-linuxrc-249f662b9b7b30bb",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ln",
      "SPDXID": "SPDXRef-File-bin-ln-350a14f1feb018c0",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/loadfont",
      "SPDXID": "SPDXRef-File-bin-loadfont-49bf9ed9090c812f",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/loadkmap",
      "SPDXID": "SPDXRef-File-bin-loadkmap-5776b90805863690",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/logger",
      "SPDXID": "SPDXRef-File-bin-logger-5e56129ecee67f9b",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/login",
      "SPDXID": "SPDXRef-File-bin-login-23840b4c2d52f542",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/logname",
      "SPDXID": "SPDXRef-File-bin-logname-558ad65288737fe9",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/logread",
      "SPDXID": "SPDXRef-File-bin-logread-5b453353dc0cb5e4",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/losetup",
      "SPDXID": "SPDXRef-File-bin-losetup-645151f25b3bedc7",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/lpd",
      "SPDXID": "SPDXRef-File-bin-lpd-c4c1cdbec5238528",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/lpq",
      "SPDXID": "SPDXRef-File-bin-lpq-0846d135e2830b7f",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/lpr",
      "SPDXID": "SPDXRef-File-bin-lpr-b874ecc2cf1307bc",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ls",
      "SPDXID": "SPDXRef-File-bin-ls-d21ed27cdf4d0f5b",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/lsattr",
      "SPDXID": "SPDXRef-File-bin-lsattr-14c67ec6a1f51841",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/lsblk",
      "SPDXID": "SPDXRef-File-bin-lsblk-b6cbfd364befba9e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/lsmod",
      "SPDXID": "SPDXRef-File-bin-lsmod-345940d2a8b8823d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/lsof",
      "SPDXID": "SPDXRef-File-bin-lsof-30da93d0f684b343",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/lspci",
      "SPDXID": "SPDXRef-File-bin-lspci-7ccda817e61594df",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/lsscsi",
      "SPDXID": "SPDXRef-File-bin-lsscsi-385f9b56dd84752d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/lsusb",
      "SPDXID": "SPDXRef-File-bin-lsusb-eae47271ec71eecb",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/lzcat",
      "SPDXID": "SPDXRef-File-bin-lzcat-774cf62237bd0968",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/lzma",
      "SPDXID": "SPDXRef-File-bin-lzma-1cb241929297a70d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/lzop",
      "SPDXID": "SPDXRef-File-bin-lzop-ff9271ed14bdb64a",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/makedevs",
      "SPDXID": "SPDXRef-File-bin-makedevs-fff5f81c36d10de3",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/makemime",
      "SPDXID": "SPDXRef-File-bin-makemime-cc29ece149ca5118",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/man",
      "SPDXID": "SPDXRef-File-bin-man-a90364706a7de5c9",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/md5sum",
      "SPDXID": "SPDXRef-File-bin-md5sum-f0b0fd7521459395",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mdev",
      "SPDXID": "SPDXRef-File-bin-mdev-8c95e753a611f583",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mesg",
      "SPDXID": "SPDXRef-File-bin-mesg-6a386175872a7799",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/microcom",
      "SPDXID": "SPDXRef-File-bin-microcom-2dc5d14c10902cd9",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mim",
      "SPDXID": "SPDXRef-File-bin-mim-9a8206faed162b72",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mkdir",
      "SPDXID": "SPDXRef-File-bin-mkdir-092107a66621a6dd",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mkdosfs",
      "SPDXID": "SPDXRef-File-bin-mkdosfs-6ab0c5e53e7e7dd1",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mke2fs",
      "SPDXID": "SPDXRef-File-bin-mke2fs-37fff707f3b8c275",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mkfifo",
      "SPDXID": "SPDXRef-File-bin-mkfifo-91b1b2896bcdb5da",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mkfs.ext2",
      "SPDXID": "SPDXRef-File-bin-mkfs.ext2-209972e6d82b62d5",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mkfs.minix",
      "SPDXID": "SPDXRef-File-bin-mkfs.minix-b975c6f82814108e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mkfs.vfat",
      "SPDXID": "SPDXRef-File-bin-mkfs.vfat-cc942d73a6ed480a",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mknod",
      "SPDXID": "SPDXRef-File-bin-mknod-e4d32a972ba0adfe",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mkpasswd",
      "SPDXID": "SPDXRef-File-bin-mkpasswd-6794fba4c1d5c931",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mkswap",
      "SPDXID": "SPDXRef-File-bin-mkswap-e8d1e0b946457366",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mktemp",
      "SPDXID": "SPDXRef-File-bin-mktemp-d0660502b60d268b",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/modinfo",
      "SPDXID": "SPDXRef-File-bin-modinfo-9695db05e8e76def",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/modprobe",
      "SPDXID": "SPDXRef-File-bin-modprobe-28862b7af9dcd014",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/more",
      "SPDXID": "SPDXRef-File-bin-more-2a3bdcbf3b407a89",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mount",
      "SPDXID": "SPDXRef-File-bin-mount-633945acfc74e455",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mountpoint",
      "SPDXID": "SPDXRef-File-bin-mountpoint-8c1fa31b7ec3197d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mpstat",
      "SPDXID": "SPDXRef-File-bin-mpstat-1e9ee4b531583430",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mt",
      "SPDXID": "SPDXRef-File-bin-mt-62c2e5b8756ec9d6",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/mv",
      "SPDXID": "SPDXRef-File-bin-mv-4b542b09c6436f33",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/nameif",
      "SPDXID": "SPDXRef-File-bin-nameif-31fbe469cbd73bc9",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/nanddump",
      "SPDXID": "SPDXRef-File-bin-nanddump-84d95ff80a388485",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/nandwrite",
      "SPDXID": "SPDXRef-File-bin-nandwrite-1907477538f07a5d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/nbd-client",
      "SPDXID": "SPDXRef-File-bin-nbd-client-21ea4bb6c1523a4c",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/nc",
      "SPDXID": "SPDXRef-File-bin-nc-89685ca4e34fa355",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/netstat",
      "SPDXID": "SPDXRef-File-bin-netstat-2a6a808a43f921cc",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/nice",
      "SPDXID": "SPDXRef-File-bin-nice-147a48fbce918cbf",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/nl",
      "SPDXID": "SPDXRef-File-bin-nl-6baaf4e3201a9c00",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/nmeter",
      "SPDXID": "SPDXRef-File-bin-nmeter-e04c343a7e1ab10e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/nohup",
      "SPDXID": "SPDXRef-File-bin-nohup-73047a8c6a2b2bcc",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/nologin",
      "SPDXID": "SPDXRef-File-bin-nologin-d07a71bbb90ee3d3",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/nproc",
      "SPDXID": "SPDXRef-File-bin-nproc-806c1a61a44055fb",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/nsenter",
      "SPDXID": "SPDXRef-File-bin-nsenter-239d9bc22981f506",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/nslookup",
      "SPDXID": "SPDXRef-File-bin-nslookup-a736c726616a3d62",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ntpd",
      "SPDXID": "SPDXRef-File-bin-ntpd-d5d865a5058499a7",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/od",
      "SPDXID": "SPDXRef-File-bin-od-2d786e1f45b1556b",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/openvt",
      "SPDXID": "SPDXRef-File-bin-openvt-f000d622b9b52c60",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/partprobe",
      "SPDXID": "SPDXRef-File-bin-partprobe-bd080ff5eaa40cb1",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/passwd",
      "SPDXID": "SPDXRef-File-bin-passwd-943d3ea5769e6b46",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/paste",
      "SPDXID": "SPDXRef-File-bin-paste-ae3ed32eeb1fbd24",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/patch",
      "SPDXID": "SPDXRef-File-bin-patch-f5694e00bd33c573",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/pgrep",
      "SPDXID": "SPDXRef-File-bin-pgrep-8878b9a92e01b4b9",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/pidof",
      "SPDXID": "SPDXRef-File-bin-pidof-5c2bfbbfb18f2ef1",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ping",
      "SPDXID": "SPDXRef-File-bin-ping-4fff12f3c667121c",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ping6",
      "SPDXID": "SPDXRef-File-bin-ping6-a97dfe028de502c7",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/pipe_progress",
      "SPDXID": "SPDXRef-File-bin-pipe-progress-74553e22b20f2233",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/pivot_root",
      "SPDXID": "SPDXRef-File-bin-pivot-root-0b346e014a0902db",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/pkill",
      "SPDXID": "SPDXRef-File-bin-pkill-f1242ea13f73e592",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/pmap",
      "SPDXID": "SPDXRef-File-bin-pmap-bacb4ef5ab6a7df4",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/popmaildir",
      "SPDXID": "SPDXRef-File-bin-popmaildir-de6572fbdcc7e7fb",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/poweroff",
      "SPDXID": "SPDXRef-File-bin-poweroff-90ea8077147403d6",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/powertop",
      "SPDXID": "SPDXRef-File-bin-powertop-cd98d8b234738d9c",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/printenv",
      "SPDXID": "SPDXRef-File-bin-printenv-7f945ec4c5e42e18",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/printf",
      "SPDXID": "SPDXRef-File-bin-printf-28bff72f05d93ad8",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ps",
      "SPDXID": "SPDXRef-File-bin-ps-a7116cba77714f5e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/pscan",
      "SPDXID": "SPDXRef-File-bin-pscan-1b84e4a4edd50c21",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/pstree",
      "SPDXID": "SPDXRef-File-bin-pstree-bd85eecfa515a6a6",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/pwd",
      "SPDXID": "SPDXRef-File-bin-pwd-48e3fc6ad59b14de",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/pwdx",
      "SPDXID": "SPDXRef-File-bin-pwdx-d28e1d89f0c75197",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/raidautorun",
      "SPDXID": "SPDXRef-File-bin-raidautorun-b9717db4a7a323e6",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/rdate",
      "SPDXID": "SPDXRef-File-bin-rdate-0487628263c9e7df",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/rdev",
      "SPDXID": "SPDXRef-File-bin-rdev-032a2932ba0804cc",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/readahead",
      "SPDXID": "SPDXRef-File-bin-readahead-4b3b5d4184ea085e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/readlink",
      "SPDXID": "SPDXRef-File-bin-readlink-d58786fe6a96080f",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/readprofile",
      "SPDXID": "SPDXRef-File-bin-readprofile-6dd3e0327079b3e8",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/realpath",
      "SPDXID": "SPDXRef-File-bin-realpath-8a8c632998f39a5d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/reboot",
      "SPDXID": "SPDXRef-File-bin-reboot-6e7309b98de365be",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/reformime",
      "SPDXID": "SPDXRef-File-bin-reformime-c5d91fcdafa1c962",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/remove-shell",
      "SPDXID": "SPDXRef-File-bin-remove-shell-1d686e203effa794",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/renice",
      "SPDXID": "SPDXRef-File-bin-renice-c623b9cb7de36c19",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/reset",
      "SPDXID": "SPDXRef-File-bin-reset-cdc451e32a35a92e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/resize",
      "SPDXID": "SPDXRef-File-bin-resize-339b8d0fbeadeb70",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/resume",
      "SPDXID": "SPDXRef-File-bin-resume-6df838457918479a",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/rev",
      "SPDXID": "SPDXRef-File-bin-rev-6019d2b319e218c9",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/rm",
      "SPDXID": "SPDXRef-File-bin-rm-6657afe039159deb",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/rmdir",
      "SPDXID": "SPDXRef-File-bin-rmdir-7c015d49e718f376",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/rmmod",
      "SPDXID": "SPDXRef-File-bin-rmmod-c6a4c7dd58bfcab0",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/route",
      "SPDXID": "SPDXRef-File-bin-route-d1a46b20f63a0186",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/rpm",
      "SPDXID": "SPDXRef-File-bin-rpm-bdfeb2332eaac81b",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/rpm2cpio",
      "SPDXID": "SPDXRef-File-bin-rpm2cpio-a0ceb6abc71e3b37",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/rtcwake",
      "SPDXID": "SPDXRef-File-bin-rtcwake-ddebdb437a77ef88",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/run-init",
      "SPDXID": "SPDXRef-File-bin-run-init-68c89ce56f5ee025",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/run-parts",
      "SPDXID": "SPDXRef-File-bin-run-parts-8a96ea954d4d0609",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/runlevel",
      "SPDXID": "SPDXRef-File-bin-runlevel-31b5a540f2cc2622",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/runsv",
      "SPDXID": "SPDXRef-File-bin-runsv-25391ca0235d40df",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/runsvdir",
      "SPDXID": "SPDXRef-File-bin-runsvdir-bcea27b1a87ace9e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/rx",
      "SPDXID": "SPDXRef-File-bin-rx-a76abc30be9ed5b2",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/script",
      "SPDXID": "SPDXRef-File-bin-script-c2c666796265176c",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/scriptreplay",
      "SPDXID": "SPDXRef-File-bin-scriptreplay-1ce3de01c4ade92a",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/sed",
      "SPDXID": "SPDXRef-File-bin-sed-7579a5db28f856f8",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/seedrng",
      "SPDXID": "SPDXRef-File-bin-seedrng-70b78c0dd24546a5",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/sendmail",
      "SPDXID": "SPDXRef-File-bin-sendmail-20eb3c033b6d3cb8",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/seq",
      "SPDXID": "SPDXRef-File-bin-seq-e63f6812f94aea24",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/setarch",
      "SPDXID": "SPDXRef-File-bin-setarch-74a5a0ad35c48731",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/setconsole",
      "SPDXID": "SPDXRef-File-bin-setconsole-337b6747ed4f8e53",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/setfattr",
      "SPDXID": "SPDXRef-File-bin-setfattr-0b2be47a9f4c3aa9",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/setfont",
      "SPDXID": "SPDXRef-File-bin-setfont-17c14e21557ddf43",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/setkeycodes",
      "SPDXID": "SPDXRef-File-bin-setkeycodes-8e22849ac65ca530",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/setlogcons",
      "SPDXID": "SPDXRef-File-bin-setlogcons-e9ab785304a76b27",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/setpriv",
      "SPDXID": "SPDXRef-File-bin-setpriv-d8d7701573af474e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/setserial",
      "SPDXID": "SPDXRef-File-bin-setserial-1563c45a343f86f0",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/setsid",
      "SPDXID": "SPDXRef-File-bin-setsid-6e966444290b7384",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/setuidgid",
      "SPDXID": "SPDXRef-File-bin-setuidgid-d84ac2440b0d06a7",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/sh",
      "SPDXID": "SPDXRef-File-bin-sh-ba7449b7da42ff0f",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/sha1sum",
      "SPDXID": "SPDXRef-File-bin-sha1sum-d54e86a043d56696",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/sha256sum",
      "SPDXID": "SPDXRef-File-bin-sha256sum-f1f1b8125abc49c2",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/sha384sum",
      "SPDXID": "SPDXRef-File-bin-sha384sum-d2e2d324889b32c9",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/sha3sum",
      "SPDXID": "SPDXRef-File-bin-sha3sum-7ccfc1a8e1b85827",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/sha512sum",
      "SPDXID": "SPDXRef-File-bin-sha512sum-43e559c8ef831ca5",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/showkey",
      "SPDXID": "SPDXRef-File-bin-showkey-9df131edd84d4b52",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/shred",
      "SPDXID": "SPDXRef-File-bin-shred-2c2411bb7735198a",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/shuf",
      "SPDXID": "SPDXRef-File-bin-shuf-2e4f8fe2fa25e5d8",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/slattach",
      "SPDXID": "SPDXRef-File-bin-slattach-a8ce5df2e4a7c95b",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/sleep",
      "SPDXID": "SPDXRef-File-bin-sleep-9fd8a331478a7256",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/smemcap",
      "SPDXID": "SPDXRef-File-bin-smemcap-e67bf29e153ef852",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/softlimit",
      "SPDXID": "SPDXRef-File-bin-softlimit-8c6f2b09f0a44897",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/sort",
      "SPDXID": "SPDXRef-File-bin-sort-c925ef303bf11ad3",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/split",
      "SPDXID": "SPDXRef-File-bin-split-5042c6ac657067a9",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ssl_client",
      "SPDXID": "SPDXRef-File-bin-ssl-client-08088389748837f2",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ssl_server",
      "SPDXID": "SPDXRef-File-bin-ssl-server-3ef70e5c76555ad5",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/start-stop-daemon",
      "SPDXID": "SPDXRef-File-bin-start-stop-daemon-bb707c598fe3bd5a",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/stat",
      "SPDXID": "SPDXRef-File-bin-stat-f6d1b0a5f9f5ed16",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/strings",
      "SPDXID": "SPDXRef-File-bin-strings-b4420f624069e02b",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/stty",
      "SPDXID": "SPDXRef-File-bin-stty-600b48e2e90ec6bc",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/su",
      "SPDXID": "SPDXRef-File-bin-su-71e19026ac8d319d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/sulogin",
      "SPDXID": "SPDXRef-File-bin-sulogin-d5c26a8b1c56c2c8",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/sum",
      "SPDXID": "SPDXRef-File-bin-sum-cc54f32c143b653a",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/sv",
      "SPDXID": "SPDXRef-File-bin-sv-ac826978f6995a31",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/svc",
      "SPDXID": "SPDXRef-File-bin-svc-0ef2e96ba8cf84ad",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/svlogd",
      "SPDXID": "SPDXRef-File-bin-svlogd-863ee0ec24e98eb4",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/svok",
      "SPDXID": "SPDXRef-File-bin-svok-cd717b1a2d74f3d8",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/swapoff",
      "SPDXID": "SPDXRef-File-bin-swapoff-23ffbc7df9a50e02",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/swapon",
      "SPDXID": "SPDXRef-File-bin-swapon-51c5266e932fa6cb",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/switch_root",
      "SPDXID": "SPDXRef-File-bin-switch-root-bd1019e1dfb017ed",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/sync",
      "SPDXID": "SPDXRef-File-bin-sync-8dab709c7050f177",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/sysctl",
      "SPDXID": "SPDXRef-File-bin-sysctl-7da9d68fab337314",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/syslogd",
      "SPDXID": "SPDXRef-File-bin-syslogd-ace19b2c0163dcce",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/tac",
      "SPDXID": "SPDXRef-File-bin-tac-8872201b37431de3",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/tail",
      "SPDXID": "SPDXRef-File-bin-tail-d1b4eedd181c0d08",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/tar",
      "SPDXID": "SPDXRef-File-bin-tar-995c9997d359ee5b",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/taskset",
      "SPDXID": "SPDXRef-File-bin-taskset-fa9ee4fa2fbcf61c",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/tc",
      "SPDXID": "SPDXRef-File-bin-tc-0d467ae917d80c8d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/tcpsvd",
      "SPDXID": "SPDXRef-File-bin-tcpsvd-6d80b8ef998c5497",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/tee",
      "SPDXID": "SPDXRef-File-bin-tee-095e39df937e7a11",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/telnet",
      "SPDXID": "SPDXRef-File-bin-telnet-5e9901fa010db423",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/telnetd",
      "SPDXID": "SPDXRef-File-bin-telnetd-456967cab2e3e612",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/test",
      "SPDXID": "SPDXRef-File-bin-test-8f09d7c53d9e000b",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/tftp",
      "SPDXID": "SPDXRef-File-bin-tftp-ccf8997b542595d1",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/tftpd",
      "SPDXID": "SPDXRef-File-bin-tftpd-5474ee6620d733bd",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/time",
      "SPDXID": "SPDXRef-File-bin-time-47bce9e6d8d8105f",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/timeout",
      "SPDXID": "SPDXRef-File-bin-timeout-521f7463419bfc1a",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/top",
      "SPDXID": "SPDXRef-File-bin-top-6c86c4ca36a84104",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/touch",
      "SPDXID": "SPDXRef-File-bin-touch-e6590098db1081fb",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/tr",
      "SPDXID": "SPDXRef-File-bin-tr-086125c636d60b40",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/traceroute",
      "SPDXID": "SPDXRef-File-bin-traceroute-f8b5c5c4fc654fa3",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/traceroute6",
      "SPDXID": "SPDXRef-File-bin-traceroute6-b746455e1ced1d81",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/tree",
      "SPDXID": "SPDXRef-File-bin-tree-ff32115dfe8f143e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/true",
      "SPDXID": "SPDXRef-File-bin-true-01fbffc6cf66a83e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/truncate",
      "SPDXID": "SPDXRef-File-bin-truncate-c5c0051ea543f1e7",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ts",
      "SPDXID": "SPDXRef-File-bin-ts-c8e563d4578356ee",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/tsort",
      "SPDXID": "SPDXRef-File-bin-tsort-35ec820854ac1986",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/tty",
      "SPDXID": "SPDXRef-File-bin-tty-2bed791f12251116",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ttysize",
      "SPDXID": "SPDXRef-File-bin-ttysize-a473d109c948ff89",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/tunctl",
      "SPDXID": "SPDXRef-File-bin-tunctl-e24b9e96a1596fba",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ubiattach",
      "SPDXID": "SPDXRef-File-bin-ubiattach-6d129a02eda9085a",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ubidetach",
      "SPDXID": "SPDXRef-File-bin-ubidetach-ddede2930af785a7",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ubimkvol",
      "SPDXID": "SPDXRef-File-bin-ubimkvol-79ad54351f59c570",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ubirename",
      "SPDXID": "SPDXRef-File-bin-ubirename-5501a8a9c164f78f",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ubirmvol",
      "SPDXID": "SPDXRef-File-bin-ubirmvol-b86172d38791f986",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ubirsvol",
      "SPDXID": "SPDXRef-File-bin-ubirsvol-86915d281db90710",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/ubiupdatevol",
      "SPDXID": "SPDXRef-File-bin-ubiupdatevol-9851b45232305beb",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/udhcpc",
      "SPDXID": "SPDXRef-File-bin-udhcpc-72c95eb8cfd2d5a7",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/udhcpc6",
      "SPDXID": "SPDXRef-File-bin-udhcpc6-e1bd1a3364770706",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/udhcpd",
      "SPDXID": "SPDXRef-File-bin-udhcpd-1f754dac42c0d7e0",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/udpsvd",
      "SPDXID": "SPDXRef-File-bin-udpsvd-5f6d10c3d7b3ad87",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/uevent",
      "SPDXID": "SPDXRef-File-bin-uevent-2e03ed396ff155fc",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/umount",
      "SPDXID": "SPDXRef-File-bin-umount-272fb87eef27b7a0",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/uname",
      "SPDXID": "SPDXRef-File-bin-uname-d1510d4075c8e1e5",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/unexpand",
      "SPDXID": "SPDXRef-File-bin-unexpand-4e5eb356a614104c",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/uniq",
      "SPDXID": "SPDXRef-File-bin-uniq-708086442b0c973a",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/unix2dos",
      "SPDXID": "SPDXRef-File-bin-unix2dos-238bd76d308a2aa3",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/unlink",
      "SPDXID": "SPDXRef-File-bin-unlink-858f1fb0b4c8be23",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/unlzma",
      "SPDXID": "SPDXRef-File-bin-unlzma-bc00f199747b9d63",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/unshare",
      "SPDXID": "SPDXRef-File-bin-unshare-650c329692a51e20",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/unxz",
      "SPDXID": "SPDXRef-File-bin-unxz-a459054a7dd4bc18",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/unzip",
      "SPDXID": "SPDXRef-File-bin-unzip-baab318d2af554d8",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/uptime",
      "SPDXID": "SPDXRef-File-bin-uptime-985025c5afd50019",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/users",
      "SPDXID": "SPDXRef-File-bin-users-4d3cb9300b595231",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/usleep",
      "SPDXID": "SPDXRef-File-bin-usleep-fe0af6b0484ba795",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/uudecode",
      "SPDXID": "SPDXRef-File-bin-uudecode-f14bda7e882e464d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/uuencode",
      "SPDXID": "SPDXRef-File-bin-uuencode-f5705a4f6778d1ef",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/uuidgen",
      "SPDXID": "SPDXRef-File-bin-uuidgen-cd622cf622913cdf",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/vconfig",
      "SPDXID": "SPDXRef-File-bin-vconfig-c4cde3bbfd7e87d8",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/vi",
      "SPDXID": "SPDXRef-File-bin-vi-443a0b3038cbdeed",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/vlock",
      "SPDXID": "SPDXRef-File-bin-vlock-65f022e8020252e3",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/vmstat",
      "SPDXID": "SPDXRef-File-bin-vmstat-4490f2cd95c5a6af",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/volname",
      "SPDXID": "SPDXRef-File-bin-volname-ff2fad4dffbde0d0",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/w",
      "SPDXID": "SPDXRef-File-bin-w-f3a29b73e2ff3ed4",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/wall",
      "SPDXID": "SPDXRef-File-bin-wall-d5746de0f945bb52",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/watch",
      "SPDXID": "SPDXRef-File-bin-watch-c051db121110f405",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/watchdog",
      "SPDXID": "SPDXRef-File-bin-watchdog-4b32dc87dae3c312",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/wc",
      "SPDXID": "SPDXRef-File-bin-wc-8cf6369024a050e2",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/wget",
      "SPDXID": "SPDXRef-File-bin-wget-6d2b889cd047f81b",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/which",
      "SPDXID": "SPDXRef-File-bin-which-ba414c49a4cf0243",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/who",
      "SPDXID": "SPDXRef-File-bin-who-4b044616264d55b4",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/whoami",
      "SPDXID": "SPDXRef-File-bin-whoami-176c2393b77c4455",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/whois",
      "SPDXID": "SPDXRef-File-bin-whois-7d294517bda4c960",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/xargs",
      "SPDXID": "SPDXRef-File-bin-xargs-a051c44cb99ad1f7",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/xxd",
      "SPDXID": "SPDXRef-File-bin-xxd-77d0f471b4d804a1",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/xz",
      "SPDXID": "SPDXRef-File-bin-xz-2a7f0d3771d1c87e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/xzcat",
      "SPDXID": "SPDXRef-File-bin-xzcat-969a674bb52ff55b",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/yes",
      "SPDXID": "SPDXRef-File-bin-yes-1f8d5789c601924d",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/zcat",
      "SPDXID": "SPDXRef-File-bin-zcat-a2e3fc00942b1a9e",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "bin/zcip",
      "SPDXID": "SPDXRef-File-bin-zcip-a171a979777326be",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "lib/ld-linux-x86-64.so.2",
      "SPDXID": "SPDXRef-File-lib-ld-linux-x86-64.so.2-6401940b3ba37775",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "lib/libc.so.6",
      "SPDXID": "SPDXRef-File-lib-libc.so.6-6243d7fbbbe74455",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "lib/libm.so.6",
      "SPDXID": "SPDXRef-File-lib-libm.so.6-7dc85f4c48ba2367",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "lib/libnss_compat.so.2",
      "SPDXID": "SPDXRef-File-lib-libnss-compat.so.2-0c7201d705137ee8",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "lib/libnss_dns.so.2",
      "SPDXID": "SPDXRef-File-lib-libnss-dns.so.2-d82051fcd3641435",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "lib/libnss_files.so.2",
      "SPDXID": "SPDXRef-File-lib-libnss-files.so.2-c1f35fbdad4711ab",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "lib/libnss_hesiod.so.2",
      "SPDXID": "SPDXRef-File-lib-libnss-hesiod.so.2-658eba943093af1a",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "lib/libpthread.so.0",
      "SPDXID": "SPDXRef-File-lib-libpthread.so.0-2765dbaab7c5776a",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    },
    {
      "fileName": "lib/libresolv.so.2",
      "SPDXID": "SPDXRef-File-lib-libresolv.so.2-4533d91ccb7999b4",
      "checksums": [
        {
          "algorithm": "SHA1",
          "checksumValue": "0000000000000000000000000000000000000000"
        }
      ],
      "licenseConcluded": "NOASSERTION",
      "licenseInfoInFiles": ["NOASSERTION"],
      "copyrightText": "NOASSERTION",
      "comment": "layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-Package-binary-busybox-b42fb417fc668909",
      "relatedSpdxElement": "SPDXRef-File-bin-busybox-637ef94705caf530",
      "relationshipType": "OTHER",
      "comment": "evident-by: indicates the package's existence is evident by the given file"
    },
    {
      "spdxElementId": "SPDXRef-DocumentRoot-Image-busybox",
      "relatedSpdxElement": "SPDXRef-Package-binary-busybox-b42fb417fc668909",
      "relationshipType": "CONTAINS"
    },
    {
      "spdxElementId": "SPDXRef-DOCUMENT",
      "relatedSpdxElement": "SPDXRef-DocumentRoot-Image-busybox",
      "relationshipType": "DESCRIBES"
    }
  ]
}

SPDXVersion: SPDX-2.3
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: busybox
DocumentNamespace: https://anchore.com/syft/image/busybox-f5a81ccc-138d-4b56-b2ed-391ba2427714
LicenseListVersion: 3.29
Creator: Organization: Anchore, Inc
Creator: Tool: syft-1.54.0
Created: 2026-10-02T02:15:53Z

##### Unpackaged files

FileName: bin/[[
SPDXID: SPDXRef-File-bin----3aa04cfd7a230c3a
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/[
SPDXID: SPDXRef-File-bin---3d0fe85163571426
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/acpid
SPDXID: SPDXRef-File-bin-acpid-91be6851c69f66ac
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/add-shell
SPDXID: SPDXRef-File-bin-add-shell-d759c205b9b8b1cc
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/addgroup
SPDXID: SPDXRef-File-bin-addgroup-df9fc04f72fda839
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/adduser
SPDXID: SPDXRef-File-bin-adduser-254b919f2cdb2b3e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/adjtimex
SPDXID: SPDXRef-File-bin-adjtimex-584cede59ba8cbc4
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ar
SPDXID: SPDXRef-File-bin-ar-5a08844b97e1f7d7
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/arch
SPDXID: SPDXRef-File-bin-arch-de28e9c4f436eb56
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/arp
SPDXID: SPDXRef-File-bin-arp-b10da1d6f45f76f6
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/arping
SPDXID: SPDXRef-File-bin-arping-db0a11f28254b132
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ascii
SPDXID: SPDXRef-File-bin-ascii-f62264befb2746b1
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ash
SPDXID: SPDXRef-File-bin-ash-025298e95462a7d2
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/awk
SPDXID: SPDXRef-File-bin-awk-dbb372c618bff4aa
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/base32
SPDXID: SPDXRef-File-bin-base32-b442659ef33087c4
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/base64
SPDXID: SPDXRef-File-bin-base64-b1fce11935a8aea6
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/basename
SPDXID: SPDXRef-File-bin-basename-389985495eb2e1d2
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/bc
SPDXID: SPDXRef-File-bin-bc-f5b83db42d036545
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/beep
SPDXID: SPDXRef-File-bin-beep-6dd6c7f697b0225c
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/blkdiscard
SPDXID: SPDXRef-File-bin-blkdiscard-3fc5a80a44b59318
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/blkid
SPDXID: SPDXRef-File-bin-blkid-1bc6535e9cbb77ea
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/blockdev
SPDXID: SPDXRef-File-bin-blockdev-f0408212bfabfab4
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/bootchartd
SPDXID: SPDXRef-File-bin-bootchartd-e57bc33074f2da21
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/brctl
SPDXID: SPDXRef-File-bin-brctl-205b587fbb940436
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/bunzip2
SPDXID: SPDXRef-File-bin-bunzip2-881b8598d2d647d7
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/busybox
SPDXID: SPDXRef-File-bin-busybox-637ef94705caf530
FileType: APPLICATION
FileType: BINARY
FileChecksum: SHA1: ad043255229d0a1f0a99e1cebaf70d32914c50e1
FileChecksum: SHA256: c849b73ca587db87c78f3fefce435c9ead2bbd0f3bb66257531eb8235a41ec45
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/bzcat
SPDXID: SPDXRef-File-bin-bzcat-debb5ff8f906db74
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/bzip2
SPDXID: SPDXRef-File-bin-bzip2-03a3fc2d201fabe7
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/cal
SPDXID: SPDXRef-File-bin-cal-d96b5c66183af217
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/cat
SPDXID: SPDXRef-File-bin-cat-3999ca51a44fd3a4
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/chat
SPDXID: SPDXRef-File-bin-chat-7c805559e8e47527
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/chattr
SPDXID: SPDXRef-File-bin-chattr-48145c06aef0119f
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/chgrp
SPDXID: SPDXRef-File-bin-chgrp-bd5fa525c3b8e6ec
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/chmod
SPDXID: SPDXRef-File-bin-chmod-860f77175d584e94
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/chown
SPDXID: SPDXRef-File-bin-chown-f13ee247b6b716ef
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/chpasswd
SPDXID: SPDXRef-File-bin-chpasswd-41424d507ba8cb99
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/chpst
SPDXID: SPDXRef-File-bin-chpst-bf6d0e064552a266
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/chroot
SPDXID: SPDXRef-File-bin-chroot-408124d4a273c216
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/chrt
SPDXID: SPDXRef-File-bin-chrt-7940385640b6079e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/chvt
SPDXID: SPDXRef-File-bin-chvt-1d2be76285149338
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/cksum
SPDXID: SPDXRef-File-bin-cksum-4a2486006e15e54c
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/clear
SPDXID: SPDXRef-File-bin-clear-6e1a4770610ec15e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/cmp
SPDXID: SPDXRef-File-bin-cmp-d84566228e00e187
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/comm
SPDXID: SPDXRef-File-bin-comm-3d86aea4d783119d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/conspy
SPDXID: SPDXRef-File-bin-conspy-d89e752129bbe301
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/cp
SPDXID: SPDXRef-File-bin-cp-789733c06828d83e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/cpio
SPDXID: SPDXRef-File-bin-cpio-0e2967d850a7d97d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/crc32
SPDXID: SPDXRef-File-bin-crc32-1b52197203589519
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/crond
SPDXID: SPDXRef-File-bin-crond-ae9857921e2bb4e8
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/crontab
SPDXID: SPDXRef-File-bin-crontab-53f9524c400ef431
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/cryptpw
SPDXID: SPDXRef-File-bin-cryptpw-5cc9c0d7f6748655
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/cttyhack
SPDXID: SPDXRef-File-bin-cttyhack-1bc85789e483ce70
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/cut
SPDXID: SPDXRef-File-bin-cut-e06b8551d1c1962e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/date
SPDXID: SPDXRef-File-bin-date-b18606b5d277a7ed
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/dc
SPDXID: SPDXRef-File-bin-dc-324bd83b105405c1
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/dd
SPDXID: SPDXRef-File-bin-dd-e54f5a4d589ab30f
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/deallocvt
SPDXID: SPDXRef-File-bin-deallocvt-20da2aad31c4602d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/delgroup
SPDXID: SPDXRef-File-bin-delgroup-f2448c5227ffd298
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/deluser
SPDXID: SPDXRef-File-bin-deluser-fe0c3cf03766c008
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/depmod
SPDXID: SPDXRef-File-bin-depmod-ed98383121c8e281
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/devmem
SPDXID: SPDXRef-File-bin-devmem-96cddbe74dc755bf
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/df
SPDXID: SPDXRef-File-bin-df-029812fde648600d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/dhcprelay
SPDXID: SPDXRef-File-bin-dhcprelay-bb25f1cdfaa9d3fe
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/diff
SPDXID: SPDXRef-File-bin-diff-d7aecedf9a67e3d0
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/dirname
SPDXID: SPDXRef-File-bin-dirname-ce1f5a21c0bb02e0
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/dmesg
SPDXID: SPDXRef-File-bin-dmesg-120b4aea6889f88b
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/dnsd
SPDXID: SPDXRef-File-bin-dnsd-bdc59b76dfbf64b9
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/dnsdomainname
SPDXID: SPDXRef-File-bin-dnsdomainname-ba3cf2e53be5ec58
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/dos2unix
SPDXID: SPDXRef-File-bin-dos2unix-71fa5b0785d556f4
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/dpkg-deb
SPDXID: SPDXRef-File-bin-dpkg-deb-d06fbc51631c3cb8
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/dpkg
SPDXID: SPDXRef-File-bin-dpkg-f22bd74da92320e1
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/du
SPDXID: SPDXRef-File-bin-du-49ab90aa68d41dbd
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/dumpkmap
SPDXID: SPDXRef-File-bin-dumpkmap-8a31e7fc78b066c2
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/dumpleases
SPDXID: SPDXRef-File-bin-dumpleases-81b05a43f5c3ca9a
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/echo
SPDXID: SPDXRef-File-bin-echo-e2430465b4e31056
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ed
SPDXID: SPDXRef-File-bin-ed-7c189f34a6dab7bc
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/egrep
SPDXID: SPDXRef-File-bin-egrep-de910e21d3c65d7f
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/eject
SPDXID: SPDXRef-File-bin-eject-193ca00a316e0043
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/env
SPDXID: SPDXRef-File-bin-env-0499e0629cd7aa1f
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/envdir
SPDXID: SPDXRef-File-bin-envdir-613b00a71fc63930
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/envuidgid
SPDXID: SPDXRef-File-bin-envuidgid-52c628310e10d040
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ether-wake
SPDXID: SPDXRef-File-bin-ether-wake-fe915097a7f89c44
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/expand
SPDXID: SPDXRef-File-bin-expand-b900be3c9e235f80
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/expr
SPDXID: SPDXRef-File-bin-expr-bbfcee96df649e27
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/factor
SPDXID: SPDXRef-File-bin-factor-3e923c46766158f5
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fakeidentd
SPDXID: SPDXRef-File-bin-fakeidentd-2419ce0aa751f47e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fallocate
SPDXID: SPDXRef-File-bin-fallocate-98c92da302d77d7a
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/false
SPDXID: SPDXRef-File-bin-false-584e51caff13f935
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fatattr
SPDXID: SPDXRef-File-bin-fatattr-402c4bd9cb09adf2
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fbset
SPDXID: SPDXRef-File-bin-fbset-251eb35032428806
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fbsplash
SPDXID: SPDXRef-File-bin-fbsplash-75e115dd79fcfe94
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fdflush
SPDXID: SPDXRef-File-bin-fdflush-831dff4e29ba2f19
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fdformat
SPDXID: SPDXRef-File-bin-fdformat-c03780931742ce83
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fdisk
SPDXID: SPDXRef-File-bin-fdisk-80e56badb9f38593
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fgconsole
SPDXID: SPDXRef-File-bin-fgconsole-89ce5dc8e0555c24
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fgrep
SPDXID: SPDXRef-File-bin-fgrep-c9919efcca49acfb
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/find
SPDXID: SPDXRef-File-bin-find-b844847c769f2ce5
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/findfs
SPDXID: SPDXRef-File-bin-findfs-762070cfd45cde77
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/flock
SPDXID: SPDXRef-File-bin-flock-a30a8f11f08c3f30
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fold
SPDXID: SPDXRef-File-bin-fold-1ac619645baaed08
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/free
SPDXID: SPDXRef-File-bin-free-8fc223441608a1d7
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/freeramdisk
SPDXID: SPDXRef-File-bin-freeramdisk-378cbe4d33c29361
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fsck
SPDXID: SPDXRef-File-bin-fsck-de9337f387e481fe
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fsck.minix
SPDXID: SPDXRef-File-bin-fsck.minix-b664d320ab50ca71
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fsfreeze
SPDXID: SPDXRef-File-bin-fsfreeze-7bcacd1263206f9c
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fstrim
SPDXID: SPDXRef-File-bin-fstrim-60b8b773cd17f2be
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fsync
SPDXID: SPDXRef-File-bin-fsync-e923554caa27ab14
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ftpd
SPDXID: SPDXRef-File-bin-ftpd-fdcc4414491b6486
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ftpget
SPDXID: SPDXRef-File-bin-ftpget-0bb6ef8ca281577b
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ftpput
SPDXID: SPDXRef-File-bin-ftpput-f081d71b5b813897
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/fuser
SPDXID: SPDXRef-File-bin-fuser-1e50a61dfd72a3c3
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/getconf
SPDXID: SPDXRef-File-bin-getconf-f1f51c7204617746
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/getfattr
SPDXID: SPDXRef-File-bin-getfattr-befaeae5d17c778d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/getopt
SPDXID: SPDXRef-File-bin-getopt-f0025aeaf32b3da3
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/getty
SPDXID: SPDXRef-File-bin-getty-87bc433ff3bd287d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/grep
SPDXID: SPDXRef-File-bin-grep-5a9ce783d96f552c
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/groups
SPDXID: SPDXRef-File-bin-groups-845635abc3addfef
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/gunzip
SPDXID: SPDXRef-File-bin-gunzip-2a0c1cf0f442d8e4
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/gzip
SPDXID: SPDXRef-File-bin-gzip-c6bf8076b8b89db0
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/halt
SPDXID: SPDXRef-File-bin-halt-4401fcccfc934295
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/hd
SPDXID: SPDXRef-File-bin-hd-b536f3ccdd6b4894
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/hdparm
SPDXID: SPDXRef-File-bin-hdparm-14eebfef771a95b9
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/head
SPDXID: SPDXRef-File-bin-head-5ef986d591e43895
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/hexdump
SPDXID: SPDXRef-File-bin-hexdump-7600fc6b695cac33
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/hexedit
SPDXID: SPDXRef-File-bin-hexedit-ccaaf54ef71f810d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/hostid
SPDXID: SPDXRef-File-bin-hostid-e59f061a81f08af8
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/hostname
SPDXID: SPDXRef-File-bin-hostname-30ab0da61210d688
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/httpd
SPDXID: SPDXRef-File-bin-httpd-b6ddd6c54f292261
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/hush
SPDXID: SPDXRef-File-bin-hush-6d968bdce382d1d2
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/hwclock
SPDXID: SPDXRef-File-bin-hwclock-062b02f123b821f6
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/i2cdetect
SPDXID: SPDXRef-File-bin-i2cdetect-2dcbcc9818130302
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/i2cdump
SPDXID: SPDXRef-File-bin-i2cdump-6d76a2c3c67d1050
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/i2cget
SPDXID: SPDXRef-File-bin-i2cget-8155be978d161f7b
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/i2cset
SPDXID: SPDXRef-File-bin-i2cset-5136b113f1ae1ce0
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/i2ctransfer
SPDXID: SPDXRef-File-bin-i2ctransfer-8093b5582196a170
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/id
SPDXID: SPDXRef-File-bin-id-a0f31233fce88601
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ifconfig
SPDXID: SPDXRef-File-bin-ifconfig-a7569e4cca588c85
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ifdown
SPDXID: SPDXRef-File-bin-ifdown-b0c388a1694e60de
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ifenslave
SPDXID: SPDXRef-File-bin-ifenslave-967e03003a3dcf59
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ifplugd
SPDXID: SPDXRef-File-bin-ifplugd-3a2fe14a63e90abf
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ifup
SPDXID: SPDXRef-File-bin-ifup-ef5fa45ae63ed694
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/inetd
SPDXID: SPDXRef-File-bin-inetd-de13c2f43a0f3573
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/init
SPDXID: SPDXRef-File-bin-init-65e6b1378cf01f39
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/inotifyd
SPDXID: SPDXRef-File-bin-inotifyd-67c13b1ccd1365da
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/insmod
SPDXID: SPDXRef-File-bin-insmod-44c3bc3960fbd2ff
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/install
SPDXID: SPDXRef-File-bin-install-71b83f808fe16d7c
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ionice
SPDXID: SPDXRef-File-bin-ionice-76b1df2be239a6a8
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/iostat
SPDXID: SPDXRef-File-bin-iostat-ab6a0e9d4e42b269
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ip
SPDXID: SPDXRef-File-bin-ip-17433b2433190193
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ipaddr
SPDXID: SPDXRef-File-bin-ipaddr-c70e4030caf1dacb
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ipcalc
SPDXID: SPDXRef-File-bin-ipcalc-ebd3cb97530c69fb
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ipcrm
SPDXID: SPDXRef-File-bin-ipcrm-9909c99941bfdd99
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ipcs
SPDXID: SPDXRef-File-bin-ipcs-19a912c3573d4243
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/iplink
SPDXID: SPDXRef-File-bin-iplink-3a0b050b0ad09f44
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ipneigh
SPDXID: SPDXRef-File-bin-ipneigh-c8e33998d2314a15
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/iproute
SPDXID: SPDXRef-File-bin-iproute-18cb1d6aeef016a1
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/iprule
SPDXID: SPDXRef-File-bin-iprule-5e4dc75fc2deee36
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/iptunnel
SPDXID: SPDXRef-File-bin-iptunnel-ae1c4b50dc87d60b
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/kbd_mode
SPDXID: SPDXRef-File-bin-kbd-mode-7bf0b20ab0736925
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/kill
SPDXID: SPDXRef-File-bin-kill-6b54d23b0a773009
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/killall
SPDXID: SPDXRef-File-bin-killall-65518b5d1a77765b
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/killall5
SPDXID: SPDXRef-File-bin-killall5-8abd7d059096a933
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/klogd
SPDXID: SPDXRef-File-bin-klogd-30b19e0a50b35298
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/last
SPDXID: SPDXRef-File-bin-last-58628a8f5d0fb154
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/less
SPDXID: SPDXRef-File-bin-less-e57bfccff6e375d7
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/link
SPDXID: SPDXRef-File-bin-link-d257f25f62aed2d1
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/linux32
SPDXID: SPDXRef-File-bin-linux32-046c711f767ffb81
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/linux64
SPDXID: SPDXRef-File-bin-linux64-bd3868a90aa80b46
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/linuxrc
SPDXID: SPDXRef-File-bin-linuxrc-249f662b9b7b30bb
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ln
SPDXID: SPDXRef-File-bin-ln-350a14f1feb018c0
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/loadfont
SPDXID: SPDXRef-File-bin-loadfont-49bf9ed9090c812f
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/loadkmap
SPDXID: SPDXRef-File-bin-loadkmap-5776b90805863690
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/logger
SPDXID: SPDXRef-File-bin-logger-5e56129ecee67f9b
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/login
SPDXID: SPDXRef-File-bin-login-23840b4c2d52f542
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/logname
SPDXID: SPDXRef-File-bin-logname-558ad65288737fe9
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/logread
SPDXID: SPDXRef-File-bin-logread-5b453353dc0cb5e4
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/losetup
SPDXID: SPDXRef-File-bin-losetup-645151f25b3bedc7
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/lpd
SPDXID: SPDXRef-File-bin-lpd-c4c1cdbec5238528
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/lpq
SPDXID: SPDXRef-File-bin-lpq-0846d135e2830b7f
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/lpr
SPDXID: SPDXRef-File-bin-lpr-b874ecc2cf1307bc
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ls
SPDXID: SPDXRef-File-bin-ls-d21ed27cdf4d0f5b
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/lsattr
SPDXID: SPDXRef-File-bin-lsattr-14c67ec6a1f51841
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/lsblk
SPDXID: SPDXRef-File-bin-lsblk-b6cbfd364befba9e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/lsmod
SPDXID: SPDXRef-File-bin-lsmod-345940d2a8b8823d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/lsof
SPDXID: SPDXRef-File-bin-lsof-30da93d0f684b343
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/lspci
SPDXID: SPDXRef-File-bin-lspci-7ccda817e61594df
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/lsscsi
SPDXID: SPDXRef-File-bin-lsscsi-385f9b56dd84752d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/lsusb
SPDXID: SPDXRef-File-bin-lsusb-eae47271ec71eecb
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/lzcat
SPDXID: SPDXRef-File-bin-lzcat-774cf62237bd0968
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/lzma
SPDXID: SPDXRef-File-bin-lzma-1cb241929297a70d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/lzop
SPDXID: SPDXRef-File-bin-lzop-ff9271ed14bdb64a
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/makedevs
SPDXID: SPDXRef-File-bin-makedevs-fff5f81c36d10de3
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/makemime
SPDXID: SPDXRef-File-bin-makemime-cc29ece149ca5118
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/man
SPDXID: SPDXRef-File-bin-man-a90364706a7de5c9
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/md5sum
SPDXID: SPDXRef-File-bin-md5sum-f0b0fd7521459395
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mdev
SPDXID: SPDXRef-File-bin-mdev-8c95e753a611f583
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mesg
SPDXID: SPDXRef-File-bin-mesg-6a386175872a7799
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/microcom
SPDXID: SPDXRef-File-bin-microcom-2dc5d14c10902cd9
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mim
SPDXID: SPDXRef-File-bin-mim-9a8206faed162b72
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mkdir
SPDXID: SPDXRef-File-bin-mkdir-092107a66621a6dd
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mkdosfs
SPDXID: SPDXRef-File-bin-mkdosfs-6ab0c5e53e7e7dd1
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mke2fs
SPDXID: SPDXRef-File-bin-mke2fs-37fff707f3b8c275
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mkfifo
SPDXID: SPDXRef-File-bin-mkfifo-91b1b2896bcdb5da
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mkfs.ext2
SPDXID: SPDXRef-File-bin-mkfs.ext2-209972e6d82b62d5
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mkfs.minix
SPDXID: SPDXRef-File-bin-mkfs.minix-b975c6f82814108e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mkfs.vfat
SPDXID: SPDXRef-File-bin-mkfs.vfat-cc942d73a6ed480a
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mknod
SPDXID: SPDXRef-File-bin-mknod-e4d32a972ba0adfe
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mkpasswd
SPDXID: SPDXRef-File-bin-mkpasswd-6794fba4c1d5c931
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mkswap
SPDXID: SPDXRef-File-bin-mkswap-e8d1e0b946457366
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mktemp
SPDXID: SPDXRef-File-bin-mktemp-d0660502b60d268b
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/modinfo
SPDXID: SPDXRef-File-bin-modinfo-9695db05e8e76def
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/modprobe
SPDXID: SPDXRef-File-bin-modprobe-28862b7af9dcd014
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/more
SPDXID: SPDXRef-File-bin-more-2a3bdcbf3b407a89
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mount
SPDXID: SPDXRef-File-bin-mount-633945acfc74e455
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mountpoint
SPDXID: SPDXRef-File-bin-mountpoint-8c1fa31b7ec3197d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mpstat
SPDXID: SPDXRef-File-bin-mpstat-1e9ee4b531583430
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mt
SPDXID: SPDXRef-File-bin-mt-62c2e5b8756ec9d6
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/mv
SPDXID: SPDXRef-File-bin-mv-4b542b09c6436f33
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/nameif
SPDXID: SPDXRef-File-bin-nameif-31fbe469cbd73bc9
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/nanddump
SPDXID: SPDXRef-File-bin-nanddump-84d95ff80a388485
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/nandwrite
SPDXID: SPDXRef-File-bin-nandwrite-1907477538f07a5d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/nbd-client
SPDXID: SPDXRef-File-bin-nbd-client-21ea4bb6c1523a4c
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/nc
SPDXID: SPDXRef-File-bin-nc-89685ca4e34fa355
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/netstat
SPDXID: SPDXRef-File-bin-netstat-2a6a808a43f921cc
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/nice
SPDXID: SPDXRef-File-bin-nice-147a48fbce918cbf
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/nl
SPDXID: SPDXRef-File-bin-nl-6baaf4e3201a9c00
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/nmeter
SPDXID: SPDXRef-File-bin-nmeter-e04c343a7e1ab10e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/nohup
SPDXID: SPDXRef-File-bin-nohup-73047a8c6a2b2bcc
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/nologin
SPDXID: SPDXRef-File-bin-nologin-d07a71bbb90ee3d3
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/nproc
SPDXID: SPDXRef-File-bin-nproc-806c1a61a44055fb
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/nsenter
SPDXID: SPDXRef-File-bin-nsenter-239d9bc22981f506
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/nslookup
SPDXID: SPDXRef-File-bin-nslookup-a736c726616a3d62
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ntpd
SPDXID: SPDXRef-File-bin-ntpd-d5d865a5058499a7
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/od
SPDXID: SPDXRef-File-bin-od-2d786e1f45b1556b
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/openvt
SPDXID: SPDXRef-File-bin-openvt-f000d622b9b52c60
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/partprobe
SPDXID: SPDXRef-File-bin-partprobe-bd080ff5eaa40cb1
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/passwd
SPDXID: SPDXRef-File-bin-passwd-943d3ea5769e6b46
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/paste
SPDXID: SPDXRef-File-bin-paste-ae3ed32eeb1fbd24
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/patch
SPDXID: SPDXRef-File-bin-patch-f5694e00bd33c573
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/pgrep
SPDXID: SPDXRef-File-bin-pgrep-8878b9a92e01b4b9
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/pidof
SPDXID: SPDXRef-File-bin-pidof-5c2bfbbfb18f2ef1
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ping
SPDXID: SPDXRef-File-bin-ping-4fff12f3c667121c
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ping6
SPDXID: SPDXRef-File-bin-ping6-a97dfe028de502c7
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/pipe_progress
SPDXID: SPDXRef-File-bin-pipe-progress-74553e22b20f2233
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/pivot_root
SPDXID: SPDXRef-File-bin-pivot-root-0b346e014a0902db
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/pkill
SPDXID: SPDXRef-File-bin-pkill-f1242ea13f73e592
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/pmap
SPDXID: SPDXRef-File-bin-pmap-bacb4ef5ab6a7df4
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/popmaildir
SPDXID: SPDXRef-File-bin-popmaildir-de6572fbdcc7e7fb
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/poweroff
SPDXID: SPDXRef-File-bin-poweroff-90ea8077147403d6
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/powertop
SPDXID: SPDXRef-File-bin-powertop-cd98d8b234738d9c
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/printenv
SPDXID: SPDXRef-File-bin-printenv-7f945ec4c5e42e18
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/printf
SPDXID: SPDXRef-File-bin-printf-28bff72f05d93ad8
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ps
SPDXID: SPDXRef-File-bin-ps-a7116cba77714f5e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/pscan
SPDXID: SPDXRef-File-bin-pscan-1b84e4a4edd50c21
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/pstree
SPDXID: SPDXRef-File-bin-pstree-bd85eecfa515a6a6
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/pwd
SPDXID: SPDXRef-File-bin-pwd-48e3fc6ad59b14de
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/pwdx
SPDXID: SPDXRef-File-bin-pwdx-d28e1d89f0c75197
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/raidautorun
SPDXID: SPDXRef-File-bin-raidautorun-b9717db4a7a323e6
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/rdate
SPDXID: SPDXRef-File-bin-rdate-0487628263c9e7df
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/rdev
SPDXID: SPDXRef-File-bin-rdev-032a2932ba0804cc
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/readahead
SPDXID: SPDXRef-File-bin-readahead-4b3b5d4184ea085e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/readlink
SPDXID: SPDXRef-File-bin-readlink-d58786fe6a96080f
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/readprofile
SPDXID: SPDXRef-File-bin-readprofile-6dd3e0327079b3e8
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/realpath
SPDXID: SPDXRef-File-bin-realpath-8a8c632998f39a5d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/reboot
SPDXID: SPDXRef-File-bin-reboot-6e7309b98de365be
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/reformime
SPDXID: SPDXRef-File-bin-reformime-c5d91fcdafa1c962
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/remove-shell
SPDXID: SPDXRef-File-bin-remove-shell-1d686e203effa794
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/renice
SPDXID: SPDXRef-File-bin-renice-c623b9cb7de36c19
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/reset
SPDXID: SPDXRef-File-bin-reset-cdc451e32a35a92e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/resize
SPDXID: SPDXRef-File-bin-resize-339b8d0fbeadeb70
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/resume
SPDXID: SPDXRef-File-bin-resume-6df838457918479a
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/rev
SPDXID: SPDXRef-File-bin-rev-6019d2b319e218c9
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/rm
SPDXID: SPDXRef-File-bin-rm-6657afe039159deb
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/rmdir
SPDXID: SPDXRef-File-bin-rmdir-7c015d49e718f376
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/rmmod
SPDXID: SPDXRef-File-bin-rmmod-c6a4c7dd58bfcab0
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/route
SPDXID: SPDXRef-File-bin-route-d1a46b20f63a0186
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/rpm
SPDXID: SPDXRef-File-bin-rpm-bdfeb2332eaac81b
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/rpm2cpio
SPDXID: SPDXRef-File-bin-rpm2cpio-a0ceb6abc71e3b37
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/rtcwake
SPDXID: SPDXRef-File-bin-rtcwake-ddebdb437a77ef88
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/run-init
SPDXID: SPDXRef-File-bin-run-init-68c89ce56f5ee025
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/run-parts
SPDXID: SPDXRef-File-bin-run-parts-8a96ea954d4d0609
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/runlevel
SPDXID: SPDXRef-File-bin-runlevel-31b5a540f2cc2622
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/runsv
SPDXID: SPDXRef-File-bin-runsv-25391ca0235d40df
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/runsvdir
SPDXID: SPDXRef-File-bin-runsvdir-bcea27b1a87ace9e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/rx
SPDXID: SPDXRef-File-bin-rx-a76abc30be9ed5b2
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/script
SPDXID: SPDXRef-File-bin-script-c2c666796265176c
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/scriptreplay
SPDXID: SPDXRef-File-bin-scriptreplay-1ce3de01c4ade92a
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/sed
SPDXID: SPDXRef-File-bin-sed-7579a5db28f856f8
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/seedrng
SPDXID: SPDXRef-File-bin-seedrng-70b78c0dd24546a5
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/sendmail
SPDXID: SPDXRef-File-bin-sendmail-20eb3c033b6d3cb8
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/seq
SPDXID: SPDXRef-File-bin-seq-e63f6812f94aea24
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/setarch
SPDXID: SPDXRef-File-bin-setarch-74a5a0ad35c48731
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/setconsole
SPDXID: SPDXRef-File-bin-setconsole-337b6747ed4f8e53
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/setfattr
SPDXID: SPDXRef-File-bin-setfattr-0b2be47a9f4c3aa9
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/setfont
SPDXID: SPDXRef-File-bin-setfont-17c14e21557ddf43
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/setkeycodes
SPDXID: SPDXRef-File-bin-setkeycodes-8e22849ac65ca530
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/setlogcons
SPDXID: SPDXRef-File-bin-setlogcons-e9ab785304a76b27
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/setpriv
SPDXID: SPDXRef-File-bin-setpriv-d8d7701573af474e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/setserial
SPDXID: SPDXRef-File-bin-setserial-1563c45a343f86f0
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/setsid
SPDXID: SPDXRef-File-bin-setsid-6e966444290b7384
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/setuidgid
SPDXID: SPDXRef-File-bin-setuidgid-d84ac2440b0d06a7
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/sh
SPDXID: SPDXRef-File-bin-sh-ba7449b7da42ff0f
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/sha1sum
SPDXID: SPDXRef-File-bin-sha1sum-d54e86a043d56696
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/sha256sum
SPDXID: SPDXRef-File-bin-sha256sum-f1f1b8125abc49c2
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/sha384sum
SPDXID: SPDXRef-File-bin-sha384sum-d2e2d324889b32c9
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/sha3sum
SPDXID: SPDXRef-File-bin-sha3sum-7ccfc1a8e1b85827
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/sha512sum
SPDXID: SPDXRef-File-bin-sha512sum-43e559c8ef831ca5
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/showkey
SPDXID: SPDXRef-File-bin-showkey-9df131edd84d4b52
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/shred
SPDXID: SPDXRef-File-bin-shred-2c2411bb7735198a
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/shuf
SPDXID: SPDXRef-File-bin-shuf-2e4f8fe2fa25e5d8
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/slattach
SPDXID: SPDXRef-File-bin-slattach-a8ce5df2e4a7c95b
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/sleep
SPDXID: SPDXRef-File-bin-sleep-9fd8a331478a7256
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/smemcap
SPDXID: SPDXRef-File-bin-smemcap-e67bf29e153ef852
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/softlimit
SPDXID: SPDXRef-File-bin-softlimit-8c6f2b09f0a44897
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/sort
SPDXID: SPDXRef-File-bin-sort-c925ef303bf11ad3
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/split
SPDXID: SPDXRef-File-bin-split-5042c6ac657067a9
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ssl_client
SPDXID: SPDXRef-File-bin-ssl-client-08088389748837f2
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ssl_server
SPDXID: SPDXRef-File-bin-ssl-server-3ef70e5c76555ad5
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/start-stop-daemon
SPDXID: SPDXRef-File-bin-start-stop-daemon-bb707c598fe3bd5a
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/stat
SPDXID: SPDXRef-File-bin-stat-f6d1b0a5f9f5ed16
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/strings
SPDXID: SPDXRef-File-bin-strings-b4420f624069e02b
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/stty
SPDXID: SPDXRef-File-bin-stty-600b48e2e90ec6bc
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/su
SPDXID: SPDXRef-File-bin-su-71e19026ac8d319d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/sulogin
SPDXID: SPDXRef-File-bin-sulogin-d5c26a8b1c56c2c8
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/sum
SPDXID: SPDXRef-File-bin-sum-cc54f32c143b653a
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/sv
SPDXID: SPDXRef-File-bin-sv-ac826978f6995a31
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/svc
SPDXID: SPDXRef-File-bin-svc-0ef2e96ba8cf84ad
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/svlogd
SPDXID: SPDXRef-File-bin-svlogd-863ee0ec24e98eb4
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/svok
SPDXID: SPDXRef-File-bin-svok-cd717b1a2d74f3d8
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/swapoff
SPDXID: SPDXRef-File-bin-swapoff-23ffbc7df9a50e02
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/swapon
SPDXID: SPDXRef-File-bin-swapon-51c5266e932fa6cb
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/switch_root
SPDXID: SPDXRef-File-bin-switch-root-bd1019e1dfb017ed
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/sync
SPDXID: SPDXRef-File-bin-sync-8dab709c7050f177
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/sysctl
SPDXID: SPDXRef-File-bin-sysctl-7da9d68fab337314
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/syslogd
SPDXID: SPDXRef-File-bin-syslogd-ace19b2c0163dcce
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/tac
SPDXID: SPDXRef-File-bin-tac-8872201b37431de3
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/tail
SPDXID: SPDXRef-File-bin-tail-d1b4eedd181c0d08
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/tar
SPDXID: SPDXRef-File-bin-tar-995c9997d359ee5b
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/taskset
SPDXID: SPDXRef-File-bin-taskset-fa9ee4fa2fbcf61c
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/tc
SPDXID: SPDXRef-File-bin-tc-0d467ae917d80c8d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/tcpsvd
SPDXID: SPDXRef-File-bin-tcpsvd-6d80b8ef998c5497
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/tee
SPDXID: SPDXRef-File-bin-tee-095e39df937e7a11
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/telnet
SPDXID: SPDXRef-File-bin-telnet-5e9901fa010db423
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/telnetd
SPDXID: SPDXRef-File-bin-telnetd-456967cab2e3e612
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/test
SPDXID: SPDXRef-File-bin-test-8f09d7c53d9e000b
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/tftp
SPDXID: SPDXRef-File-bin-tftp-ccf8997b542595d1
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/tftpd
SPDXID: SPDXRef-File-bin-tftpd-5474ee6620d733bd
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/time
SPDXID: SPDXRef-File-bin-time-47bce9e6d8d8105f
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/timeout
SPDXID: SPDXRef-File-bin-timeout-521f7463419bfc1a
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/top
SPDXID: SPDXRef-File-bin-top-6c86c4ca36a84104
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/touch
SPDXID: SPDXRef-File-bin-touch-e6590098db1081fb
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/tr
SPDXID: SPDXRef-File-bin-tr-086125c636d60b40
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/traceroute
SPDXID: SPDXRef-File-bin-traceroute-f8b5c5c4fc654fa3
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/traceroute6
SPDXID: SPDXRef-File-bin-traceroute6-b746455e1ced1d81
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/tree
SPDXID: SPDXRef-File-bin-tree-ff32115dfe8f143e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/true
SPDXID: SPDXRef-File-bin-true-01fbffc6cf66a83e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/truncate
SPDXID: SPDXRef-File-bin-truncate-c5c0051ea543f1e7
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ts
SPDXID: SPDXRef-File-bin-ts-c8e563d4578356ee
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/tsort
SPDXID: SPDXRef-File-bin-tsort-35ec820854ac1986
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/tty
SPDXID: SPDXRef-File-bin-tty-2bed791f12251116
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ttysize
SPDXID: SPDXRef-File-bin-ttysize-a473d109c948ff89
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/tunctl
SPDXID: SPDXRef-File-bin-tunctl-e24b9e96a1596fba
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ubiattach
SPDXID: SPDXRef-File-bin-ubiattach-6d129a02eda9085a
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ubidetach
SPDXID: SPDXRef-File-bin-ubidetach-ddede2930af785a7
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ubimkvol
SPDXID: SPDXRef-File-bin-ubimkvol-79ad54351f59c570
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ubirename
SPDXID: SPDXRef-File-bin-ubirename-5501a8a9c164f78f
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ubirmvol
SPDXID: SPDXRef-File-bin-ubirmvol-b86172d38791f986
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ubirsvol
SPDXID: SPDXRef-File-bin-ubirsvol-86915d281db90710
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/ubiupdatevol
SPDXID: SPDXRef-File-bin-ubiupdatevol-9851b45232305beb
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/udhcpc
SPDXID: SPDXRef-File-bin-udhcpc-72c95eb8cfd2d5a7
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/udhcpc6
SPDXID: SPDXRef-File-bin-udhcpc6-e1bd1a3364770706
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/udhcpd
SPDXID: SPDXRef-File-bin-udhcpd-1f754dac42c0d7e0
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/udpsvd
SPDXID: SPDXRef-File-bin-udpsvd-5f6d10c3d7b3ad87
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/uevent
SPDXID: SPDXRef-File-bin-uevent-2e03ed396ff155fc
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/umount
SPDXID: SPDXRef-File-bin-umount-272fb87eef27b7a0
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/uname
SPDXID: SPDXRef-File-bin-uname-d1510d4075c8e1e5
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/unexpand
SPDXID: SPDXRef-File-bin-unexpand-4e5eb356a614104c
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/uniq
SPDXID: SPDXRef-File-bin-uniq-708086442b0c973a
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/unix2dos
SPDXID: SPDXRef-File-bin-unix2dos-238bd76d308a2aa3
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/unlink
SPDXID: SPDXRef-File-bin-unlink-858f1fb0b4c8be23
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/unlzma
SPDXID: SPDXRef-File-bin-unlzma-bc00f199747b9d63
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/unshare
SPDXID: SPDXRef-File-bin-unshare-650c329692a51e20
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/unxz
SPDXID: SPDXRef-File-bin-unxz-a459054a7dd4bc18
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/unzip
SPDXID: SPDXRef-File-bin-unzip-baab318d2af554d8
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/uptime
SPDXID: SPDXRef-File-bin-uptime-985025c5afd50019
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/users
SPDXID: SPDXRef-File-bin-users-4d3cb9300b595231
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/usleep
SPDXID: SPDXRef-File-bin-usleep-fe0af6b0484ba795
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/uudecode
SPDXID: SPDXRef-File-bin-uudecode-f14bda7e882e464d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/uuencode
SPDXID: SPDXRef-File-bin-uuencode-f5705a4f6778d1ef
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/uuidgen
SPDXID: SPDXRef-File-bin-uuidgen-cd622cf622913cdf
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/vconfig
SPDXID: SPDXRef-File-bin-vconfig-c4cde3bbfd7e87d8
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/vi
SPDXID: SPDXRef-File-bin-vi-443a0b3038cbdeed
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/vlock
SPDXID: SPDXRef-File-bin-vlock-65f022e8020252e3
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/vmstat
SPDXID: SPDXRef-File-bin-vmstat-4490f2cd95c5a6af
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/volname
SPDXID: SPDXRef-File-bin-volname-ff2fad4dffbde0d0
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/w
SPDXID: SPDXRef-File-bin-w-f3a29b73e2ff3ed4
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/wall
SPDXID: SPDXRef-File-bin-wall-d5746de0f945bb52
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/watch
SPDXID: SPDXRef-File-bin-watch-c051db121110f405
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/watchdog
SPDXID: SPDXRef-File-bin-watchdog-4b32dc87dae3c312
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/wc
SPDXID: SPDXRef-File-bin-wc-8cf6369024a050e2
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/wget
SPDXID: SPDXRef-File-bin-wget-6d2b889cd047f81b
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/which
SPDXID: SPDXRef-File-bin-which-ba414c49a4cf0243
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/who
SPDXID: SPDXRef-File-bin-who-4b044616264d55b4
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/whoami
SPDXID: SPDXRef-File-bin-whoami-176c2393b77c4455
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/whois
SPDXID: SPDXRef-File-bin-whois-7d294517bda4c960
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/xargs
SPDXID: SPDXRef-File-bin-xargs-a051c44cb99ad1f7
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/xxd
SPDXID: SPDXRef-File-bin-xxd-77d0f471b4d804a1
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/xz
SPDXID: SPDXRef-File-bin-xz-2a7f0d3771d1c87e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/xzcat
SPDXID: SPDXRef-File-bin-xzcat-969a674bb52ff55b
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/yes
SPDXID: SPDXRef-File-bin-yes-1f8d5789c601924d
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/zcat
SPDXID: SPDXRef-File-bin-zcat-a2e3fc00942b1a9e
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: bin/zcip
SPDXID: SPDXRef-File-bin-zcip-a171a979777326be
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: lib/ld-linux-x86-64.so.2
SPDXID: SPDXRef-File-lib-ld-linux-x86-64.so.2-6401940b3ba37775
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: lib/libc.so.6
SPDXID: SPDXRef-File-lib-libc.so.6-6243d7fbbbe74455
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: lib/libm.so.6
SPDXID: SPDXRef-File-lib-libm.so.6-7dc85f4c48ba2367
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: lib/libnss_compat.so.2
SPDXID: SPDXRef-File-lib-libnss-compat.so.2-0c7201d705137ee8
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: lib/libnss_dns.so.2
SPDXID: SPDXRef-File-lib-libnss-dns.so.2-d82051fcd3641435
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: lib/libnss_files.so.2
SPDXID: SPDXRef-File-lib-libnss-files.so.2-c1f35fbdad4711ab
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: lib/libnss_hesiod.so.2
SPDXID: SPDXRef-File-lib-libnss-hesiod.so.2-658eba943093af1a
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: lib/libpthread.so.0
SPDXID: SPDXRef-File-lib-libpthread.so.0-2765dbaab7c5776a
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

FileName: lib/libresolv.so.2
SPDXID: SPDXRef-File-lib-libresolv.so.2-4533d91ccb7999b4
FileChecksum: SHA1: 0000000000000000000000000000000000000000
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
FileComment: layerID: sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed

##### Package: busybox

PackageName: busybox
SPDXID: SPDXRef-DocumentRoot-Image-busybox
PackageVersion: sha256:8770c41a081d6f877b47de296ece92874bdc560a554faed767e6fa1f63e6d976
PackageSupplier: NOASSERTION
PackageDownloadLocation: NOASSERTION
PrimaryPackagePurpose: CONTAINER
FilesAnalyzed: false
PackageChecksum: SHA256: 8770c41a081d6f877b47de296ece92874bdc560a554faed767e6fa1f63e6d976
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
ExternalRef: PACKAGE-MANAGER purl pkg:oci/busybox@sha256%3A8770c41a081d6f877b47de296ece92874bdc560a554faed767e6fa1f63e6d976?arch=amd64&tag=latest

##### Package: busybox

PackageName: busybox
SPDXID: SPDXRef-Package-binary-busybox-b42fb417fc668909
PackageVersion: 1.38.0
PackageSupplier: NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageSourceInfo: acquired package info from the following paths: /bin/busybox
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
ExternalRef: SECURITY cpe23Type cpe:2.3:a:busybox:busybox:1.38.0:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:generic/busybox@1.38.0

##### Relationships

Relationship: SPDXRef-Package-binary-busybox-b42fb417fc668909 OTHER SPDXRef-File-bin-busybox-637ef94705caf530
RelationshipComment: evident-by: indicates the package's existence is evident by the given file
Relationship: SPDXRef-DocumentRoot-Image-busybox CONTAINS SPDXRef-Package-binary-busybox-b42fb417fc668909
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-DocumentRoot-Image-busybox

{
  "version": 0,
  "job": {},
  "detector": {
    "name": "syft",
    "url": "https://github.com/anchore/syft",
    "version": "1.54.0"
  },
  "metadata": {
    "syft:distro": "pkg:generic/busybox@1.38.0?like=busybox"
  },
  "manifests": {
    "busybox:latest:/bin/busybox": {
      "name": "busybox:latest:/bin/busybox",
      "file": {
        "source_location": "busybox:latest:/bin/busybox"
      },
      "metadata": {
        "syft:filesystem": "sha256:6cd030ace585499136a675899c23aeddcf4ae8065a8d35f016a132bfdc3b4aed"
      },
      "resolved": {
        "pkg:generic/busybox@1.38.0": {
          "package_url": "pkg:generic/busybox@1.38.0",
          "relationship": "direct",
          "scope": "runtime"
        }
      }
    }
  },
  "scanned": "2026-10-02T02:15:53Z"
}

Writing output to files

Direct Syft output to a file instead of stdout by appending =<file> to the format option:

# Write JSON to a file
syft <source> -o json=sbom.json

# Write to stdout (default behavior)
syft <source> -o json

Multiple outputs

Generate multiple SBOM formats in a single run by specifying multiple -o flags:

syft <source> \
  -o json=sbom.json \
  -o spdx-json=sbom.spdx.json

You can both display to terminal and write to file:

syft <source> \
  -o table \           # report to stdout
  -o json=sbom.json    # write to file

FAQ

Which format should I use?

For human review: Use table (default) for quick package lists
For automation and queries: Use json to access all Syft data including file details, relationships, and metadata
For compliance and sharing: Use spdx-json or cyclonedx-json - both are widely supported industry standards
For custom formats: Use template to create your own output format

Can I convert between formats?

Yes! See the Format Conversion guide to convert existing SBOMs between formats without re-scanning.

Do all formats contain the same information?

No. Syft’s native json format contains the most complete information. Standard formats (SPDX, CycloneDX) contain package data but may not include all file details or Syft-specific metadata. Some data may be omitted or transformed to fit the target schema.

Which version should I use for SPDX or CycloneDX?

Use the latest version (default) unless you need compatibility with specific tools that require older versions. Check your downstream tools’ documentation for version requirements.

Next steps

Continue the guide

Next: Explore Working with Syft JSON to learn how to query and extract specific data from Syft’s native format using jq.

Additional resources:

Custom formats: Learn about customizing output with templates for specialized formats
Convert formats: See Format Conversion to convert between different SBOM formats
Advanced settings: Check configuration options for format-specific settings

3.1.4 - Working with JSON

Learn how to work with Syft’s native JSON format including querying with jq, extracting metadata, and understanding the SBOM structure.

Syft’s native JSON format provides the most comprehensive view of discovered software components, capturing all package metadata, file details, relationships, and source information.

Since Syft can convert from its native JSON format to standard SBOM formats, capturing your SBOM in Syft JSON format lets you generate any SBOM format as needed for compliance requirements.

JSON Schema Reference

For the complete, detailed JSON schema specification, see the Syft JSON Schema Reference.

Data Shapes

A Syft JSON output contains these main sections:

{
  "artifacts": [], // Package nodes discovered
  "artifactRelationships": [], // Edges between packages and files
  "files": [], // File nodes discovered
  "source": {}, // What was scanned (the image, directory, etc.)
  "distro": {}, // Linux distribution discovered
  "descriptor": {}, // Syft version and configuration that captured this SBOM
  "schema": {} // Schema version
}

Package (artifacts)

A software package discovered by Syft (library, application, OS package, etc.).

{
  "id": "74d9294c42941b37", // Unique identifier for this package that is content addressable
  "name": "openssl",
  "version": "1.1.1k",
  "type": "apk", // Package ecosystem (apk, deb, npm, etc.)
  "foundBy": "apk-cataloger",
  "locations": [
    // Paths used to populate information on this package object
    {
      "path": "/lib/apk/db/installed", // Always the real-path
      "layerID": "sha256:...",
      "accessPath": "/lib/apk/db/installed", // How Syft accessed the file (may be a symlink)
      "annotations": {
        "evidence": "primary" // Qualifies the kind of evidence extracted from this location (primary, supporting)
      }
    }
  ],
  "licenses": [
    {
      "value": "Apache-2.0", // Raw value discovered
      "spdxExpression": "Apache-2.0", // Normalized SPDX expression of the discovered value
      "type": "declared", // "declared", "concluded", or "observed"
      "urls": ["https://..."],
      "locations": [] // Where license was found
    }
  ],
  "language": "c",
  "cpes": [
    {
      "cpe": "cpe:2.3:a:openssl:openssl:1.1.1k:*:*:*:*:*:*:*",
      "source": "nvd-dictionary" // Where the CPE was derived from (nvd-dictionary or syft-generated)
    }
  ],
  "purl": "pkg:apk/alpine/openssl@1.1.1k",
  "metadata": {} // Ecosystem-specific fields (varies by type)
}

File

A file found on disk or referenced in package manager metadata.

{
  "id": "def456",
  "location": {
    "path": "/usr/bin/example",
    "layerID": "sha256:..." // For container images
  },
  "metadata": {
    "mode": 493, // File permissions in octal
    "type": "RegularFile",
    "mimeType": "application/x-executable",
    "size": 12345 // Size in bytes
  },
  "digests": [
    {
      "algorithm": "sha256",
      "value": "abc123..."
    }
  ],
  "licenses": [
    {
      "value": "Apache-2.0", // Raw value discovered
      "spdxExpression": "Apache-2.0", // Normalized SPDX expression of the discovered value
      "type": "declared", // "declared", "concluded", or "observed"
      "evidence": {
        "confidence": 100,
        "offset": 1234, // Byte offset in file
        "extent": 567 // Length of match
      }
    }
  ],
  "executable": {
    "format": "elf", // "elf", "pe", or "macho"
    "hasExports": true,
    "hasEntrypoint": true,
    "importedLibraries": [
      // Shared library dependencies
      "libc.so.6",
      "libssl.so.1.1"
    ],
    "elfSecurityFeatures": {
      // ELF binaries only
      "symbolTableStripped": false,
      "stackCanary": true, // Stack protection
      "nx": true, // No-Execute bit
      "relRO": "full", // Relocation Read-Only
      "pie": true // Position Independent Executable
    }
  }
}

Relationship

Connects any two nodes (package, file, or source) with a typed relationship.

{
  "parent": "package-id", // Package, file, or source ID
  "child": "file-id",
  "type": "contains" // contains, dependency-of, etc.
}

Source

Information about what was scanned (container image, directory, file, etc.).

{
  "id": "sha256:...",
  "name": "alpine:3.9.2", // User input
  "version": "sha256:...",
  "type": "image", // image, directory, file
  "metadata": {
    "imageID": "sha256:...",
    "manifestDigest": "sha256:...",
    "mediaType": "application/vnd.docker...",
    "tags": ["alpine:3.9.2"],
    "repoDigests": []
  }
}

Distribution

Linux distribution details from /etc/os-release or similar sources.

{
  "name": "alpine",
  "version": "3.9.2",
  "idLike": ["alpine"] // Related distributions
}

Location

Describes where a package or file was found.

{
  "path": "/lib/apk/db/installed",
  "layerID": "sha256:...",
  "accessPath": "/var/lib/apk/installed",
  "annotations": {
    "evidence": "primary"
  }
}

The path field always contains the real path after resolving symlinks, while accessPath shows how Syft accessed the file (which may be through a symlink).

The evidence annotation indicates whether this location was used to discover the package (primary) or contains only auxiliary information (supporting).

Descriptor

Syft version and configuration used to generate this SBOM.

{
  "name": "syft",
  "version": "1.0.0",
  "configuration": {} // Syft configuration used
}

The Syft JSON schema is versioned and available in the Syft repository:

JQ Recipes

jq is a command-line tool for querying and manipulating JSON. The following examples demonstrate practical queries for working with Syft JSON output.

Find packages by name pattern

Uses regex pattern matching to find security-critical packages

.artifacts[] |
  select(.name | test("^(openssl|ssl|crypto)")) |  # Regex pattern match on package name
  {
    name,
    version,
    type  # Package type (apk, deb, rpm, etc.)
  }

syft alpine:3.9.2 -o json | \
  jq '.artifacts[] |
  select(.name | test("^(openssl|ssl|crypto)")) |
  {
    name,
    version,
    type
  }'

{
  "name": "ssl_client",
  "version": "1.29.3-r10",
  "type": "apk"
}

Location of all JARs

Shows Java packages with their primary installation paths

.artifacts[] |
  select(.type == "java-archive") |  # Filter for JAR packages
  {
    package: "\(.name)@\(.version)",
    path: (.locations[] | select(.annotations.evidence == "primary") | .path)  # Primary installation path
  }

syft openjdk:11.0.11-jre-slim -o json | \
  jq '.artifacts[] |
  select(.type == "java-archive") |
  {
    package: "\(.name)@\(.version)",
    path: (.locations[] | select(.annotations.evidence == "primary") | .path)
  }'

{
  "package": "jrt-fs@11.0.11",
  "path": "/usr/local/openjdk-11/lib/jrt-fs.jar"
}

All executable files

Lists all binary files with their format and entry point status

.files[] |
  select(.executable != null) |  # Filter for executable files
  {
    path: .location.path,
    format: .executable.format,  # ELF, Mach-O, PE, etc.
    importedLibraries: .executable.importedLibraries  # Shared library dependencies
  }

syft alpine:3.9.2 -o json | \
  jq '.files[] |
  select(.executable != null) |
  {
    path: .location.path,
    format: .executable.format,
    importedLibraries: .executable.importedLibraries
  }'

{
  "path": "/bin/busybox",
  "format": "elf",
  "importedLibraries": [
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/lib/ld-musl-x86_64.so.1",
  "format": "elf",
  "importedLibraries": []
}
{
  "path": "/lib/libcrypto.so.1.1",
  "format": "elf",
  "importedLibraries": [
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/lib/libssl.so.1.1",
  "format": "elf",
  "importedLibraries": [
    "libcrypto.so.1.1",
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/lib/libz.so.1.2.11",
  "format": "elf",
  "importedLibraries": [
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/sbin/apk",
  "format": "elf",
  "importedLibraries": [
    "libssl.so.1.1",
    "libcrypto.so.1.1",
    "libz.so.1",
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/sbin/mkmntdirs",
  "format": "elf",
  "importedLibraries": [
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/usr/bin/getconf",
  "format": "elf",
  "importedLibraries": [
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/usr/bin/getent",
  "format": "elf",
  "importedLibraries": [
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/usr/bin/iconv",
  "format": "elf",
  "importedLibraries": [
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/usr/bin/scanelf",
  "format": "elf",
  "importedLibraries": [
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/usr/bin/ssl_client",
  "format": "elf",
  "importedLibraries": [
    "libtls-standalone.so.1",
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/usr/lib/engines-1.1/afalg.so",
  "format": "elf",
  "importedLibraries": [
    "libcrypto.so.1.1",
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/usr/lib/engines-1.1/capi.so",
  "format": "elf",
  "importedLibraries": [
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/usr/lib/engines-1.1/padlock.so",
  "format": "elf",
  "importedLibraries": [
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/usr/lib/libtls-standalone.so.1.0.0",
  "format": "elf",
  "importedLibraries": [
    "libssl.so.1.1",
    "libcrypto.so.1.1",
    "libc.musl-x86_64.so.1"
  ]
}

Binaries not owned by packages

Uses set operations on relationships to identify untracked binaries that might indicate supply chain issues

. as $root |
  [.files[] | select(.executable != null) | .id] as $binaries |  # All binary IDs
  [.artifactRelationships[] | select(.type == "contains") | .child] as $owned |  # Package-owned files
  ($binaries - $owned) as $unowned |  # Set subtraction to find unowned binaries
  $root.files[] |
  select(.id as $id | $unowned | index($id)) |  # Filter to unowned binaries
  {
    path: .location.path,
    sha256: .digests[] | select(.algorithm == "sha256") | .value  # For integrity verification
  }

syft httpd:2.4.65 -o json | \
  jq '. as $root |
  [.files[] | select(.executable != null) | .id] as $binaries |
  [.artifactRelationships[] | select(.type == "contains") | .child] as $owned |
  ($binaries - $owned) as $unowned |
  $root.files[] |
  select(.id as $id | $unowned | index($id)) |
  {
    path: .location.path,
    sha256: .digests[] | select(.algorithm == "sha256") | .value
  }'

# .syft.yaml
file:
  metadata:
    selection: all

{
  "path": "/usr/local/apache2/bin/ab",
  "sha256": "14e4fd045dfbdfffeeff3e68ec4606bc6cc479a9dd573a577bd82eb18f959fee"
}
{
  "path": "/usr/local/apache2/bin/checkgid",
  "sha256": "4bb1bbf3de789ea44e6aa9b5a7499d965bde217062c7f4de3c5ed99e89f94868"
}
{
  "path": "/usr/local/apache2/bin/fcgistarter",
  "sha256": "723df8ced1e2689697a096c66aeae7c0bf5d1132b589008bbb4f3bb8af10bf21"
}
{
  "path": "/usr/local/apache2/bin/htcacheclean",
  "sha256": "280b7c4bfe6c0ea3798f2bc0f862127a3ba5c1724bf4e3a15edd05e96ff6ecd1"
}
{
  "path": "/usr/local/apache2/bin/htdbm",
  "sha256": "95b2de4ec3b80b5586df9c1f8132925b3c653569f8ac79badf4fd92d49da50d0"
}
{
  "path": "/usr/local/apache2/bin/htdigest",
  "sha256": "504acfd46f933f883689b4b008d56b28daf0017fd11dc61e200df322d6b0c1da"
}
{
  "path": "/usr/local/apache2/bin/htpasswd",
  "sha256": "54799fdd10c82be5a59cd01b286e00ca5fbb2ce4f08ebc54be0ffba56b4ded81"
}
{
  "path": "/usr/local/apache2/bin/httpd",
  "sha256": "b31afe53e62f6de306874534c282a41283dbaff347aab044bf9af951a831a348"
}
{
  "path": "/usr/local/apache2/bin/httxt2dbm",
  "sha256": "28f3d2eafbf1f76f5ac29cb75b3b4e6ed81ca4e0ca681dbb700de6da2da19ae4"
}
{
  "path": "/usr/local/apache2/bin/logresolve",
  "sha256": "e65e425258337b577618c2c48ed29c4e89f9dd44bfcfad2ccaeb564a5c79a9b8"
}
{
  "path": "/usr/local/apache2/bin/rotatelogs",
  "sha256": "579b1a2083d1d5b5271e504ea4ea8de2f90c3702d75a8e78fd81d11ebe39987c"
}
{
  "path": "/usr/local/apache2/bin/suexec",
  "sha256": "9ff3782c4b03c9a51e8db6f7cdbc1c73c091a0bbbd63830ad60ddb4a859dc379"
}
{
  "path": "/usr/local/apache2/modules/mod_access_compat.so",
  "sha256": "2c877b8d43a21a7508355802457cb2a981b2dabe95335a2713986467480ae26c"
}
{
  "path": "/usr/local/apache2/modules/mod_actions.so",
  "sha256": "48b922041084528594513ec24cb7da606d782b288f32f10e7ae791b85b06065a"
}
{
  "path": "/usr/local/apache2/modules/mod_alias.so",
  "sha256": "a457e3544f8ee626d3595f1c5ff417886d50ded7139b4182c74282ccaeca7e92"
}
{
  "path": "/usr/local/apache2/modules/mod_allowmethods.so",
  "sha256": "1cc414caae084c32fa8ed56cbf9b6a0c1d1fbb5679d675542f276b02ac228115"
}
{
  "path": "/usr/local/apache2/modules/mod_asis.so",
  "sha256": "49ce8276c2e978bcf46ba10974a0cd8f2b88b3fcbe13ba47452dceb61a9123a3"
}
{
  "path": "/usr/local/apache2/modules/mod_auth_basic.so",
  "sha256": "74f1a51ab145a9f61e77e836370d7fc651e5d8c720c5024f4f10d9607d5b0830"
}
{
  "path": "/usr/local/apache2/modules/mod_auth_digest.so",
  "sha256": "62e331425820f28812642349ac127578ba7b28e59b8e9b014d3cc6a9d428db50"
}
{
  "path": "/usr/local/apache2/modules/mod_auth_form.so",
  "sha256": "e643554b77b8b6440e8365d036dccaf341f9b470d4a43b06a9e7a9d4cc09572b"
}
{
  "path": "/usr/local/apache2/modules/mod_authn_anon.so",
  "sha256": "62b1c69d6f9bbc30f24d2380057a9e9e7ee86db5625bf42fdb13db8c6fbb36ab"
}
{
  "path": "/usr/local/apache2/modules/mod_authn_core.so",
  "sha256": "a01e1c8bfadef322fded4b4e1eab1a43375db2c18e357d442f886d932173b4bd"
}
{
  "path": "/usr/local/apache2/modules/mod_authn_dbd.so",
  "sha256": "02ec2e747dceeb5ccd2700804f5b1711762132665a9fed939551ed741b45d3df"
}
{
  "path": "/usr/local/apache2/modules/mod_authn_dbm.so",
  "sha256": "320ad3b9a4577314170e67726dc898db064de9d482c5157d1095c4348468c7cf"
}
{
  "path": "/usr/local/apache2/modules/mod_authn_file.so",
  "sha256": "7c03a9d8609c3d48febfb7bca00645e8448d671a31324220fa07f10136b25c3e"
}
{
  "path": "/usr/local/apache2/modules/mod_authn_socache.so",
  "sha256": "cc320ac42a05782fd9a7cee74cb2fa358405d5ecf7c7b007f9b0f215dad98535"
}
{
  "path": "/usr/local/apache2/modules/mod_authnz_fcgi.so",
  "sha256": "3cd59d332bc3492b2e4ddeda47f7e1ea239db72e3b7908a505700e815208dae7"
}
{
  "path": "/usr/local/apache2/modules/mod_authnz_ldap.so",
  "sha256": "7d3fb03c6ad76b1491aab810723f4f0887c90105a102d3ed7bd8c67b48b4e0f4"
}
{
  "path": "/usr/local/apache2/modules/mod_authz_core.so",
  "sha256": "6eefe02f93ff2f0d0e85c4ba63d1205c93493e05b36288d500f25d8b3bf2524b"
}
{
  "path": "/usr/local/apache2/modules/mod_authz_dbd.so",
  "sha256": "6187daebe46e719ca39c1f3c316f7014fa1b50b3678cc3d5f7656dcd426c9c90"
}
{
  "path": "/usr/local/apache2/modules/mod_authz_dbm.so",
  "sha256": "6a4cc707575172407c1f177f7eb36e0b794fb93676e4d2716d015ce5529bc28e"
}
{
  "path": "/usr/local/apache2/modules/mod_authz_groupfile.so",
  "sha256": "9df757775a160967e7c53d7a868ccffe65eb0b916d5de660b7b633d0d5d557ff"
}
{
  "path": "/usr/local/apache2/modules/mod_authz_host.so",
  "sha256": "976c2be87903e51c3bc0bbb3decbeb33b3816caafd6eea41dff8a084c862e8ac"
}
{
  "path": "/usr/local/apache2/modules/mod_authz_owner.so",
  "sha256": "9f678a2249e7de0a813762fff1823a56146d07725d66ed7f2ecfcc9511e2116f"
}
{
  "path": "/usr/local/apache2/modules/mod_authz_user.so",
  "sha256": "83b3a46815d4762f0f0246028bc23229245ec1ccd63a386543918355b445ff65"
}
{
  "path": "/usr/local/apache2/modules/mod_autoindex.so",
  "sha256": "e77c9d15b9f2888e4d09b84f2d111e8177ddec466554e7fb69143bc2ca050303"
}
{
  "path": "/usr/local/apache2/modules/mod_brotli.so",
  "sha256": "c701208729f73e75ba666e0ce7bed110631e69197032e0b5d805ea4200089f4e"
}
{
  "path": "/usr/local/apache2/modules/mod_bucketeer.so",
  "sha256": "6629498f998ed6908ee65256b038d86df5a0a294366c201db43620a5a91a2484"
}
{
  "path": "/usr/local/apache2/modules/mod_buffer.so",
  "sha256": "ba4ff1c20ff28047bff00cec015f64742fd3afd2afc912994927d15cbc6252d4"
}
{
  "path": "/usr/local/apache2/modules/mod_cache.so",
  "sha256": "e2445d2eda9de66c039ad6f79ab413804c5c78952b7945183491fdcd41cee2d9"
}
{
  "path": "/usr/local/apache2/modules/mod_cache_disk.so",
  "sha256": "351c6245fca2da4815e03be544d54db9d1d594ae9b53849a5dece02ec160b38c"
}
{
  "path": "/usr/local/apache2/modules/mod_cache_socache.so",
  "sha256": "9d8a4a9322ea15ad2e1b64e6e461a0da5c61ce31762047e2f0eed62f1ebde430"
}
{
  "path": "/usr/local/apache2/modules/mod_case_filter.so",
  "sha256": "be8ba2b4409d2297b80337dce0d63fe8b145061e7fd68478a8c671645e8ea840"
}
{
  "path": "/usr/local/apache2/modules/mod_case_filter_in.so",
  "sha256": "458d3a19ef79dd9db8df518758c6e4a48b037e0b869eb49556ffd6ab6be277c4"
}
{
  "path": "/usr/local/apache2/modules/mod_cern_meta.so",
  "sha256": "37a88c41ee1cf4449676f167ded1e215c77dce1f5f1832af172cce2e86bb8ce8"
}
{
  "path": "/usr/local/apache2/modules/mod_cgi.so",
  "sha256": "650d9fb76cb9927004a8dbd25ece4793ecfcf7138667b71946082f3d39b46e7b"
}
{
  "path": "/usr/local/apache2/modules/mod_cgid.so",
  "sha256": "24349e3080644bb3eaa3aaed8eb339e526631e791d4536e289fde73e3b61365a"
}
{
  "path": "/usr/local/apache2/modules/mod_charset_lite.so",
  "sha256": "7bcf49fc0d2dfb75ba3ad46a82c12a6e14decacabf6f04339271d9a3ce31126b"
}
{
  "path": "/usr/local/apache2/modules/mod_data.so",
  "sha256": "f6bf8b05dad2f050764154d018057d23246a4c5de74298ce84a42a8f6ffd8a5a"
}
{
  "path": "/usr/local/apache2/modules/mod_dav.so",
  "sha256": "2f2967435998f0a3c18fff50e2e8aa9bbb9063ce6bb9d7d3e35a6b0e9e83556c"
}
...

Binary file digests

Useful for verifying binary integrity and detecting tampering

.files[] |
  select(.executable != null) |  # Filter for executable files
  {
    path: .location.path,
    digests: [.digests[] | {algorithm, value}]  # All available hash algorithms
  }

syft alpine:3.9.2 -o json | \
  jq '.files[] |
  select(.executable != null) |
  {
    path: .location.path,
    digests: [.digests[] | {algorithm, value}]
  }'

{
  "path": "/bin/busybox",
  "digests": [
    {
      "algorithm": "sha1",
      "value": "7448dd02af2b09251816b41e5254afcdd1edcad6"
    },
    {
      "algorithm": "sha256",
      "value": "e16ab33dc871e43b8d1bb5a4b8b1b84963dbeca33cb42a6eb9884d611aa38399"
    }
  ]
}
{
  "path": "/lib/ld-musl-x86_64.so.1",
  "digests": [
    {
      "algorithm": "sha1",
      "value": "0ff8bd56a5be96de41934100f140e81da887afc8"
    },
    {
      "algorithm": "sha256",
      "value": "42a0167325aaa5308e8f56cdfbfe3693fbceb49ab6514e6cd7048b9991353847"
    }
  ]
}
{
  "path": "/lib/libcrypto.so.1.1",
  "digests": [
    {
      "algorithm": "sha1",
      "value": "ed6923d5306cb6665a8c20e0a7e116713d64f55f"
    },
    {
      "algorithm": "sha256",
      "value": "17ef79be58d6a6fac381ecb3da3169b59872f0369d83f2cb556525752f033053"
    }
  ]
}
{
  "path": "/lib/libssl.so.1.1",
  "digests": [
    {
      "algorithm": "sha1",
      "value": "c594750898ea085cb47b31ee896dca3548769b93"
    },
    {
      "algorithm": "sha256",
      "value": "bb74e17676bda5909d41e6277c929827d1a41bd3eeba156355a265a53c3a5231"
    }
  ]
}
{
  "path": "/lib/libz.so.1.2.11",
  "digests": [
    {
      "algorithm": "sha1",
      "value": "2a83d998a8b50c763144e6793a16c297eb05f405"
    },
    {
      "algorithm": "sha256",
      "value": "7c8aad287832213129abdbfdf4d03679d6df88d992ee9236c9db43b6a5c3190d"
    }
  ]
}
{
  "path": "/sbin/apk",
  "digests": [
    {
      "algorithm": "sha1",
      "value": "ada8e5b398684ed7b22bf72b62eb6490877853e9"
    },
    {
      "algorithm": "sha256",
      "value": "75a942c8b866d3cb6cc97b941a271a0ef368f583f575457b864f2d9246d034c7"
    }
  ]
}
{
  "path": "/sbin/mkmntdirs",
  "digests": [
    {
      "algorithm": "sha1",
      "value": "2ad5d792e81a8feaf06a7ddc0dc8118e1e965250"
    },
    {
      "algorithm": "sha256",
      "value": "bc9a2b20273927028177aaf5f2f6896593c161cb58f5055e2fd7138a042c7f30"
    }
  ]
}
{
  "path": "/usr/bin/getconf",
  "digests": [
    {
      "algorithm": "sha1",
      "value": "78393df1b72be819340315bead1226ed81c0206d"
    },
    {
      "algorithm": "sha256",
      "value": "8febf7f34f34223138953e31301b94f687c33421c2943e6e30e088b965859c46"
    }
  ]
}
{
  "path": "/usr/bin/getent",
  "digests": [
    {
      "algorithm": "sha1",
      "value": "339c27944283131c8520d1bf2087e72e3f2864fd"
    },
    {
      "algorithm": "sha256",
      "value": "dbe90a610ab8f3fe41c8f8f15f554fd65ef7fe0d45ea41192ac1dcdcc92ba2dd"
    }
  ]
}
{
  "path": "/usr/bin/iconv",
  "digests": [
    {
      "algorithm": "sha1",
      "value": "0cd93d73528ffbcae4ad9a2aa13632ec88efca7a"
    },
    {
      "algorithm": "sha256",
      "value": "303661a0b60349247ff1e95f35b165c878ae0f5f046f96174e143b4d99777754"
    }
  ]
}
{
  "path": "/usr/bin/scanelf",
  "digests": [
    {
      "algorithm": "sha1",
      "value": "82b0ee78eb356f353324210af484cd71e437f5bf"
    },
    {
      "algorithm": "sha256",
      "value": "1f854b8a9dedf87b1148846400143e22d3b3fe91322d7c0dde7b283e1c5f55e4"
    }
  ]
}
{
  "path": "/usr/bin/ssl_client",
  "digests": [
    {
      "algorithm": "sha1",
      "value": "cf41503fb9b9badf4e31587b411f5d9d5cdeed1c"
    },
    {
      "algorithm": "sha256",
      "value": "fdaf5fe91369e3d83dff8e46d3e2463a9066025593f4e98e47036473c15c1cfd"
    }
  ]
}
{
  "path": "/usr/lib/engines-1.1/afalg.so",
  "digests": [
    {
      "algorithm": "sha1",
      "value": "94f132da9009b81146939081947efa2e5c4f52f8"
    },
    {
      "algorithm": "sha256",
      "value": "28235d3670e8ee47973e23d5ef561b4a1adf35894677bc702309e1e977865dff"
    }
  ]
}
{
  "path": "/usr/lib/engines-1.1/capi.so",
  "digests": [
    {
      "algorithm": "sha1",
      "value": "7bc020762baaed89771f780a4801ddfbe6b3cc3f"
    },
    {
      "algorithm": "sha256",
      "value": "529fa687249d140df0397e1224bb659415d45023e18e4818269397a03d769d69"
    }
  ]
}
{
  "path": "/usr/lib/engines-1.1/padlock.so",
  "digests": [
    {
      "algorithm": "sha1",
      "value": "53a84c21461e0595ab7e0f4c8f9006e677ada13e"
    },
    {
      "algorithm": "sha256",
      "value": "164c1fb578c0bd2605d3c9b5595f8755664c81a7c1963fc49cb16b5cdf560d2c"
    }
  ]
}
{
  "path": "/usr/lib/libtls-standalone.so.1.0.0",
  "digests": [
    {
      "algorithm": "sha1",
...

Binaries with security features

Analyzes ELF security hardening features extracted during SBOM generation

.files[] |
  select(.executable != null and .executable.format == "elf") |  # ELF binaries only
  {
    path: .location.path,
    pie: .executable.elfSecurityFeatures.pie,  # Position Independent Executable
    stackCanary: .executable.elfSecurityFeatures.stackCanary,  # Stack protection
    nx: .executable.elfSecurityFeatures.nx  # No-Execute bit
  }

syft alpine:3.9.2 -o json | \
  jq '.files[] |
  select(.executable != null and .executable.format == "elf") |
  {
    path: .location.path,
    pie: .executable.elfSecurityFeatures.pie,
    stackCanary: .executable.elfSecurityFeatures.stackCanary,
    nx: .executable.elfSecurityFeatures.nx
  }'

{
  "path": "/bin/busybox",
  "pie": true,
  "stackCanary": true,
  "nx": true
}
{
  "path": "/lib/ld-musl-x86_64.so.1",
  "pie": false,
  "stackCanary": true,
  "nx": true
}
{
  "path": "/lib/libcrypto.so.1.1",
  "pie": false,
  "stackCanary": true,
  "nx": true
}
{
  "path": "/lib/libssl.so.1.1",
  "pie": false,
  "stackCanary": true,
  "nx": true
}
{
  "path": "/lib/libz.so.1.2.11",
  "pie": false,
  "stackCanary": true,
  "nx": true
}
{
  "path": "/sbin/apk",
  "pie": true,
  "stackCanary": true,
  "nx": true
}
{
  "path": "/sbin/mkmntdirs",
  "pie": true,
  "stackCanary": false,
  "nx": true
}
{
  "path": "/usr/bin/getconf",
  "pie": true,
  "stackCanary": false,
  "nx": true
}
{
  "path": "/usr/bin/getent",
  "pie": true,
  "stackCanary": true,
  "nx": true
}
{
  "path": "/usr/bin/iconv",
  "pie": true,
  "stackCanary": true,
  "nx": true
}
{
  "path": "/usr/bin/scanelf",
  "pie": true,
  "stackCanary": true,
  "nx": true
}
{
  "path": "/usr/bin/ssl_client",
  "pie": true,
  "stackCanary": true,
  "nx": true
}
{
  "path": "/usr/lib/engines-1.1/afalg.so",
  "pie": false,
  "stackCanary": true,
  "nx": true
}
{
  "path": "/usr/lib/engines-1.1/capi.so",
  "pie": false,
  "stackCanary": false,
  "nx": true
}
{
  "path": "/usr/lib/engines-1.1/padlock.so",
  "pie": false,
  "stackCanary": false,
  "nx": true
}
{
  "path": "/usr/lib/libtls-standalone.so.1.0.0",
  "pie": false,
  "stackCanary": true,
  "nx": true
}

Binaries importing specific libraries

Identifies which binaries depend on specific shared libraries for security audits

.files[] |
  select(.executable != null and .executable.importedLibraries != null) |
  select(.executable.importedLibraries[] | contains("libcrypto")) |  # Find binaries using libcrypto
  {
    path: .location.path,
    imports: .executable.importedLibraries  # Shared library dependencies
  }

syft alpine:3.9.2 -o json | \
  jq '.files[] |
  select(.executable != null and .executable.importedLibraries != null) |
  select(.executable.importedLibraries[] | contains("libcrypto")) |
  {
    path: .location.path,
    imports: .executable.importedLibraries
  }'

{
  "path": "/lib/libssl.so.1.1",
  "imports": [
    "libcrypto.so.1.1",
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/sbin/apk",
  "imports": [
    "libssl.so.1.1",
    "libcrypto.so.1.1",
    "libz.so.1",
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/usr/lib/engines-1.1/afalg.so",
  "imports": [
    "libcrypto.so.1.1",
    "libc.musl-x86_64.so.1"
  ]
}
{
  "path": "/usr/lib/libtls-standalone.so.1.0.0",
  "imports": [
    "libssl.so.1.1",
    "libcrypto.so.1.1",
    "libc.musl-x86_64.so.1"
  ]
}

Extract Package URLs (PURLs)

Extracts Package URLs for cross-tool SBOM correlation and vulnerability matching

.artifacts[] |
  select(.purl != null and .purl != "") |  # Filter packages with PURLs
  {
    name,
    version,
    purl  # Package URL for cross-tool compatibility
  }

syft alpine:3.9.2 -o json | \
  jq '.artifacts[] |
  select(.purl != null and .purl != "") |
  {
    name,
    version,
    purl
  }'

{
  "name": "alpine-baselayout",
  "version": "3.1.0-r3",
  "purl": "pkg:apk/alpine/alpine-baselayout@3.1.0-r3?arch=x86_64&distro=alpine-3.9.2"
}
{
  "name": "alpine-keys",
  "version": "2.1-r1",
  "purl": "pkg:apk/alpine/alpine-keys@2.1-r1?arch=x86_64&distro=alpine-3.9.2"
}
{
  "name": "apk-tools",
  "version": "2.10.3-r1",
  "purl": "pkg:apk/alpine/apk-tools@2.10.3-r1?arch=x86_64&distro=alpine-3.9.2"
}
{
  "name": "busybox",
  "version": "1.29.3-r10",
  "purl": "pkg:apk/alpine/busybox@1.29.3-r10?arch=x86_64&distro=alpine-3.9.2"
}
{
  "name": "ca-certificates-cacert",
  "version": "20190108-r0",
  "purl": "pkg:apk/alpine/ca-certificates-cacert@20190108-r0?arch=x86_64&distro=alpine-3.9.2&upstream=ca-certificates"
}
{
  "name": "libc-utils",
  "version": "0.7.1-r0",
  "purl": "pkg:apk/alpine/libc-utils@0.7.1-r0?arch=x86_64&distro=alpine-3.9.2&upstream=libc-dev"
}
{
  "name": "libcrypto1.1",
  "version": "1.1.1a-r1",
  "purl": "pkg:apk/alpine/libcrypto1.1@1.1.1a-r1?arch=x86_64&distro=alpine-3.9.2&upstream=openssl"
}
{
  "name": "libssl1.1",
  "version": "1.1.1a-r1",
  "purl": "pkg:apk/alpine/libssl1.1@1.1.1a-r1?arch=x86_64&distro=alpine-3.9.2&upstream=openssl"
}
{
  "name": "libtls-standalone",
  "version": "2.7.4-r6",
  "purl": "pkg:apk/alpine/libtls-standalone@2.7.4-r6?arch=x86_64&distro=alpine-3.9.2"
}
{
  "name": "musl",
  "version": "1.1.20-r3",
  "purl": "pkg:apk/alpine/musl@1.1.20-r3?arch=x86_64&distro=alpine-3.9.2"
}
{
  "name": "musl-utils",
  "version": "1.1.20-r3",
  "purl": "pkg:apk/alpine/musl-utils@1.1.20-r3?arch=x86_64&distro=alpine-3.9.2&upstream=musl"
}
{
  "name": "scanelf",
  "version": "1.2.3-r0",
  "purl": "pkg:apk/alpine/scanelf@1.2.3-r0?arch=x86_64&distro=alpine-3.9.2&upstream=pax-utils"
}
{
  "name": "ssl_client",
  "version": "1.29.3-r10",
  "purl": "pkg:apk/alpine/ssl_client@1.29.3-r10?arch=x86_64&distro=alpine-3.9.2&upstream=busybox"
}
{
  "name": "zlib",
  "version": "1.2.11-r1",
  "purl": "pkg:apk/alpine/zlib@1.2.11-r1?arch=x86_64&distro=alpine-3.9.2"
}

Group packages by language

Groups and counts packages by programming language

[.artifacts[] | select(.language != null and .language != "")] |
  group_by(.language) |  # Group by programming language
  map({
    language: .[0].language,
    count: length  # Count packages per language
  }) |
  sort_by(.count) |
  reverse  # Highest count first

syft node:18-alpine -o json | \
  jq '[.artifacts[] | select(.language != null and .language != "")] |
  group_by(.language) |
  map({
    language: .[0].language,
    count: length
  }) |
  sort_by(.count) |
  reverse'

[
  {
    "language": "javascript",
    "count": 204
  }
]

Count packages by type

Provides a summary count of packages per ecosystem

[.artifacts[]] |
  group_by(.type) |  # Group packages by ecosystem type
  map({
    type: .[0].type,
    count: length  # Count packages in each group
  }) |
  sort_by(.count) |
  reverse  # Highest count first

syft node:18-alpine -o json | \
  jq '[.artifacts[]] |
  group_by(.type) |
  map({
    type: .[0].type,
    count: length
  }) |
  sort_by(.count) |
  reverse'

[
  {
    "type": "npm",
    "count": 204
  },
  {
    "type": "apk",
    "count": 17
  },
  {
    "type": "binary",
    "count": 1
  }
]

Package locations

Maps packages to their filesystem locations

.artifacts[] |
  {
    name,
    version,
    type,
    locations: [.locations[] | .path]  # All filesystem locations
  }

syft alpine:3.9.2 -o json | \
  jq '.artifacts[] |
  {
    name,
    version,
    type,
    locations: [.locations[] | .path]
  }'

{
  "name": "alpine-baselayout",
  "version": "3.1.0-r3",
  "type": "apk",
  "locations": [
    "/lib/apk/db/installed"
  ]
}
{
  "name": "alpine-keys",
  "version": "2.1-r1",
  "type": "apk",
  "locations": [
    "/lib/apk/db/installed"
  ]
}
{
  "name": "apk-tools",
  "version": "2.10.3-r1",
  "type": "apk",
  "locations": [
    "/lib/apk/db/installed"
  ]
}
{
  "name": "busybox",
  "version": "1.29.3-r10",
  "type": "apk",
  "locations": [
    "/lib/apk/db/installed"
  ]
}
{
  "name": "ca-certificates-cacert",
  "version": "20190108-r0",
  "type": "apk",
  "locations": [
    "/lib/apk/db/installed"
  ]
}
{
  "name": "libc-utils",
  "version": "0.7.1-r0",
  "type": "apk",
  "locations": [
    "/lib/apk/db/installed"
  ]
}
{
  "name": "libcrypto1.1",
  "version": "1.1.1a-r1",
  "type": "apk",
  "locations": [
    "/lib/apk/db/installed"
  ]
}
{
  "name": "libssl1.1",
  "version": "1.1.1a-r1",
  "type": "apk",
  "locations": [
    "/lib/apk/db/installed"
  ]
}
{
  "name": "libtls-standalone",
  "version": "2.7.4-r6",
  "type": "apk",
  "locations": [
    "/lib/apk/db/installed"
  ]
}
{
  "name": "musl",
  "version": "1.1.20-r3",
  "type": "apk",
  "locations": [
    "/lib/apk/db/installed"
  ]
}
{
  "name": "musl-utils",
  "version": "1.1.20-r3",
  "type": "apk",
  "locations": [
    "/lib/apk/db/installed"
  ]
}
{
  "name": "scanelf",
  "version": "1.2.3-r0",
  "type": "apk",
  "locations": [
    "/lib/apk/db/installed"
  ]
}
{
  "name": "ssl_client",
  "version": "1.29.3-r10",
  "type": "apk",
  "locations": [
    "/lib/apk/db/installed"
  ]
}
{
  "name": "zlib",
  "version": "1.2.11-r1",
  "type": "apk",
  "locations": [
    "/lib/apk/db/installed"
  ]
}

Files by MIME type

Filters files by MIME type, useful for finding specific file types

.files[] |
  select(.metadata.mimeType == "application/x-sharedlib") |  # Filter by MIME type
  {
    path: .location.path,
    mimeType: .metadata.mimeType,
    size: .metadata.size  # File size in bytes
  }

syft alpine:3.9.2 -o json | \
  jq '.files[] |
  select(.metadata.mimeType == "application/x-sharedlib") |
  {
    path: .location.path,
    mimeType: .metadata.mimeType,
    size: .metadata.size
  }'

{
  "path": "/bin/busybox",
  "mimeType": "application/x-sharedlib",
  "size": 796240
}
{
  "path": "/lib/ld-musl-x86_64.so.1",
  "mimeType": "application/x-sharedlib",
  "size": 584304
}
{
  "path": "/lib/libcrypto.so.1.1",
  "mimeType": "application/x-sharedlib",
  "size": 2593440
}
{
  "path": "/lib/libssl.so.1.1",
  "mimeType": "application/x-sharedlib",
  "size": 519632
}
{
  "path": "/lib/libz.so.1.2.11",
  "mimeType": "application/x-sharedlib",
  "size": 100144
}
{
  "path": "/sbin/apk",
  "mimeType": "application/x-sharedlib",
  "size": 211304
}
{
  "path": "/sbin/mkmntdirs",
  "mimeType": "application/x-sharedlib",
  "size": 13968
}
{
  "path": "/usr/bin/getconf",
  "mimeType": "application/x-sharedlib",
  "size": 36728
}
{
  "path": "/usr/bin/getent",
  "mimeType": "application/x-sharedlib",
  "size": 51912
}
{
  "path": "/usr/bin/iconv",
  "mimeType": "application/x-sharedlib",
  "size": 25216
}
{
  "path": "/usr/bin/scanelf",
  "mimeType": "application/x-sharedlib",
  "size": 83744
}
{
  "path": "/usr/bin/ssl_client",
  "mimeType": "application/x-sharedlib",
  "size": 13968
}
{
  "path": "/usr/lib/engines-1.1/afalg.so",
  "mimeType": "application/x-sharedlib",
  "size": 22768
}
{
  "path": "/usr/lib/engines-1.1/capi.so",
  "mimeType": "application/x-sharedlib",
  "size": 13856
}
{
  "path": "/usr/lib/engines-1.1/padlock.so",
  "mimeType": "application/x-sharedlib",
  "size": 13864
}
{
  "path": "/usr/lib/libtls-standalone.so.1.0.0",
  "mimeType": "application/x-sharedlib",
  "size": 96096
}

Dependency relationships

Traverses package dependency graph using relationships

. as $root |
  .artifactRelationships[] |
  select(.type == "dependency-of") |  # Filter for dependency relationships
  .parent as $parent |
  .child as $child |
  {
    parent: ($root.artifacts[] | select(.id == $parent).name),  # Parent package name
    child: ($root.artifacts[] | select(.id == $child).name)  # Dependency name
  }

syft node:18-alpine -o json | \
  jq '. as $root |
  .artifactRelationships[] |
  select(.type == "dependency-of") |
  .parent as $parent |
  .child as $child |
  {
    parent: ($root.artifacts[] | select(.id == $parent).name),
    child: ($root.artifacts[] | select(.id == $child).name)
  }'

{
  "parent": "libcrypto3",
  "child": "ssl_client"
}
{
  "parent": "libcrypto3",
  "child": "apk-tools"
}
{
  "parent": "libcrypto3",
  "child": "libssl3"
}
{
  "parent": "alpine-baselayout-data",
  "child": "alpine-baselayout"
}
{
  "parent": "ca-certificates-bundle",
  "child": "apk-tools"
}
{
  "parent": "libgcc",
  "child": "libstdc++"
}
{
  "parent": "busybox",
  "child": "busybox-binsh"
}
{
  "parent": "busybox-binsh",
  "child": "alpine-baselayout"
}
{
  "parent": "zlib",
  "child": "apk-tools"
}
{
  "parent": "libssl3",
  "child": "ssl_client"
}
{
  "parent": "libssl3",
  "child": "apk-tools"
}
{
  "parent": "musl",
  "child": "libcrypto3"
}
{
  "parent": "musl",
  "child": "ssl_client"
}
{
  "parent": "musl",
  "child": "libgcc"
}
{
  "parent": "musl",
  "child": "busybox"
}
{
  "parent": "musl",
  "child": "musl-utils"
}
{
  "parent": "musl",
  "child": "apk-tools"
}
{
  "parent": "musl",
  "child": "zlib"
}
{
  "parent": "musl",
  "child": "libssl3"
}
{
  "parent": "musl",
  "child": "scanelf"
}
{
  "parent": "musl",
  "child": "libstdc++"
}
{
  "parent": "scanelf",
  "child": "musl-utils"
}
{
  "parent": "alpine-keys",
  "child": "alpine-release"
}

Files without packages

Finds orphaned files not associated with any package

. as $root |
  [.files[].id] as $allFiles |  # All file IDs
  [.artifactRelationships[] | select(.type == "contains") | .child] as $ownedFiles |  # Package-owned files
  ($allFiles - $ownedFiles) as $orphans |  # Set subtraction for unowned files
  $root.files[] |
  select(.id as $id | $orphans | index($id)) |  # Filter to orphaned files
  .location.path

syft alpine:3.9.2 -o json | \
  jq '. as $root |
  [.files[].id] as $allFiles |
  [.artifactRelationships[] | select(.type == "contains") | .child] as $ownedFiles |
  ($allFiles - $ownedFiles) as $orphans |
  $root.files[] |
  select(.id as $id | $orphans | index($id)) |
  .location.path'

"/lib/apk/db/installed"

Largest files

Identifies the top 10 largest files by size

[.files[] |
  {
    path: .location.path,
    size: .metadata.size,
    mimeType: .metadata.mimeType
  }] |
  sort_by(.size) |
  reverse |  # Largest first
  .[0:10]  # Top 10 files

syft alpine:3.9.2 -o json | \
  jq '[.files[] |
  {
    path: .location.path,
    size: .metadata.size,
    mimeType: .metadata.mimeType
  }] |
  sort_by(.size) |
  reverse |
  .[0:10]'

[
  {
    "path": "/lib/libcrypto.so.1.1",
    "size": 2593440,
    "mimeType": "application/x-sharedlib"
  },
  {
    "path": "/bin/busybox",
    "size": 796240,
    "mimeType": "application/x-sharedlib"
  },
  {
    "path": "/lib/ld-musl-x86_64.so.1",
    "size": 584304,
    "mimeType": "application/x-sharedlib"
  },
  {
    "path": "/lib/libssl.so.1.1",
    "size": 519632,
    "mimeType": "application/x-sharedlib"
  },
  {
    "path": "/etc/ssl/cert.pem",
    "size": 232598,
    "mimeType": "text/plain"
  },
  {
    "path": "/sbin/apk",
    "size": 211304,
    "mimeType": "application/x-sharedlib"
  },
  {
    "path": "/lib/libz.so.1.2.11",
    "size": 100144,
    "mimeType": "application/x-sharedlib"
  },
  {
    "path": "/usr/lib/libtls-standalone.so.1.0.0",
    "size": 96096,
    "mimeType": "application/x-sharedlib"
  },
  {
    "path": "/usr/bin/scanelf",
    "size": 83744,
    "mimeType": "application/x-sharedlib"
  },
  {
    "path": "/usr/bin/getent",
    "size": 51912,
    "mimeType": "application/x-sharedlib"
  }
]

Extract CPEs

Lists Common Platform Enumeration identifiers for vulnerability scanning

.artifacts[] |
  select(.cpes != null and (.cpes | length) > 0) |  # Filter packages with CPEs
  {
    name,
    version,
    cpes: [.cpes[].cpe]  # Extract CPE strings
  }

syft alpine:3.9.2 -o json | \
  jq '.artifacts[] |
  select(.cpes != null and (.cpes | length) > 0) |
  {
    name,
    version,
    cpes: [.cpes[].cpe]
  }'

{
  "name": "alpine-baselayout",
  "version": "3.1.0-r3",
  "cpes": [
    "cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.1.0-r3:*:*:*:*:*:*:*",
    "cpe:2.3:a:alpine-baselayout:alpine_baselayout:3.1.0-r3:*:*:*:*:*:*:*",
    "cpe:2.3:a:alpine_baselayout:alpine-baselayout:3.1.0-r3:*:*:*:*:*:*:*",
    "cpe:2.3:a:alpine_baselayout:alpine_baselayout:3.1.0-r3:*:*:*:*:*:*:*",
    "cpe:2.3:a:alpine:alpine-baselayout:3.1.0-r3:*:*:*:*:*:*:*",
    "cpe:2.3:a:alpine:alpine_baselayout:3.1.0-r3:*:*:*:*:*:*:*"
  ]
}
{
  "name": "alpine-keys",
  "version": "2.1-r1",
  "cpes": [
    "cpe:2.3:a:alpine-keys:alpine-keys:2.1-r1:*:*:*:*:*:*:*",
    "cpe:2.3:a:alpine-keys:alpine_keys:2.1-r1:*:*:*:*:*:*:*",
    "cpe:2.3:a:alpine_keys:alpine-keys:2.1-r1:*:*:*:*:*:*:*",
    "cpe:2.3:a:alpine_keys:alpine_keys:2.1-r1:*:*:*:*:*:*:*",
    "cpe:2.3:a:alpine:alpine-keys:2.1-r1:*:*:*:*:*:*:*",
    "cpe:2.3:a:alpine:alpine_keys:2.1-r1:*:*:*:*:*:*:*"
  ]
}
{
  "name": "apk-tools",
  "version": "2.10.3-r1",
  "cpes": [
    "cpe:2.3:a:apk-tools:apk-tools:2.10.3-r1:*:*:*:*:*:*:*",
    "cpe:2.3:a:apk-tools:apk_tools:2.10.3-r1:*:*:*:*:*:*:*",
    "cpe:2.3:a:apk_tools:apk-tools:2.10.3-r1:*:*:*:*:*:*:*",
    "cpe:2.3:a:apk_tools:apk_tools:2.10.3-r1:*:*:*:*:*:*:*",
    "cpe:2.3:a:apk:apk-tools:2.10.3-r1:*:*:*:*:*:*:*",
    "cpe:2.3:a:apk:apk_tools:2.10.3-r1:*:*:*:*:*:*:*"
  ]
}
{
  "name": "busybox",
  "version": "1.29.3-r10",
  "cpes": [
    "cpe:2.3:a:busybox:busybox:1.29.3-r10:*:*:*:*:*:*:*"
  ]
}
{
  "name": "ca-certificates-cacert",
  "version": "20190108-r0",
  "cpes": [
    "cpe:2.3:a:ca-certificates-cacert:ca-certificates-cacert:20190108-r0:*:*:*:*:*:*:*",
    "cpe:2.3:a:ca-certificates-cacert:ca_certificates_cacert:20190108-r0:*:*:*:*:*:*:*",
    "cpe:2.3:a:ca_certificates_cacert:ca-certificates-cacert:20190108-r0:*:*:*:*:*:*:*",
    "cpe:2.3:a:ca_certificates_cacert:ca_certificates_cacert:20190108-r0:*:*:*:*:*:*:*",
    "cpe:2.3:a:ca-certificates:ca-certificates-cacert:20190108-r0:*:*:*:*:*:*:*",
    "cpe:2.3:a:ca-certificates:ca_certificates_cacert:20190108-r0:*:*:*:*:*:*:*",
    "cpe:2.3:a:ca_certificates:ca-certificates-cacert:20190108-r0:*:*:*:*:*:*:*",
    "cpe:2.3:a:ca_certificates:ca_certificates_cacert:20190108-r0:*:*:*:*:*:*:*",
    "cpe:2.3:a:mozilla:ca-certificates-cacert:20190108-r0:*:*:*:*:*:*:*",
    "cpe:2.3:a:mozilla:ca_certificates_cacert:20190108-r0:*:*:*:*:*:*:*",
    "cpe:2.3:a:ca:ca-certificates-cacert:20190108-r0:*:*:*:*:*:*:*",
    "cpe:2.3:a:ca:ca_certificates_cacert:20190108-r0:*:*:*:*:*:*:*"
  ]
}
{
  "name": "libc-utils",
  "version": "0.7.1-r0",
  "cpes": [
    "cpe:2.3:a:libc-utils:libc-utils:0.7.1-r0:*:*:*:*:*:*:*",
    "cpe:2.3:a:libc-utils:libc_utils:0.7.1-r0:*:*:*:*:*:*:*",
    "cpe:2.3:a:libc_utils:libc-utils:0.7.1-r0:*:*:*:*:*:*:*",
    "cpe:2.3:a:libc_utils:libc_utils:0.7.1-r0:*:*:*:*:*:*:*",
    "cpe:2.3:a:libc:libc-utils:0.7.1-r0:*:*:*:*:*:*:*",
    "cpe:2.3:a:libc:libc_utils:0.7.1-r0:*:*:*:*:*:*:*"
  ]
}
{
  "name": "libcrypto1.1",
  "version": "1.1.1a-r1",
  "cpes": [
    "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1a-r1:*:*:*:*:*:*:*",
    "cpe:2.3:a:libcrypto1.1:libcrypto:1.1.1a-r1:*:*:*:*:*:*:*",
    "cpe:2.3:a:libcrypto:libcrypto1.1:1.1.1a-r1:*:*:*:*:*:*:*",
    "cpe:2.3:a:libcrypto:libcrypto:1.1.1a-r1:*:*:*:*:*:*:*"
  ]
}
{
  "name": "libssl1.1",
  "version": "1.1.1a-r1",
  "cpes": [
    "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1a-r1:*:*:*:*:*:*:*",
    "cpe:2.3:a:libssl1.1:libssl:1.1.1a-r1:*:*:*:*:*:*:*",
    "cpe:2.3:a:libssl:libssl1.1:1.1.1a-r1:*:*:*:*:*:*:*",
    "cpe:2.3:a:libssl:libssl:1.1.1a-r1:*:*:*:*:*:*:*"
  ]
}
{
  "name": "libtls-standalone",
  "version": "2.7.4-r6",
  "cpes": [
    "cpe:2.3:a:libtls-standalone:libtls-standalone:2.7.4-r6:*:*:*:*:*:*:*",
    "cpe:2.3:a:libtls-standalone:libtls_standalone:2.7.4-r6:*:*:*:*:*:*:*",
    "cpe:2.3:a:libtls_standalone:libtls-standalone:2.7.4-r6:*:*:*:*:*:*:*",
    "cpe:2.3:a:libtls_standalone:libtls_standalone:2.7.4-r6:*:*:*:*:*:*:*",
    "cpe:2.3:a:libtls:libtls-standalone:2.7.4-r6:*:*:*:*:*:*:*",
    "cpe:2.3:a:libtls:libtls_standalone:2.7.4-r6:*:*:*:*:*:*:*"
  ]
}
{
  "name": "musl",
  "version": "1.1.20-r3",
  "cpes": [
    "cpe:2.3:a:musl-libc:musl:1.1.20-r3:*:*:*:*:*:*:*",
    "cpe:2.3:a:musl_libc:musl:1.1.20-r3:*:*:*:*:*:*:*",
    "cpe:2.3:a:musl:musl:1.1.20-r3:*:*:*:*:*:*:*"
  ]
}
{
  "name": "musl-utils",
  "version": "1.1.20-r3",
  "cpes": [
    "cpe:2.3:a:musl-utils:musl-utils:1.1.20-r3:*:*:*:*:*:*:*",
    "cpe:2.3:a:musl-utils:musl_utils:1.1.20-r3:*:*:*:*:*:*:*",
    "cpe:2.3:a:musl_utils:musl-utils:1.1.20-r3:*:*:*:*:*:*:*",
    "cpe:2.3:a:musl_utils:musl_utils:1.1.20-r3:*:*:*:*:*:*:*",
    "cpe:2.3:a:musl:musl-utils:1.1.20-r3:*:*:*:*:*:*:*",
    "cpe:2.3:a:musl:musl_utils:1.1.20-r3:*:*:*:*:*:*:*"
  ]
}
{
  "name": "scanelf",
  "version": "1.2.3-r0",
  "cpes": [
    "cpe:2.3:a:scanelf:scanelf:1.2.3-r0:*:*:*:*:*:*:*"
  ]
}
{
  "name": "ssl_client",
  "version": "1.29.3-r10",
  "cpes": [
    "cpe:2.3:a:ssl-client:ssl-client:1.29.3-r10:*:*:*:*:*:*:*",
    "cpe:2.3:a:ssl-client:ssl_client:1.29.3-r10:*:*:*:*:*:*:*",
    "cpe:2.3:a:ssl_client:ssl-client:1.29.3-r10:*:*:*:*:*:*:*",
    "cpe:2.3:a:ssl_client:ssl_client:1.29.3-r10:*:*:*:*:*:*:*",
    "cpe:2.3:a:ssl:ssl-client:1.29.3-r10:*:*:*:*:*:*:*",
    "cpe:2.3:a:ssl:ssl_client:1.29.3-r10:*:*:*:*:*:*:*"
  ]
}
{
  "name": "zlib",
  "version": "1.2.11-r1",
  "cpes": [
    "cpe:2.3:a:zlib:zlib:1.2.11-r1:*:*:*:*:*:*:*"
  ]
}

Packages without licenses

Identifies packages missing license information for compliance audits

.artifacts[] |
  select(.licenses == null or (.licenses | length) == 0) |  # Packages without license info
  {
    name,
    version,
    type,
    locations: [.locations[].path]  # Where package is installed
  }

syft httpd:2.4.65 -o json | \
  jq '.artifacts[] |
  select(.licenses == null or (.licenses | length) == 0) |
  {
    name,
    version,
    type,
    locations: [.locations[].path]
  }'

{
  "name": "httpd",
  "version": "2.4.65",
  "type": "binary",
  "locations": ["/usr/local/apache2/bin/httpd"]
}

Packages with CPE identifiers

Lists packages with CPE identifiers indicating potential CVE matches

.artifacts[] |
  select(.cpes != null and (.cpes | length) > 0) |  # Packages with CPE identifiers
  {
    name,
    version,
    type,
    cpeCount: (.cpes | length)  # Number of CPE matches
  }

syft alpine:3.9.2 -o json | \
  jq '.artifacts[] |
  select(.cpes != null and (.cpes | length) > 0) |
  {
    name,
    version,
    type,
    cpeCount: (.cpes | length)
  }'

{
  "name": "alpine-baselayout",
  "version": "3.1.0-r3",
  "type": "apk",
  "cpeCount": 6
}
{
  "name": "alpine-keys",
  "version": "2.1-r1",
  "type": "apk",
  "cpeCount": 6
}
{
  "name": "apk-tools",
  "version": "2.10.3-r1",
  "type": "apk",
  "cpeCount": 6
}
{
  "name": "busybox",
  "version": "1.29.3-r10",
  "type": "apk",
  "cpeCount": 1
}
{
  "name": "ca-certificates-cacert",
  "version": "20190108-r0",
  "type": "apk",
  "cpeCount": 12
}
{
  "name": "libc-utils",
  "version": "0.7.1-r0",
  "type": "apk",
  "cpeCount": 6
}
{
  "name": "libcrypto1.1",
  "version": "1.1.1a-r1",
  "type": "apk",
  "cpeCount": 4
}
{
  "name": "libssl1.1",
  "version": "1.1.1a-r1",
  "type": "apk",
  "cpeCount": 4
}
{
  "name": "libtls-standalone",
  "version": "2.7.4-r6",
  "type": "apk",
  "cpeCount": 6
}
{
  "name": "musl",
  "version": "1.1.20-r3",
  "type": "apk",
  "cpeCount": 3
}
{
  "name": "musl-utils",
  "version": "1.1.20-r3",
  "type": "apk",
  "cpeCount": 6
}
{
  "name": "scanelf",
  "version": "1.2.3-r0",
  "type": "apk",
  "cpeCount": 1
}
{
  "name": "ssl_client",
  "version": "1.29.3-r10",
  "type": "apk",
  "cpeCount": 6
}
{
  "name": "zlib",
  "version": "1.2.11-r1",
  "type": "apk",
  "cpeCount": 1
}

Troubleshooting

jq command not found

Install jq to query JSON output:

macOS: brew install jq
Ubuntu/Debian: apt-get install jq
Fedora/RHEL: dnf install jq
Windows: Download from jqlang.org

Empty or unexpected query results

Common jq query issues:

Wrong field path: Use jq 'keys' to list available top-level keys, then explore nested structures
Missing select filter: Remember to use select() when filtering (e.g., .artifacts[] | select(.type=="apk"))
String vs array: Some fields like licenses are arrays; use .[0] or iterate with .[]

Query works in terminal but not in scripts

When using jq in shell scripts:

Quote properly: Single quotes prevent shell variable expansion (e.g., jq '.artifacts' not jq ".artifacts")
Escape for heredocs: Use different quotes or escape when embedding jq in heredocs
Pipe errors: Add set -o pipefail to catch jq errors in pipelines

Performance issues with large SBOMs

For very large JSON files:

Stream processing: Use jq’s --stream flag for memory-efficient processing
Filter early: Apply filters as early as possible in the pipeline to reduce data volume
Use specific queries: Avoid .[] on large arrays; be specific about what you need

Next steps

Continue the guide

Next: Dive into Package Catalogers to understand how Syft discovers different types of software packages.

Additional resources:

Other formats: Explore output formats to see all available SBOM formats
Convert formats: Learn about format conversion to generate multiple formats efficiently
Custom output: Use templates to create custom output formats
Syft JSON Schema: Review the Syft JSON Schema Reference for detailed field definitions

3.1.5 - Package Catalogers

Configure which package catalogers Syft uses to discover software components including language-specific and file-based catalogers.

TL;DR

Syft automatically picks the right catalogers for you (recommended for most users)
Scanning a container image? Finds installed packages (like Python packages in site-packages)
Scanning a directory? Finds both installed packages and declared dependencies (like requirements.txt)
Want to customize? Use --select-catalogers to filter, add, or remove catalogers
Need complete control? Use --override-default-catalogers to replace all defaults

Catalogers are Syft’s detection modules that identify software packages in your projects. Each cataloger specializes in finding specific types of packages—for example, python-package-cataloger finds Python dependencies declared in requirements.txt, while python-installed-package-cataloger finds Python packages that have already been installed.

Syft includes dozens of catalogers covering languages like Python, Java, Go, JavaScript, Ruby, Rust, and more, as well as OS packages (APK, RPM, DEB) and binary formats.

Default Behavior

Syft uses different cataloger sets depending on what you’re scanning:

Scan Type	Default Catalogers	What They Find	Example
Container Image	Image-specific catalogers	Installed packages only	Python packages in `site-packages`
Directory	Directory-specific catalogers	Installed packages + declared dependencies	Python packages in `site-packages` AND `requirements.txt`

This behavior ensures accurate results across different contexts. When you scan an image, Syft assumes installation steps have completed –this way you are getting results for software that is positively present. When you scan a directory (like a source code repository), Syft looks for both what’s installed and what’s declared as a dependency –this way you are getting results for not only what’s installed but also what you intend to install.

Why use different catalogers for different sources?

Most of the time, files that hint at the intent to install software do not have enough information in them to determine the exact version of the package that would be installed. For example, a requirements.txt file might specify a package without a version, or with a version range. By looking at installed packages in an image, after any build tooling has been invoked, Syft can provide more accurate version information.

Example: Python Package Detection

Scanning an image:

syft <container-image> --select-catalogers python
# Uses: python-installed-package-cataloger
# Finds: Packages in site-packages directories

Scanning a directory:

syft <source-directory> --select-catalogers python
# Uses: python-installed-package-cataloger, python-package-cataloger
# Finds: Packages in site-packages + requirements.txt, setup.py, Pipfile, etc.

Viewing Active Catalogers

The most reliable way to see which catalogers Syft used is to check the SBOM itself. Every SBOM captures both the catalogers that were requested and those that actually ran:

syft busybox:latest -o json | jq '.descriptor.configuration.catalogers'

Output:

{
  "requested": {
    "default": [
      "image",
      "file"
    ]
  },
  "used": [
    "alpm-db-cataloger",
    "apk-db-cataloger",
    "binary-classifier-cataloger",
    "bitnami-cataloger",
    "cargo-auditable-binary-cataloger",
    "conan-info-cataloger",
    "dotnet-deps-binary-cataloger",
    "dotnet-packages-lock-cataloger",
    "dpkg-db-cataloger",
    "elf-binary-package-cataloger",
    ...
  ]
}

This shows what catalogers were attempted, not just what found packages. The requested field shows your cataloger selection strategy, while used lists every cataloger that ran.

You can also see cataloger activity in real-time using verbose logging, though this is less comprehensive and not as direct.

Exploring Available Catalogers

Use the syft cataloger list command to see all available catalogers, their tags, and test selection expressions.

List all catalogers

syft cataloger list

Output shows file and package catalogers with their tags:

┌───────────────────────────┬───────────────────────┐
│ FILE CATALOGER            │ TAGS                  │
├───────────────────────────┼───────────────────────┤
│ file-content-cataloger    │ content, file         │
│ file-digest-cataloger     │ digest, file          │
│ file-executable-cataloger │ binary-metadata, file │
│ file-metadata-cataloger   │ file, file-metadata   │
└───────────────────────────┴───────────────────────┘
┌────────────────────────────────────┬────────────────────────────────────────────────────────┐
│ PACKAGE CATALOGER                  │ TAGS                                                   │
├────────────────────────────────────┼────────────────────────────────────────────────────────┤
│ python-installed-package-cataloger │ directory, image, installed, language, package, python │
│ python-package-cataloger           │ declared, directory, language, package, python         │
│ java-archive-cataloger             │ directory, image, installed, java, language, maven     │
│ go-module-binary-cataloger         │ binary, directory, go, golang, image, installed        │
│ ...                                │                                                        │
└────────────────────────────────────┴────────────────────────────────────────────────────────┘

Test cataloger selection

Preview which catalogers a selection expression would use:

syft cataloger list --select-catalogers python
Default selections: 1
  • 'all'
Selection expressions: 1
  • 'python' (intersect)

┌────────────────────────────────────┬────────────────────────────────────────────────────────┐
│ PACKAGE CATALOGER                  │ TAGS                                                   │
├────────────────────────────────────┼────────────────────────────────────────────────────────┤
│ python-installed-package-cataloger │ directory, image, installed, language, package, python │
│ python-package-cataloger           │ declared, directory, language, package, python         │
└────────────────────────────────────┴────────────────────────────────────────────────────────┘

This shows exactly which catalogers your selection expression will use, helping you verify your configuration before running a scan.

Output formats

Get cataloger information in different formats:

# Table format (default)
syft cataloger list

# JSON format (useful for automation)
syft cataloger list -o json

Cataloger References

You can refer to catalogers in two ways:

By name: The exact cataloger identifier (e.g., java-pom-cataloger, go-module-binary-cataloger)
By tag: A group label for related catalogers (e.g., java, python, image, directory)

Common tags include:

Language tags: python, java, go, javascript, ruby, rust, etc.
Scan type tags: image, directory
Installation state tags: installed, declared
Ecosystem tags: maven, npm, cargo, composer, etc.

Customizing Cataloger Selection

Syft provides two flags for controlling catalogers:

`--select-catalogers`: Modify Defaults

Use this flag to adjust the default cataloger set. This is the recommended approach for most use cases.

Syntax:

Operation	Syntax	Example	Description
Filter	`<tag>`	`--select-catalogers java`	Use only Java catalogers from the defaults
Add	`+<name>`	`--select-catalogers +sbom-cataloger`	Add a specific cataloger to defaults
Remove	`-<name-or-tag>`	`--select-catalogers -rpm`	Remove catalogers by name or tag
Combine	`<tag>,+<name>,-<tag>`	`--select-catalogers java,+sbom-cataloger,-maven`	Multiple operations together

Selection Logic:

Start with default catalogers (image or directory based)
If tags provided (without + or -), filter to only those tagged catalogers
Remove any catalogers matching -<name-or-tag>
Add any catalogers specified with +<name>

Note

Added catalogers (prefixed with +) are always included, regardless of other filters or removals.

`--override-default-catalogers`: Replace Defaults

Use this flag to completely replace Syft’s default cataloger selection. This bypasses the automatic image vs. directory behavior.

Syntax:

--override-default-catalogers <comma-separated-names-or-tags>

When to use:

You need catalogers from both image and directory sets
You want to use catalogers that aren’t in the default set
You need precise control regardless of scan type

Warning

Overriding defaults can lead to incomplete or inaccurate results if you don’t include all necessary catalogers. Use --select-catalogers for most cases.

Examples by Use Case

Filtering to Specific Languages

Scan for only Python packages using defaults for your scan type:

syft <target> --select-catalogers python

Scan for only Java and Go packages:

syft <target> --select-catalogers java,go

Adding Catalogers

Use defaults and also include the SBOM cataloger (which finds embedded SBOMs):

syft <target> --select-catalogers +sbom-cataloger

Scan with defaults plus both SBOM and binary catalogers:

syft <target> --select-catalogers +sbom-cataloger,+binary-classifier-cataloger

Removing Catalogers

Use defaults but exclude all RPM-related catalogers:

syft <target> --select-catalogers -rpm

Scan with defaults but remove Java JAR cataloger specifically:

syft <target> --select-catalogers -java-archive-cataloger

Combining Operations

Scan for Go packages, always include SBOM cataloger, but exclude binary analysis:

syft <container-image> --select-catalogers go,+sbom-cataloger,-binary
# Result: go-module-binary-cataloger, sbom-cataloger
# (binary cataloger excluded even though it's in go tag)

Filter to Java, add POM cataloger, remove Gradle:

syft <directory> --select-catalogers java,+java-pom-cataloger,-gradle

Complete Override Examples

Use only binary analysis catalogers regardless of scan type:

syft <target> --override-default-catalogers binary
# Result: binary-cataloger, cargo-auditable-binary-cataloger,
#         dotnet-portable-executable-cataloger, go-module-binary-cataloger

Use exactly two specific catalogers:

syft <target> --override-default-catalogers go-module-binary-cataloger,go-module-file-cataloger

Use all directory catalogers even when scanning an image:

syft <container-image> --override-default-catalogers directory

Troubleshooting

My language isn’t being detected

Check which catalogers ran and whether they found packages:

# See which catalogers were used
syft <target> -o json | jq '.descriptor.configuration.catalogers.used'

# See which catalogers found packages
syft <target> -o json | jq '.artifacts[].foundBy'

# See packages found by a specific cataloger
syft <target> -o json | jq '.artifacts[] | select(.foundBy == "python-package-cataloger") | .name'

If your expected cataloger isn’t in the used list:

Verify the cataloger exists for your scan type: Use syft cataloger list --select-catalogers <tag> to preview
Check your selection expressions: You may have excluded it with - or not included it in your filter
Check file locations: Some catalogers look for specific paths (e.g., site-packages for Python)

If the cataloger ran but found nothing, check that:

Package files exist in the scanned source
Files are properly formatted
Files are in the expected locations for that cataloger

How do I know if I’m using image or directory defaults?

Check the SBOM’s cataloger configuration:

syft <target> -o json | jq '.descriptor.configuration.catalogers.requested'

This shows the selection strategy used:

"default": ["image", "file"] indicates image defaults
"default": ["directory", "file"] indicates directory defaults

What’s the difference between a name and a tag?

Name: The unique identifier for a single cataloger (e.g., python-package-cataloger)
Tag: A label that groups multiple catalogers (e.g., python includes both python-package-cataloger and python-installed-package-cataloger)

Use tags when you want to downselect from the default catalogers, and names when you need to target a specific cataloger.

Why use –select-catalogers vs –override-default-catalogers?

--select-catalogers: Respects Syft’s automatic image/directory behavior, safer for most use cases
--override-default-catalogers: Ignores scan type, gives complete control, requires more knowledge

When in doubt, use --select-catalogers.

Technical Reference

For reference, here’s the formal logic Syft uses for cataloger selection:

image_catalogers = all_catalogers AND catalogers_tagged("image")

directory_catalogers = all_catalogers AND catalogers_tagged("directory")

default_catalogers = image_catalogers OR directory_catalogers

sub_selected_catalogers = default_catalogers INTERSECT catalogers_tagged(TAG) [ UNION sub_selected_catalogers ... ]

base_catalogers = default_catalogers OR sub_selected_catalogers

final_set = (base_catalogers SUBTRACT removed_catalogers) UNION added_catalogers

This logic applies when using --select-catalogers. The --override-default-catalogers flag bypasses the default cataloger selection entirely and starts with the specified catalogers instead.

Next steps

Continue the guide

Next: Learn about File Selection to control which files and directories Syft scans during cataloging.

Additional resources:

Reference: See the ecosystem capabilities for detailed information about package detection and vulnerability matching
Configuration: Check configuration options for persistent cataloger settings
Filter files: Use File Selection to exclude irrelevant paths before cataloging

3.1.6 - File Selection

Control which files and directories Syft includes or excludes when generating SBOMs.

TL;DR

By default, Syft includes information about files owned by packages into the SBOM
Select which files to include: file.metadata.selection can be one of all, none, or owned-by-package
Exclude paths and globs: --exclude '**/node_modules/**'

By default, Syft catalogs file details and digests for files owned by discovered packages. You can change this behavior using the SYFT_FILE_METADATA_SELECTION environment variable or the file.metadata.selection configuration option.

Available options:

all: capture all files from the search space
owned-by-package: capture only files owned by packages (default)
none: disable file information capture

Excluding file paths

You can exclude specific files and paths from scanning using glob patterns with the --exclude parameter. Use multiple --exclude flags to specify multiple patterns.

# Exclude a specific directory
syft <source> --exclude /etc

# Exclude files by pattern
syft <source> --exclude './out/**/*.json'

# Combine multiple exclusions
syft <source> --exclude './out/**/*.json' --exclude /etc --exclude '**/*.log'

Tip

Always wrap glob patterns in single quotes to prevent your shell from expanding wildcards:

syft <source> --exclude '**/*.json'  # Correct
syft <source> --exclude **/*.json    # May not work as expected

Exclusion behavior by source type

How Syft interprets exclusion patterns depends on whether you’re scanning an image or a directory.

Image scanning

When scanning container images, Syft scans the entire filesystem. Use absolute paths for exclusions:

# Exclude system directories
syft alpine:latest --exclude /etc --exclude /var

# Exclude files by pattern across entire filesystem
syft alpine:latest --exclude '/usr/**/*.txt'

Directory scanning

When scanning directories, Syft resolves exclusion patterns relative to the specified directory. All exclusion patterns must begin with ./, */, or **/.

# Scanning /usr/foo
syft /usr/foo --exclude ./package.json        # Excludes /usr/foo/package.json
syft /usr/foo --exclude '**/package.json'     # Excludes all package.json files under /usr/foo
syft /usr/foo --exclude './out/**'            # Excludes everything under /usr/foo/out

Path prefix requirements for directory scans:

Pattern	Meaning	Example
`./`	Relative to scan directory root	`./config.json`
`*/`	One level of directories	`*/temp`
`**/`	Any depth of directories	`**/node_modules`

Note

When scanning directories, you cannot use absolute paths like /etc or /usr/**/*.txt. The pattern must begin with ./, */, or **/ to be resolved relative to your specified scan directory.

Common exclusion patterns

# Exclude all JSON files
syft <source> --exclude '**/*.json'

# Exclude build output directories
syft <source> --exclude '**/dist/**' --exclude '**/build/**'

# Exclude dependency directories
syft <source> --exclude '**/node_modules/**' --exclude '**/vendor/**'

# Exclude test files
syft <source> --exclude '**/*_test.go' --exclude '**/test/**'

FAQ

Why is my exclusion pattern not working?

Common issues:

Missing quotes: Wrap patterns in single quotes to prevent shell expansion ('**/*.json' not **/*.json)
Wrong path prefix: Directory scans require ./, */, or **/ prefix; absolute paths like /etc won’t work
Pattern syntax: Use glob syntax, not regex (e.g., **/*.txt not .*\.txt)

What’s the difference between owned-by-package and all file metadata?

owned-by-package (default): Only catalogs files that belong to discovered packages (e.g., files in an RPM’s file manifest)
all: Catalogs every file in the scan space, which significantly increases SBOM size and scan time

Use all when you need complete file listings for compliance or audit purposes.

Can I exclude directories based on .gitignore?

Not directly, but you can convert .gitignore patterns to --exclude flags. Note that .gitignore syntax differs from glob patterns, so you may need to adjust patterns (e.g., node_modules/ becomes **/node_modules/**).

Do exclusions affect package detection?

Yes! If you exclude a file that a cataloger needs (like package.json or requirements.txt), Syft won’t detect packages from that file. Exclude carefully to avoid missing dependencies.

Next steps

Continue the guide

Next: Learn about Using Templates to create custom SBOM output formats tailored to your specific needs.

Additional resources:

Configure catalogers: See Package Catalogers to control which package types are detected
Configuration file: Use Configuration to set persistent exclusion patterns
Scan target types: Review Supported Scan Targets to understand scanning behavior for different scan target types

3.1.7 - Using Templates

Create custom SBOM output formats using Go templates with available data fields to build tailored reports for specific tooling or compliance requirements.

TL;DR

Create custom formats: syft <image> -o template -t ./template.tmpl
Templates receive same data as JSON output (explore with syft <image> -o json)
Supports Sprig helper functions

Syft lets you define custom output formats using Go templates. This is useful for generating custom reports, integrating with specific tools, or extracting only the data you need.

How to use templates

Set the output format to template and specify the template file path:

syft <image> -o template -t ./path/to/custom.tmpl

You can also configure the template path in your configuration file:

#.syft.yaml
format:
  template:
    path: "/path/to/template.tmpl"

Available fields

Templates receive the same data structure as the syft-json output format. The Syft JSON schema is the source of truth for all available fields and their structure.

To see what data is available:

# View the full JSON structure
syft <image> -o json

# Explore specific fields
syft <image> -o json | jq '.artifacts[0]'

Key fields commonly used in templates:

.artifacts - Array of discovered packages
.files - Array of discovered files
.source - Information about what was scanned
.distro - Detected Linux distribution (if applicable)
.descriptor - Syft version and configuration

Common package (artifact) fields:

.name, .version, .type - Basic package info
.licenses - License information (array)
.purl - Package URL
.cpes - Common Platform Enumerations
.locations - Where the package was found

Template functions

Syft templates support:

Go template built-ins - See the Go template documentation
Sprig functions - The hermetic (repeatable, not based on environment) set of Sprig functions
Syft-specific functions:

Function	Arguments	Description
`getLastIndex`	`collection`	Returns the last index of a slice (length - 1), useful for comma-separated lists
`hasField`	`obj`, `field`	Checks if a field exists on an object, returns boolean

Examples

The following examples show template source code and the rendered output when run against alpine:3.9.2:

CSV output

"Package","Version","Type","Found by"
{{- range .artifacts}}
"{{.name}}","{{.version}}","{{.type}}","{{.foundBy}}"
{{- end}}

"Package","Version","Type","Found by"
"alpine-baselayout","3.1.0-r3","apk","apk-db-cataloger"
"alpine-keys","2.1-r1","apk","apk-db-cataloger"
"apk-tools","2.10.3-r1","apk","apk-db-cataloger"
"busybox","1.29.3-r10","apk","apk-db-cataloger"
"ca-certificates-cacert","20190108-r0","apk","apk-db-cataloger"
"libc-utils","0.7.1-r0","apk","apk-db-cataloger"
"libcrypto1.1","1.1.1a-r1","apk","apk-db-cataloger"
"libssl1.1","1.1.1a-r1","apk","apk-db-cataloger"
"libtls-standalone","2.7.4-r6","apk","apk-db-cataloger"
"musl","1.1.20-r3","apk","apk-db-cataloger"
"musl-utils","1.1.20-r3","apk","apk-db-cataloger"
"scanelf","1.2.3-r0","apk","apk-db-cataloger"
"ssl_client","1.29.3-r10","apk","apk-db-cataloger"
"zlib","1.2.11-r1","apk","apk-db-cataloger"

Filter by package type

{{range .artifacts}}
{{- if eq .type "apk"}}
{{.name}}@{{.version}}{{end}}
{{- end}}

alpine-baselayout@3.1.0-r3
alpine-keys@2.1-r1
apk-tools@2.10.3-r1
busybox@1.29.3-r10
ca-certificates-cacert@20190108-r0
libc-utils@0.7.1-r0
libcrypto1.1@1.1.1a-r1
libssl1.1@1.1.1a-r1
libtls-standalone@2.7.4-r6
musl@1.1.20-r3
musl-utils@1.1.20-r3
scanelf@1.2.3-r0
ssl_client@1.29.3-r10
zlib@1.2.11-r1

Markdown report

# SBOM Report: {{.source.metadata.userInput}}

Scanned: {{.source.name}}:{{.source.version}} ({{.source.type}})
{{- if .distro}}
Distribution: {{.distro.prettyName}}
{{- end}}

## Packages ({{len .artifacts}})

| Package | Version | Type |
|---------|---------|------|
{{- range .artifacts}}
| {{.name}} | {{.version}} | {{.type}} |
{{- end}}

# SBOM Report: alpine:3.9.2

Scanned: alpine:3.9.2 (image)
Distribution: Alpine Linux v3.9

## Packages (14)

| Package                | Version     | Type |
| ---------------------- | ----------- | ---- |
| alpine-baselayout      | 3.1.0-r3    | apk  |
| alpine-keys            | 2.1-r1      | apk  |
| apk-tools              | 2.10.3-r1   | apk  |
| busybox                | 1.29.3-r10  | apk  |
| ca-certificates-cacert | 20190108-r0 | apk  |
| libc-utils             | 0.7.1-r0    | apk  |
| libcrypto1.1           | 1.1.1a-r1   | apk  |
| libssl1.1              | 1.1.1a-r1   | apk  |
| libtls-standalone      | 2.7.4-r6    | apk  |
| musl                   | 1.1.20-r3   | apk  |
| musl-utils             | 1.1.20-r3   | apk  |
| scanelf                | 1.2.3-r0    | apk  |
| ssl_client             | 1.29.3-r10  | apk  |
| zlib                   | 1.2.11-r1   | apk  |

License compliance

{{range .artifacts}}
{{- if .licenses}}
{{.name}}: {{range .licenses}}{{.value}} {{end}}{{end}}
{{- end}}

alpine-baselayout: GPL-2.0
alpine-keys: MIT
apk-tools: GPL2
busybox: GPL-2.0
ca-certificates-cacert: GPL-2.0-or-later MPL-2.0
libc-utils: BSD
libcrypto1.1: OpenSSL
libssl1.1: OpenSSL
libtls-standalone: ISC
musl: MIT
musl-utils: BSD GPL2+ MIT
scanelf: GPL-2.0
ssl_client: GPL-2.0
zlib: zlib

Custom JSON subset

{
  "scanned": "{{.source.metadata.userInput}}",
  "packages": [
    {{- $last := sub (len .artifacts) 1}}
    {{- range $i, $pkg := .artifacts}}
    {"name": "{{$pkg.name}}", "version": "{{$pkg.version}}"}{{if ne $i $last}},{{end}}
    {{- end}}
  ]
}

{
  "scanned": "alpine:3.9.2",
  "packages": [
    { "name": "alpine-baselayout", "version": "3.1.0-r3" },
    { "name": "alpine-keys", "version": "2.1-r1" },
    { "name": "apk-tools", "version": "2.10.3-r1" },
    { "name": "busybox", "version": "1.29.3-r10" },
    { "name": "ca-certificates-cacert", "version": "20190108-r0" },
    { "name": "libc-utils", "version": "0.7.1-r0" },
    { "name": "libcrypto1.1", "version": "1.1.1a-r1" },
    { "name": "libssl1.1", "version": "1.1.1a-r1" },
    { "name": "libtls-standalone", "version": "2.7.4-r6" },
    { "name": "musl", "version": "1.1.20-r3" },
    { "name": "musl-utils", "version": "1.1.20-r3" },
    { "name": "scanelf", "version": "1.2.3-r0" },
    { "name": "ssl_client", "version": "1.29.3-r10" },
    { "name": "zlib", "version": "1.2.11-r1" }
  ]
}

Executable file digests

{{range .files -}}
{{- if .executable}}
{{.location.path}}: {{range .digests}}{{if eq .algorithm "sha256"}}{{.value}}{{end}}{{end}}
{{end}}
{{- end}}

/bin/busybox: e16ab33dc871e43b8d1bb5a4b8b1b84963dbeca33cb42a6eb9884d611aa38399

/lib/ld-musl-x86_64.so.1: 42a0167325aaa5308e8f56cdfbfe3693fbceb49ab6514e6cd7048b9991353847

/lib/libcrypto.so.1.1: 17ef79be58d6a6fac381ecb3da3169b59872f0369d83f2cb556525752f033053

/lib/libssl.so.1.1: bb74e17676bda5909d41e6277c929827d1a41bd3eeba156355a265a53c3a5231

/lib/libz.so.1.2.11: 7c8aad287832213129abdbfdf4d03679d6df88d992ee9236c9db43b6a5c3190d

/sbin/apk: 75a942c8b866d3cb6cc97b941a271a0ef368f583f575457b864f2d9246d034c7

/sbin/mkmntdirs: bc9a2b20273927028177aaf5f2f6896593c161cb58f5055e2fd7138a042c7f30

/usr/bin/getconf: 8febf7f34f34223138953e31301b94f687c33421c2943e6e30e088b965859c46

/usr/bin/getent: dbe90a610ab8f3fe41c8f8f15f554fd65ef7fe0d45ea41192ac1dcdcc92ba2dd

/usr/bin/iconv: 303661a0b60349247ff1e95f35b165c878ae0f5f046f96174e143b4d99777754

/usr/bin/scanelf: 1f854b8a9dedf87b1148846400143e22d3b3fe91322d7c0dde7b283e1c5f55e4

/usr/bin/ssl_client: fdaf5fe91369e3d83dff8e46d3e2463a9066025593f4e98e47036473c15c1cfd

/usr/lib/engines-1.1/afalg.so: 28235d3670e8ee47973e23d5ef561b4a1adf35894677bc702309e1e977865dff

/usr/lib/engines-1.1/capi.so: 529fa687249d140df0397e1224bb659415d45023e18e4818269397a03d769d69

/usr/lib/engines-1.1/padlock.so: 164c1fb578c0bd2605d3c9b5595f8755664c81a7c1963fc49cb16b5cdf560d2c

/usr/lib/libtls-standalone.so.1.0.0: 37b016468b279d21be84ea77bf63af4fcd683b6a639774c74bfdcbfc0c27e3e3

Find binaries importing a library

{{range .files -}}
{{- if .executable}}
{{- $path := .location.path}}
{{- range .executable.importedLibraries}}
{{- if eq . "libcrypto.so.1.1"}}
{{$path}}
{{break}}
{{- end}}
{{- end}}
{{- end}}
{{- end}}

/lib/libssl.so.1.1

/sbin/apk

/usr/lib/engines-1.1/afalg.so

/usr/lib/libtls-standalone.so.1.0.0

Troubleshooting

“can’t evaluate field” errors: The field doesn’t exist or is misspelled. Check field names with syft <image> -o json | jq.

Empty output: Verify your field paths are correct. Use syft <image> -o json to see the actual data structure.

Template syntax errors: Refer to the Go template documentation for syntax help.

Note

If you have templates from before Syft v0.102.0 that no longer work, set format.template.legacy: true in your configuration. This uses internal Go structs instead of the JSON output schema.

Long-term support for this legacy option is not guaranteed.

Next steps

Continue the guide

Next: Learn about Format Conversion to convert existing SBOMs between different formats without re-scanning.

Additional resources:

Template syntax: See Go template documentation for syntax reference
Helper functions: Browse Sprig function documentation for available helpers
Query with jq: Check Working with Syft JSON for query examples to use in templates
Configuration: See Configuration options for persistent template settings

3.1.8 - Format Conversion

Convert existing SBOMs between different formats including SPDX and CycloneDX using Syft’s experimental conversion capabilities.

Experimental Feature

This feature is experimental and may change in future releases.

TL;DR

Convert from Syft JSON to other SBOM formats: syft convert <sbom-file> -o <format>
Best practice: keep Syft JSON as source, convert to SPDX/CycloneDX as needed
Avoid chaining conversions (e.g., SPDX → CycloneDX)

The ability to convert existing SBOMs means you can create SBOMs in different formats quickly, without the need to regenerate the SBOM from scratch, which may take significantly more time.

syft convert <ORIGINAL-SBOM-FILE> -o <NEW-SBOM-FORMAT>[=<NEW-SBOM-FILE>]

We support formats with wide community usage AND good encode/decode support by Syft. The supported formats are:

Syft JSON (-o json)
SPDX JSON (-o spdx-json)
SPDX tag-value (-o spdx-tag-value)
CycloneDX JSON (-o cyclonedx-json)
CycloneDX XML (-o cyclonedx-xml)

Conversion example:

syft alpine:latest -o syft-json=sbom.syft.json # generate a syft SBOM
syft convert sbom.syft.json -o cyclonedx-json=sbom.cdx.json  # convert it to CycloneDX

Best practices

Use Syft JSON as the source format

Generate and keep Syft JSON as your primary SBOM. Convert from it to other formats as needed:

# Generate Syft JSON (native format with complete data)
syft <source> -o json=sbom.json

# Convert to other formats
syft convert sbom.json -o spdx-json=sbom.spdx.json
syft convert sbom.json -o cyclonedx-json=sbom.cdx.json

Converting between non-Syft formats loses data. Syft JSON contains all information Syft extracted, while other formats use different schemas that can’t represent the same fields.

Learn more

Learn more about working with Syft’s native format in the Working with Syft JSON guide.

What gets preserved

Data Loss During Conversion

Converting between formats may lose data. Packages (names, versions, licenses) transfer reliably, while tool metadata, source details, and format-specific fields may not. Use Syft JSON as the source format to minimize data loss.

Conversions from Syft JSON to SPDX or CycloneDX preserve all standard SBOM fields. Converted output matches directly-generated output (only timestamps and IDs differ).

Avoid chaining conversions (e.g., SPDX → CycloneDX). Each step may lose format-specific data.

Reliably preserved across conversions:

Package names, versions, and PURLs
License information
CPEs and external references
Package relationships

May be lost in conversions:

Tool configuration and cataloger information
Source metadata (image manifests, layers, container config)
File location details and layer attribution
Package-manager-specific metadata (git commits, checksums, provides/dependencies)
Distribution details

When to convert vs regenerate

Convert from Syft JSON when:

You need multiple formats for different tools
The original source is unavailable
Scanning takes significant time

Regenerate from source when:

You need complete format-specific data
Conversion output is missing critical information

FAQ

Can I convert from SPDX to CycloneDX?

Yes, but it’s not recommended. Converting between non-Syft formats loses data with each conversion. If you have the original Syft JSON or can re-scan the source, that’s a better approach.

Why is some data missing after conversion?

Different SBOM formats have different schemas with different capabilities. SPDX and CycloneDX can’t represent all Syft metadata. Converting from Syft JSON to standard formats works best; converting between standard formats loses more data.

Is conversion faster than re-scanning?

Yes, significantly. Conversion takes milliseconds while scanning can take seconds to minutes depending on source size. This makes conversion ideal for CI/CD pipelines that need multiple formats.

Can I convert back to Syft JSON from SPDX?

Yes, but you’ll lose Syft-specific metadata that doesn’t exist in SPDX (like cataloger information, layer details, and file metadata). The result won’t match the original Syft JSON.

Which format versions are supported?

See the Output Formats guide for supported versions of each format. Syft converts to the latest version by default, but you can specify older versions (e.g., -o spdx-json@2.2).

Next steps

Continue the guide

Next: Explore Attestation to learn how to sign and verify your SBOMs for supply chain security.

Additional resources:

Source format: See Working with Syft JSON to understand the source format
Available formats: Check Output Formats for all supported SBOM formats
Direct generation: Learn about generating formats directly in Getting Started

3.1.9 - Attestation

Generate cryptographically signed SBOM attestations using in-toto and Sigstore to create, verify, and attach attestations to container images for supply chain security.

Experimental Feature

This feature is experimental and may change in future releases.

TL;DR

Sign SBOMs: syft attest --output cyclonedx-json <image> (keyless via OIDC)
Or with keys: syft attest --key cosign.key --output spdx-json <image>
Requires cosign ≥ v1.12.0 and registry write access
Verify: cosign verify-attestation
Attestations attach to images in OCI registries

Overview

An attestation is cryptographic proof that you created a specific SBOM for a container image. When you publish an image, consumers need to trust that the SBOM accurately describes the image contents. Attestations solve this by letting you sign SBOMs and attach them to images, enabling consumers to verify authenticity.

Syft supports two approaches:

Keyless attestation: Uses your identity (GitHub, Google, Microsoft) as trust root via Sigstore. Best for CI/CD and teams.
Local key attestation: Uses cryptographic key pairs you manage. Best for air-gapped environments or specific security requirements.

Prerequisites

Before creating attestations, ensure you have:

Syft installed
Cosign ≥ v1.12.0 installed (installation guide)
Write access to the OCI registry where you’ll publish attestations
Registry authentication configured (e.g., docker login for Docker Hub)

For local key attestations, you’ll also need a key pair. Generate one with:

cosign generate-key-pair

This creates cosign.key (private key) and cosign.pub (public key). Keep the private key secure.

Keyless attestation

Keyless attestation uses Sigstore to tie your OIDC identity (GitHub, Google, or Microsoft account) to the attestation. This eliminates key management overhead.

Create a keyless attestation

syft attest --output cyclonedx-json <IMAGE>

Replace <IMAGE> with your image reference (e.g., docker.io/myorg/myimage:latest). You must have write access to this image.

What happens:

Syft opens your browser to authenticate via OIDC (GitHub, Google, or Microsoft)
After authentication, Syft generates the SBOM
Sigstore signs the SBOM using your identity
The attestation is uploaded to the OCI registry alongside your image

Verify a keyless attestation

Anyone can verify the attestation using cosign:

COSIGN_EXPERIMENTAL=1 cosign verify-attestation <IMAGE>

Successful output shows:

Attestation claims are validated
Claims exist in the Sigstore transparency log
Certificates verified against Fulcio (Sigstore’s certificate authority)
Certificate subject (your identity email)
Certificate issuer (identity provider URL)

Example:

Certificate subject:  user@example.com
Certificate issuer URL:  https://accounts.google.com

This proves the attestation was created by the specified identity.

Local key attestation

Local key attestation uses cryptographic key pairs you manage. You sign attestations with your private key, and consumers verify with your public key.

Create a key-based attestation

Generate the attestation and save it locally:

syft attest --output spdx-json --key cosign.key docker.io/myorg/myimage:latest > attestation.json

The output is a DSSE envelope containing an in-toto statement with your SBOM as the predicate.

Attach the attestation to your image

Use cosign to attach the attestation:

cosign attach attestation --attestation attestation.json docker.io/myorg/myimage:latest

You need write access to the image registry for this to succeed.

Verify a key-based attestation

Consumers verify using your public key:

cosign verify-attestation --key cosign.pub --type spdxjson docker.io/myorg/myimage:latest

Successful output shows:

Verification for docker.io/myorg/myimage:latest --
The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key
  - Any certificates were verified against the Fulcio roots.

To extract and view the SBOM:

cosign verify-attestation --key cosign.pub --type spdxjson docker.io/myorg/myimage:latest | \
  jq '.payload | @base64d | .payload | fromjson | .predicate'

Use with vulnerability scanning

Pipe the verified SBOM directly to Grype for vulnerability analysis:

cosign verify-attestation --key cosign.pub --type spdxjson docker.io/myorg/myimage:latest | \
  jq '.payload | @base64d | .payload | fromjson | .predicate' | \
  grype

This ensures you’re scanning a verified, trusted SBOM.

Troubleshooting

Authentication failures

Ensure you’re logged into the registry: docker login <registry>
Verify you have write access to the image repository

Cosign version errors

Update to cosign ≥ v1.12.0: cosign version

Verification failures

For keyless: ensure COSIGN_EXPERIMENTAL=1 is set
For key-based: verify you’re using the correct public key
Check the attestation type matches (--type spdxjson or --type cyclonedx-json)

Permission denied uploading attestations

Verify write access to the registry
Check authentication credentials are current
Ensure the image exists in the registry before attaching attestations

Next steps

Guide complete!

Now let’s put those SBOMs to good use and scan with Grype to understand your exposure to vulnerabilities.

Continue your journey:

Scan for vulnerabilities: Use Grype to find security issues in your SBOMs
Check licenses: Analyze open source licenses with Grant
Reference documentation: Explore Syft CLI reference for all available commands and options
Configure Syft: See Configuration for advanced settings and persistent configuration

Key pages to revisit:

Getting Started - Quick start and installation
Supported Scan Targets - All scanning capabilities
Output Formats - SBOM format options
Working with Syft JSON - Query and extract data

3.2 - Vulnerability Scanning

Learn how to scan container images, filesystems, and SBOMs for known software vulnerabilities.

Vulnerability scanning is the automated process of proactively identifying security weaknesses and known exploits within software and systems. This is crucial because it helps developers and organizations find and fix potential security holes before malicious actors can discover and exploit them, thus protecting data and maintaining system integrity.

Grype is an open-source vulnerability scanner specifically designed to analyze container images and filesystems. It works by comparing the software components it finds against a database of known vulnerabilities, providing a report of potential risks so they can be addressed.

3.2.1 - Getting Started

Use Grype to scan your container images, directories, or archives for known vulnerabilities.

What is Vulnerability Scanning?

Vulnerability scanning is the process of identifying known security vulnerabilities in software packages and dependencies.

For developers, it helps catch security issues early in development, before they reach production.
For organizations, it’s essential for maintaining security posture and meeting compliance requirements.

Grype is a CLI tool for scanning container images, filesystems, and SBOMs for known vulnerabilities.

Installation

Grype is provided as a single compiled executable and requires no external dependencies to run. Run the command for your platform to download the latest release.

curl -sSfL https://get.anchore.io/grype | sudo sh -s -- -b /usr/local/bin

brew install grype

winget install Anchore.Grype

Check out installation guide for full list of official and community-maintained packaging options.

Scan a container image for vulnerabilities

Run grype against a small container image. Grype will download the latest vulnerability database and output simple human-readable table of packages that are vulnerable:

grype alpine:latest

 ✔ Loaded image alpine:latest
 ✔ Parsed image sha256:8d591b0b7dea080ea3be9e12ae563eebf9…
 ✔ Cataloged contents 058c92d86112aa6f641b01ed238a07a3885…
   ├── ✔ Packages                        [15 packages]
   ├── ✔ File metadata                   [82 locations]
   ├── ✔ File digests                    [82 files]
   └── ✔ Executables                     [17 executables]
 ✔ Scanned for vulnerabilities     [6 vulnerability matches]
   ├── by severity: 0 critical, 0 high, 0 medium, 6 low, 0 negligible
   └── by status:   0 fixed, 6 not-fixed, 0 ignored
NAME           INSTALLED   FIXED-IN  TYPE  VULNERABILITY   SEVERITY
busybox        1.37.0-r12            apk   CVE-2024-58251  Low
busybox        1.37.0-r12            apk   CVE-2025-46394  Low
busybox-binsh  1.37.0-r12            apk   CVE-2024-58251  Low
busybox-binsh  1.37.0-r12            apk   CVE-2025-46394  Low
ssl_client     1.37.0-r12            apk   CVE-2024-58251  Low
ssl_client     1.37.0-r12            apk   CVE-2025-46394  Low

Learn more

Grype supports more than just containers. Learn more about Supported Scan Targets

Scan an existing SBOM for vulnerabilities

Grype can scan container images directly, but it can also scan an existing SBOM document.

Note

This presumes you already created alpine_latest-spdx.json using Syft, or some other tool. If not, go to SBOM Generation Getting Started and create it now.

grype alpine_latest-spdx.json

Create a vulnerability report in JSON format

The JSON-formatted output from Grype can be processed or visualized by other tools.

Create the vulnerability report using the --output flag:

grype alpine:latest --output json | jq . > vuln_report.json

While the JSON is piped to the file, you’ll see progress on stderr:

 ✔ Pulled image
 ✔ Loaded image alpine:latest
 ✔ Parsed image sha256:8d591b0b7dea080ea3be9e12ae563eebf9869168ffced1cb25b2470a3d9fe15e
 ✔ Cataloged contents 058c92d86112aa6f641b01ed238a07a3885b8c0815de3e423e5c5f789c398b45
   ├── ✔ Packages                        [15 packages]
   ├── ✔ File digests                    [82 files]
   ├── ✔ Executables                     [17 executables]
   └── ✔ File metadata                   [82 locations]
 ✔ Scanned for vulnerabilities     [6 vulnerability matches]
   ├── by severity: 0 critical, 0 high, 0 medium, 6 low, 0 negligible
   └── by status:   0 fixed, 6 not-fixed, 0 ignored

FAQ

Does Grype need internet access?

Only for downloading container images and the vulnerability database. After the initial database download, scanning works offline until you update the database.

What about private container registries?

Grype supports authentication for private registries. See Private Registries.

Can I use Grype in CI/CD pipelines?

Absolutely! Grype is designed for automation. Scan images or SBOMs during builds and fail pipelines based on severity thresholds.

What data does Grype send externally?

Nothing. Grype runs entirely locally and doesn’t send any data to external services.

Next steps

Continue the guide

Next: Learn about all the different Supported scan targets Grype can analyze –from container images to local directories and SBOMs.

Now that you’ve scanned for vulnerabilities, here are additional resources:

Understand results: Learn how to interpret scan output
Filter vulnerabilities: Use result filtering to focus on actionable findings
Manage database: Keep your vulnerability database up to date

3.2.2 - Supported Scan Targets

Explore the different scan targets Grype supports including container images, directories, SBOMs, and individual packages

TL;DR

Grype automatically detects scan target type, simply pass it as an argument: grype <target>
Supports container images (Docker/Podman/Containerd/registries), directories, files, archives, and SBOMs
Scan individual packages via PURLs or CPE identifiers
Use --from <type> to explicitly specify scan target type

Grype can scan a variety of scan targets including container images, directories, files, archives, SBOMs, and individual packages. In most cases, you can simply point Grype at what you want to analyze and it will automatically detect and scan it correctly.

Scan a container image from your local daemon or a remote registry:

grype alpine:latest

Scan a directory or file:

grype /path/to/project

Scan an SBOM:

grype sbom.json

To explicitly specify the scan target type, use the --from flag:

`--from ARG`	Description
`docker`	Use images from the Docker daemon
`podman`	Use images from the Podman daemon
`containerd`	Use images from the Containerd daemon
`docker-archive`	Use a tarball from disk for archives created from `docker save`
`oci-archive`	Use a tarball from disk for OCI archives
`oci-dir`	Read directly from a path on disk for OCI layout directories
`singularity`	Read directly from a Singularity Image Format (SIF) container file on disk
`dir`	Read directly from a path on disk (any directory)
`file`	Read directly from a path on disk (any single file)
`registry`	Pull image directly from a registry (bypass any container runtimes)
`sbom`	Read SBOM from file (supports Syft JSON, SPDX, CycloneDX formats)
`purl`	Scan individual packages via Package URL identifiers

Instead of using the --from flag explicitly, you can instead:

provide no hint and let Grype automatically detect the scan target type implicitly based on the input provided
provide the scan target type as a URI scheme in the target argument (e.g., docker:alpine:latest, oci-archive:/path/to/image.tar, dir:/path/to/dir)

Learn more

Grype supports all the same scan targets as Syft (see Syft’s supported scan targets for the complete details).

In addition to Syft’s scan targets, Grype can scan:

Pre-generated SBOMs in multiple formats (Syft JSON, SPDX, CycloneDX)
Individual packages via Package URL (PURL) or Common Platform Enumeration (CPE) identifiers

Scan target-specific behaviors

With each kind of scan target, there are specific behaviors and defaults to be aware of.

For scan target capabilities that are inherited from Syft, please see the SBOM scan targets documentation:

For scan targets that are uniquely supported by Grype, see the sections below.

SBOM Scan Targets

You can scan pre-generated SBOMs instead of scanning the scan target directly. This approach offers several benefits:

Faster scans since package cataloging is already complete
Ability to cache and reuse SBOMs
Standardized vulnerability scanning across different tools

Scan an SBOM file

Grype scans SBOM files in multiple formats. You can provide an explicit sbom: prefix or just provide the file path:

Explicit SBOM prefix:

grype sbom:sbom.json

Implicit detection:

grype sbom.json

Grype automatically detects the SBOM format. Supported formats include:

Syft JSON
SPDX JSON, XML, and tag-value
CycloneDX JSON and XML

Use the explicit sbom: prefix when the file path might be ambiguous or when you want to be clear about the input type.

Scan an SBOM from stdin

You can pipe SBOM output directly from Syft or other SBOM generation tools:

Syft → Grype pipeline:

syft alpine:latest -o json | grype

Read SBOM from file via stdin:

Grype detects stdin input automatically when no command-line argument is provided and stdin is piped:

cat sbom.json | grype

Note

Grype will not attempt to read from redirected stdin in interactive terminal sessions when the use of a pipe is not detected.

Thus grype < sbom.json will not work in an interactive terminal session.

Package scan targets

You can scan specific packages without scanning an entire image or directory. This is useful for:

Testing whether a specific package has vulnerabilities
Lightweight vulnerability checks
Compliance scanning for specific dependencies

Grype supports two formats for individual package scanning: Package URLs (PURLs) and Common Platform Enumerations (CPEs). When Grype receives input, it checks for PURL format first, then CPE format, before trying other scan target types.

Scan Package URLs (PURLs)

Package URLs (PURLs) provide a standardized way to identify software packages.

A PURL has this format:

pkg:<type>/<namespace>/<name>@<version>?<qualifiers>#<subpath>

Grype can take purls from the CLI or from a file. For instance, to scan the python library urllib3 (version 1.26.7):

grype pkg:pypi/urllib3@1.26.7

You’ll see vulnerabilities for that specific package:

NAME     INSTALLED  FIXED IN  TYPE    VULNERABILITY        SEVERITY  EPSS           RISK
urllib3  1.26.7     1.26.17   python  GHSA-v845-jxx5-vc9f  High      0.9% (74th)    0.6
urllib3  1.26.7     1.26.19   python  GHSA-34jh-p97f-mpxf  Medium    0.1% (35th)    < 0.1
urllib3  1.26.7     1.26.18   python  GHSA-g4mx-q9vg-27p4  Medium    < 0.1% (15th)  < 0.1
urllib3  1.26.7     2.5.0     python  GHSA-pq67-6m6q-mj2v  Medium    < 0.1% (4th)   < 0.1

For operating system packages (apk, deb, rpm), use the distro qualifier to specify the distribution:

grype "pkg:apk/alpine/openssl@3.1.5-r0?distro=alpine-3.19"
grype "pkg:deb/debian/openssl@1.1.1w-0+deb11u1?distro=debian-11"
grype "pkg:rpm/redhat/openssl@1.0.2k-19.el7?distro=rhel-7"

Remember

Always quote PURL arguments to prevent shell expansion of special characters like ? and &.

You can specify distribution information with the --distro flag instead:

grype "pkg:rpm/redhat/openssl@1.0.2k-19.el7?arch=x86_64" --distro rhel:7

Without either the distro qualifier or the --distro flag hint, Grype may not find distribution-specific vulnerabilities.

Other qualifiers include:

upstream: The upstream package name or version. Vulnerability information tends to be tracked with the source or origin package instead of the installed package itself (e.g. libcrypto might be installed but the package it was built from is openssl which is where vulnerabilities are attributed to)
epoch: The epoch value for RPM packages. This is necessary when the package in question has changed the methodology for versioning (e.g., switching from date-based versions to semantic versions) and the epoch is used to indicate that change.

You can scan multiple packages from a file. The file contains one PURL per line:

# contents of packages.txt follow, which must be a text file with one PURL per line

pkg:npm/lodash@4.17.20
pkg:pypi/requests@2.25.1
pkg:maven/org.apache.commons/commons-lang3@3.12.0

grype ./packages.txt

Grype scans all the packages in the file:

NAME           INSTALLED  FIXED IN  TYPE          VULNERABILITY        SEVERITY
lodash         4.17.20    4.17.21   npm           GHSA-35jh-r3h4-6jhm  High
requests       2.25.1     2.31.0    python        GHSA-j8r2-6x86-q33q  Medium
commons-lang3  3.12.0     3.18.0    java-archive  GHSA-j288-q9x7-2f5v  Medium
...

Learn more

See the official Package URL types documentation for more details on supported package types.

Scan Common Platform Enumerations (CPEs)

Common Platform Enumeration (CPE) is an older identification format for software and hardware. You can scan using CPE format:

grype "cpe:2.3:a:apache:log4j:2.14.1:*:*:*:*:*:*:*"

Grype supports multiple CPE formats:

# CPE 2.2 format (WFN URI binding)
grype "cpe:/a:apache:log4j:2.14.1"

# CPE 2.3 format (string binding)
grype "cpe:2.3:a:apache:log4j:2.14.1:*:*:*:*:*:*:*"

Use CPE when:

You’re working with legacy systems that use CPE identifiers
You need to test for vulnerabilities in a specific CVE that references a CPE
PURL format is not available for your package type

For most modern scanning workflows, PURL format is preferred because it provides better precision and ecosystem-specific information.

Learn more

See the CPE specification for more details on CPE formats and usage.

Next steps

Continue the guide

Next: Explore Supported ecosystems to understand how Grype selects vulnerability data for different package types.

Additional resources:

Understand results: Learn how to interpret scan output
Filter vulnerabilities: Use result filtering to focus on specific findings
Private registries: Set up authentication for private images

3.2.3 - Supported package ecosystems

Learn how Grype selects vulnerability data for different package types and what level of accuracy to expect

TL;DR

OS packages use distribution-specific security feeds (Alpine, Debian, Ubuntu, RHEL, etc.)
Language packages use GitHub Security Advisories (npm, PyPI, Maven, Go, etc.)
Other packages fall back to CPE matching against NVD (may have false positives)
Grype automatically selects the right data source based on package type

Grype automatically selects the right vulnerability data source based on how the detected software has been packaged and installed, using the detected package type and Linux OS distribution information in your SBOM. This guide explains how Grype chooses which vulnerability feed to use and what level of accuracy to expect.

How Grype chooses vulnerability data

Grype selects vulnerability feeds based on package type:

OS packages (apk, deb, rpm, portage, alpm) use vulnerability data sourced from Linux distribution-specific security feeds, when installed via the Linux distribution’s package management mechanisms.
Language packages (npm, PyPI, Maven, Go modules, etc.) use GitHub Security Advisories, when installed via the native language packaging / installation mechanisms.
Other packages (binaries, Homebrew, Jenkins plugins, etc.) fall back to CPE matching against the NVD.

OS packages

When Grype detects software that is installed as an OS package (rpm, deb, apk, etc), it uses vulnerability data sourced from the associated Linux distribution’s security feeds. Distribution maintainers curate these feeds and provide authoritative information about vulnerabilities affecting specific distribution versions.

For example, when you scan Debian 10, Grype looks for vulnerabilities affecting Debian 10 packages:

$ grype debian:10
NAME          INSTALLED           FIXED IN     TYPE  VULNERABILITY   SEVERITY
libgcrypt20   1.8.4-5+deb10u1     (won't fix)  deb   CVE-2021-33560  High
bash          5.0-4                            deb   CVE-2019-18276  Negligible
libidn2-0     2.0.5-1+deb10u1     (won't fix)  deb   CVE-2019-12290  High

OS distributions

Grype supports major Linux distributions with dedicated vulnerability feeds, including Alpine, Debian, Ubuntu, RHEL, SUSE, and many others. Some distributions have mature security tracking programs that report both fixed and unfixed vulnerabilities, providing comprehensive coverage.

Derivative distributions automatically use their parent distribution’s vulnerability feed. Grype maps derivative distributions to their upstream source using the ID_LIKE field from /etc/os-release. For example, Rocky Linux and AlmaLinux use the RHEL vulnerability feed, while Raspbian uses Debian’s feed.

When scanning Rocky Linux, Grype uses Red Hat security data:

$ grype rockylinux:9 -o json | jq '.matches[0].matchDetails[0].searchedBy.distro'
{
  "type": "rockylinux",
  "version": "9.3"
}

The distro type shows rockylinux, but Grype searches the RHEL vulnerability feed automatically. You don’t need to configure this mapping –it happens transparently based on the distribution’s ID_LIKE field.

Learn more

For a complete list of supported Linux distributions and their versions, see the OS support reference.

To learn more about data source capabilities, see the data sources reference.

End-of-life distributions

When distributions reach end-of-life (EOL), the distribution maintainer stops publishing security advisories, and the security feeds Grype relies on no longer receive updates. Grype warns you when scanning EOL distributions. See EOL detection for details.

Language packages

Language packages use vulnerability data from GitHub Security Advisories (GHSA). GitHub maintains security advisories for major package ecosystems, sourced from package maintainers, security researchers, and automated scanning.

When you scan a JavaScript package, Grype searches GHSA for npm advisories:

$ grype node:18-alpine
NAME         INSTALLED  FIXED IN  TYPE  VULNERABILITY         SEVERITY
cross-spawn  7.0.3      7.0.5     npm   GHSA-3xgq-45jj-v275   High

Supported language ecosystems

Grype supports these language ecosystems through GHSA:

Python (PyPI) - Python packages
JavaScript (npm) - Node.js packages
Java (Maven) - Java archives
Go (modules) - Go modules
PHP (Composer) - PHP packages
.NET (NuGet) - .NET packages
Dart (Pub) - Dart and Flutter packages
Ruby (RubyGems) - Ruby gems
Rust (Crates) - Rust crates
Swift - Swift packages
GitHub Actions - GitHub Actions workflow dependencies

For language packages, Grype searches GHSA by package name and version, applying ecosystem-specific version comparison rules to determine if your package version falls within the vulnerable range.

In addition to language packages, Bitnami packages are searched against Bitnami’s vulnerability feed in a similar manner.

Other packages

Packages without dedicated feeds use CPE fallback matching

Packages using CPE matching

These package types rely on Common Platform Enumeration (CPE) matching against the National Vulnerability Database (NVD):

Binary executables
Homebrew packages
Jenkins plugins
Conda packages
WordPress plugins

CPE matching constructs a CPE string from the package name and version, then searches the NVD for matching vulnerability entries.

Understanding CPE match accuracy

CPE matching has important limitations:

May produce false positives - CPEs often do not distinguish between package ecosystems. For example, the PyPI package docker (a Python library for talking to the Docker daemon) can match vulnerabilities for Docker the container runtime because they share similar CPE identifiers.
May miss vulnerabilities - Not all vulnerabilities have CPE entries in the NVD.
Requires CPE metadata - Packages must have CPE information for matching to work.

You should verify CPE matches against the actual vulnerability details to confirm they apply to your specific package. Here’s a CPE match example:

{
  "matchDetails": [
    {
      "type": "cpe-match",
      "searchedBy": {
        "cpes": ["cpe:2.3:a:zlib:zlib:1.2.11:*:*:*:*:*:*:*"]
      },
      "found": {
        "versionConstraint": "<= 1.2.12 (unknown)"
      }
    }
  ]
}

Notice the version constraint shows (unknown) format rather than ecosystem-specific semantics, and the match type is cpe-match instead of exact-direct-match.

For more details on interpreting match types, confidence levels, and result reliability, see Understanding Grype results.

Next steps

Continue the guide

Next: Learn how to understand Grype results to read scan output and assess match reliability.

Additional resources:

Filter results: Use result filtering to focus on specific vulnerabilities
Data sources: Explore vulnerability data sources for details on each data source and supported operating systems

3.2.4 - Understanding Grype results

Learn how to read and interpret Grype’s vulnerability scan output, including match types, confidence levels, and result reliability

TL;DR

Default table output shows package, vulnerability, severity, and fix info
Match types in JSON output indicate reliability: exact-direct-match and exact-indirect-match are high confidence, cpe-match requires verification
Use --by-cve to normalize vulnerability IDs to CVE format
Use JSON output (-o json) with jq for filtering and analysis

This guide explains how to read and interpret Grype’s vulnerability scan output. You’ll learn what different match types mean, how to assess result reliability, and how to filter results based on confidence levels.

Output formats

Grype supports several output formats for scan results:

Table (default) - Human-readable columnar output for terminal viewing
JSON - Complete structured data with all match details
SARIF - Standard format for tool integration and CI/CD pipelines
Template - Custom output using Go templates

This guide focuses on table and JSON formats, which you’ll use most often for understanding scan results.

Reading table output

The table format is Grype’s default output. When you run grype <image>, you see a table displaying one row per unique vulnerability match, with deduplication of identical rows.

Table columns

The table displays eight standard columns, with an optional ninth column for annotations:

NAME - The package name
INSTALLED - The version of the package
FIXED-IN - The version that fixes the vulnerability (shows (won't fix) if the vendor won’t fix it, or empty if no fix is available). See Filter by fix availability to filter results based on fix states
TYPE - Package type (apk, deb, rpm, npm, python, java-archive, etc.)
VULNERABILITY - The vulnerability identifier (see below)
SEVERITY - Vulnerability severity rating (Critical, High, Medium, Low, Negligible, Unknown)
EPSS - Exploit Prediction Scoring System score and percentile showing the probability of exploitation
RISK - Calculated risk score combining CVSS, EPSS, and other severity metrics into a single numeric value (0.0 to 100.0)
Annotations (conditional) - Additional context like KEV (Known Exploited Vulnerability), suppressed status, or distribution version when scanning multi-distro images

Here’s what a typical scan looks like:

NAME          INSTALLED  FIXED-IN     TYPE          VULNERABILITY   SEVERITY  EPSS          RISK
log4j-core    2.4.0      2.12.2       java-archive  CVE-2021-44228  Critical  94.4% (99th)  100.0  (kev)
log4j-core    2.4.0      2.12.2       java-archive  CVE-2021-45046  Critical  94.3% (99th)  99.0   (kev)
apk-tools     2.10.6-r0  2.10.7-r0    apk           CVE-2021-36159  Critical  12% (85th)    8.5
libcrypto1.1  1.1.1k-r0               apk           CVE-2021-3711   Critical  9% (78th)     9.1
libcrypto1.1  1.1.1k-r0  (won't fix)  apk           CVE-2021-3712   High      5% (62nd)     7.2

The Annotations column appears conditionally to provide additional context:

KEV or (kev) - Indicates the vulnerability is in CISA’s Known Exploited Vulnerabilities catalog
suppressed or suppressed by VEX - Shown when using --show-suppressed flag (see View filtered results)
Distribution version (e.g., ubuntu:20.04) - Shown when scan results include matches from multiple different distributions

Understanding vulnerability IDs

The VULNERABILITY column displays different types of identifiers depending on the data source:

CVE IDs (e.g., CVE-2024-1234) - Common Vulnerabilities and Exposures identifiers used by most Linux distributions (Alpine, Debian, Ubuntu, RHEL, SUSE) and the NVD
GHSA IDs (e.g., GHSA-xxxx-xxxx-xxxx) - GitHub Security Advisory identifiers for language ecosystem packages
ALAS IDs (e.g., ALAS-2023-1234) - Amazon Linux Security Advisory identifiers
ELSA IDs (e.g., ELSA-2023-12205) - Oracle Enterprise Linux Security Advisory identifiers

By default, Grype displays the vulnerability ID from the original data source. For example, an Alpine package might show CVE-2024-1234 while a GitHub Advisory for the same issue shows GHSA-abcd-1234-efgh. Use the --by-cve flag to normalize results to CVE identifiers:

grype <image> --by-cve

This flag replaces non-CVE vulnerability IDs with their related CVE ID when available, uses CVE metadata instead of the original advisory metadata, and makes it easier to correlate vulnerabilities across different data sources.

Compare the two approaches:

# Default output - shows GitHub Advisory ID
$ grype node:18
NAME     INSTALLED  FIXED-IN  TYPE  VULNERABILITY        SEVERITY
lodash   4.17.20    4.17.21   npm   GHSA-35jh-r3h4-6jhm  High

# With --by-cve - converts to CVE
$ grype node:18 --by-cve
NAME     INSTALLED  FIXED-IN  TYPE  VULNERABILITY   SEVERITY
lodash   4.17.20    4.17.21   npm   CVE-2021-23337  High

Sorting results

By default, Grype sorts vulnerability results by risk score, which combines multiple factors to help you prioritize remediation efforts. Understanding how sorting works and when to use alternative methods helps you build effective security workflows.

Why risk-based sorting works best

The default risk score takes a holistic approach by combining:

Threat (likelihood of exploitation) - Based on EPSS (Exploit Prediction Scoring System) scores or presence in CISA’s Known Exploited Vulnerabilities (KEV) catalog
Impact (potential damage) - Based on CVSS scores and severity ratings from multiple sources
Context (exploitation evidence) - Additional weight for vulnerabilities with known ransomware campaigns

This multi-factor approach aligns with security best practices recommended by the EPSS project, which emphasizes that “CVSS is a useful tool for capturing the fundamental properties of a vulnerability, but it needs to be used in combination with data-driven threat information, like EPSS.”

Risk-based sorting helps you focus on vulnerabilities that are both likely to be exploited AND have significant business impact, optimizing your remediation efficiency.

Why single-metric sorting can be misleading

While Grype offers several sorting options via the --sort-by flag, using single metrics can lead to inefficient prioritization:

Severity-only sorting (--sort-by severity) focuses solely on potential impact:

You may waste effort patching Critical severity vulnerabilities that are unlikely to ever be exploited in the wild
No consideration for whether attackers are actively targeting the vulnerability
Ignores real-world threat intelligence

EPSS-only sorting (--sort-by epss) focuses solely on exploitation likelihood:

You may prioritize vulnerabilities with high exploitation probability but low business impact
EPSS is not a risk score – it only addresses the threat component, not the complete risk picture
Missing context like asset criticality, network exposure, or available compensating controls

The EPSS documentation explicitly states that EPSS scores should be combined with severity information to make informed prioritization decisions, which is exactly what Grype’s risk score does.

Understanding EPSS in Grype

EPSS (Exploit Prediction Scoring System) is a data-driven scoring model that estimates the probability a vulnerability will be exploited in the next 30 days. Grype displays EPSS data in the table output showing both the raw score and percentile, such as 94.4% (99th), which means:

94.4% - The raw EPSS score indicating a 94.4% probability of exploitation within 30 days
99th - The percentile rank, meaning this score is higher than 99% of all EPSS scores

EPSS percentiles help normalize the heavily skewed distribution of EPSS scores, making it easier to set thresholds. For example, a vulnerability in the 90th percentile is more concerning than one in the 50th percentile, even if the raw likelihood values appear to be similar.

Grype incorporates EPSS as the threat component of its risk calculation. When a vulnerability appears in the KEV catalog, Grype automatically treats it as maximum threat (overriding EPSS) since observed exploitation is more significant than predicted exploitation.

For more details on EPSS methodology and interpretation, see the EPSS model documentation.

When to use alternative sorting methods

While risk-based sorting is recommended for most remediation workflows, alternative sorting methods serve specific use cases:

Sort by KEV status (--sort-by kev):

When you need to comply with regulatory requirements like CISA BOD 22-01
For incident response scenarios focusing on actively exploited vulnerabilities

Sort by severity (--sort-by severity):

When organizational SLAs or compliance frameworks specify severity-based remediation timeframes (e.g., “patch all Critical within 7 days”)

Sort by EPSS (--sort-by epss):

For threat landscape analysis and security research

Sort by package (--sort-by package):

When organizing remediation work by team ownership (different teams maintain different packages)
For coordinating updates across multiple instances of the same package

Sort by vulnerability ID (--sort-by vulnerability):

When tracking specific CVE campaigns across your environment
For correlating findings with external threat intelligence reports

For most security and remediation workflows, stick with the default risk-based sorting. It provides the best balance of threat intelligence and impact assessment to help you prioritize effectively.

Next steps

Continue the guide

Next: Learn how to work with the JSON results.

Additional resources:

EOL detection: Learn about end-of-life distro warnings and incomplete vulnerability data
Filter results: Use result filtering for severity thresholds and ignore rules
Supported ecosystems: Understand data source selection for different package types
Configuration: See Grype configuration reference for customizing behavior

3.2.5 - End-of-Life distro detection

Understand how Grype detects packages from end-of-life Linux distributions and why vulnerability data may be incomplete

TL;DR

Grype warns when packages come from end-of-life (EOL) distributions
EOL distros no longer receive security updates from the distribution maintainer, so vulnerability data may be incomplete
Warnings appear in console output and structured JSON alerts
Disable with alerts.enable-eol-distro-warnings: false in configuration

Linux distributions have defined support lifecycles. When a distribution reaches its end-of-life (EOL) date, the distribution maintainer stops publishing security updates, and the security feeds that Grype consumes no longer receive new vulnerability data for that version. Grype detects when packages come from EOL distributions and warns you that scan results may be incomplete.

Why EOL detection matters

When you scan an image running an EOL distribution:

No new vulnerability data - The distribution maintainer has stopped publishing security advisories for that version, so the security feeds Grype relies on no longer receive updates
Incomplete results - Grype can only report vulnerabilities that the distribution maintainer tracked before the EOL date
Hidden risks - New vulnerabilities affecting EOL packages won’t appear in scan results, because the upstream data source no longer covers them

For example, scanning Ubuntu 18.04 (EOL May 2023) won’t show vulnerabilities that the Ubuntu security team published after that date, even if those vulnerabilities affect packages in your image. This is because the Ubuntu security team no longer publishes advisories for 18.04, not because of a limitation in Grype.

Console warnings

When Grype detects packages from an EOL distribution, it prints a warning to stderr after the scan completes.

Example output

$ grype ubuntu:18.04
NAME                INSTALLED                 FIXED IN     TYPE  VULNERABILITY     SEVERITY    EPSS           RISK
libc-bin            2.27-3ubuntu1.6           (won't fix)  deb   CVE-2023-4911     High        73.0% (98th)   78.8   (kev)
libc6               2.27-3ubuntu1.6           (won't fix)  deb   CVE-2023-4911     High        73.0% (98th)   78.8   (kev)
libc-bin            2.27-3ubuntu1.6           (won't fix)  deb   CVE-2023-6246     Medium      24.3% (95th)   12.2
libc6               2.27-3ubuntu1.6           (won't fix)  deb   CVE-2023-6246     Medium      24.3% (95th)   12.2
perl-base           5.26.1-6ubuntu0.7         (won't fix)  deb   CVE-2022-48522    Low         17.3% (94th)   5.2
...

89 packages from EOL distro "ubuntu 18.04" - vulnerability data may be incomplete or outdated; consider upgrading to a supported version

Warning components

The warning includes:

Package count - Number of packages from the EOL distribution
Distribution name and version - The EOL distribution detected
Recommendation - Suggests upgrading to a supported version

JSON output

In JSON output (-o json), EOL alerts appear in the alertsByPackage array. Each entry identifies a package from an EOL distribution.

Alert format

{
  "alertsByPackage": [
    {
      "package": {
        "name": "tar",
        "version": "1.29b-2ubuntu0.4",
        "type": "deb",
        "purl": "pkg:deb/ubuntu/tar@1.29b-2ubuntu0.4?arch=arm64&distro=ubuntu-18.04"
      },
      "alerts": [
        {
          "type": "distro-eol",
          "message": "Package is from end-of-life distro: ubuntu 18.04",
          "metadata": {
            "name": "ubuntu",
            "version": "18.04"
          }
        }
      ]
    }
  ]
}

Querying EOL packages

Use jq to count packages from EOL distributions:

grype ubuntu:18.04 -o json | jq '[.alertsByPackage[] | select(.alerts[].type == "distro-eol")] | length'

This returns:

EOL tracking coverage

Grype tracks EOL dates for the following distributions: Alpine Linux, Amazon Linux, AlmaLinux, Debian, Oracle Linux, Red Hat Enterprise Linux, SUSE Linux Enterprise Server (SLES), and Ubuntu. EOL dates come from the endoflife.date project and are updated with each Grype database release.

Coverage limitations

Not all distributions that Grype supports for vulnerability matching have EOL tracking. Some distributions (like Wolfi and Chainguard) use a rolling release model without fixed EOL dates, so they don’t trigger EOL warnings.

Inspecting local database

You can inspect the EOL data in your local Grype database directly. Use grype db status to find the database path, then query the operating_systems table for eol_date values.

Configuration

EOL warnings are enabled by default. To disable them, add to your .grype.yaml:

alerts:
  enable-eol-distro-warnings: false

Or set the environment variable:

export GRYPE_ALERTS_ENABLE_EOL_DISTRO_WARNINGS=false

Note

Disabling EOL warnings hides information about incomplete scan coverage. Only disable this if you have a specific reason to ignore EOL status.

Best practices

When you see EOL warnings

When you see EOL warnings:

Prioritize upgrades - Plan migration to a supported distribution version
Understand limitations - Recognize that vulnerability counts may be artificially low
Check EOL dates - Use endoflife.date to verify support status
Monitor advisories - Subscribe to security advisories for your specific distribution

Temporary EOL distributions

For images that must remain on EOL distributions temporarily:

Apply available patches even without new vulnerability tracking
Implement additional security controls (network isolation, runtime protection)
Document the risk acceptance in your security processes

Next steps

Continue the guide

Next: Learn how to filter scan results to focus on actionable vulnerabilities.

Additional resources:

Interpret results: Learn how to understand scan output and assess match reliability
Package ecosystems: Understand data source selection for different package types
Configuration: See Grype configuration reference for all configuration options

3.2.6 - Working with JSON

Learn how to work with Grype’s native JSON format

Grype’s native JSON output format provides a comprehensive representation of vulnerability scan results, including detailed information about each vulnerability, how it was matched, and the affected packages. This guide explains the structure of the JSON output and how to interpret its contents effectively.

Windows PowerShell redirection

Windows PowerShell may write redirected output with UTF-16LE encoding. If another tool expects UTF-8 JSON, write the report with Grype’s --file option instead of >:

grype <image> -o json --file ./grype-report.json

Data shapes

The JSON output contains a top-level matches array. Each match has this structure:

{
  "matches": [
    {
      "vulnerability": { ... },
      "relatedVulnerabilities": [ ... ],
      "matchDetails": [ ... ],
      "artifact": { ... }
    }
  ]
}

Ultimately, matches are the core results of a Grype scan. Matches are composed of:

vulnerability - Primary vulnerability information
matchDetails - How Grype found the match
artifact - The package/artifact that was matched against the vulnerability

Vulnerability fields

The vulnerability object contains the primary vulnerability information:

id (string) - The vulnerability identifier (CVE, GHSA, ALAS, ELSA, etc.)
dataSource (string) - URL to the vulnerability record in the data feed
namespace (string) - The data source namespace (e.g., alpine:distro:alpine:3.10, debian:distro:debian:10, github:language:javascript, nvd:cpe)
severity (string) - Severity rating from the data source
urls (array) - Reference URLs for the vulnerability
description (string) - Human-readable vulnerability description
cvss (array) - CVSS score information from various sources
fix (object) - Fix information including available versions and fix state (fixed, not-fixed, wont-fix, unknown). See Understanding fix states for details
advisories (array) - Related security advisories (where RHSAs appear)
risk (float64) - Calculated risk score combining CVSS, EPSS, and other severity metrics

A typical vulnerability object looks like:

{
  "vulnerability": {
    "id": "CVE-2021-36159",
    "dataSource": "https://security.alpinelinux.org/vuln/CVE-2021-36159",
    "namespace": "alpine:distro:alpine:3.10",
    "severity": "Critical",
    "urls": [],
    "fix": {
      "versions": ["2.10.7-r0"],
      "state": "fixed"
    },
    "advisories": [],
    "risk": 0.92
  }
}

Match detail fields

The matchDetails array contains information about how Grype found the match. Each detail object includes:

type (string) - Match type: exact-direct-match, exact-indirect-match, or cpe-match
matcher (string) - The matcher that produced this result (e.g., apk-matcher, github-matcher, stock-matcher)
searchedBy (object) - The specific attributes used to search (package name, version, etc.)
found (object) - The specific attributes in the vulnerability data that matched
fix (object) - Fix details specific to this match (may differ from vulnerability-level fix)

Here’s what matchDetails looks like:

{
  "matchDetails": [
    {
      "type": "exact-direct-match",
      "matcher": "apk-matcher",
      "searchedBy": {
        "distro": {
          "type": "alpine",
          "version": "3.10.9"
        },
        "package": {
          "name": "apk-tools",
          "version": "2.10.6-r0"
        },
        "namespace": "alpine:distro:alpine:3.10"
      },
      "found": {
        "vulnerabilityID": "CVE-2021-36159",
        "versionConstraint": "< 2.10.7-r0 (apk)"
      }
    }
  ]
}

Understanding match types

Grype determines how it matched a package to a vulnerability based on the available data sources. The match type indicates how the match was made:

exact-direct-match means the package name matched directly in a dedicated vulnerability feed. Grype searched the feed using the package name from your scan and found a matching vulnerability entry.
exact-indirect-match means the source package name matched in a dedicated vulnerability feed. This occurs when you scan a binary package (e.g., libcrypto1.1) but the feed tracks vulnerabilities under the source package (e.g., openssl). Grype searches the feed using the source package name and maps the results to the binary package.
cpe-match means Grype used Common Platform Enumeration (CPE) matching as a fallback when no exact match was found in ecosystem-specific feeds. CPE matching relies on CPE identifiers derived from package metadata and is less precise.

You can loosely think of the match type as a proxy for confidence level in the match, where exact-direct-match has the highest confidence, followed by exact-indirect-match, and finally cpe-match.

A cpe-match means Grype used Common Platform Enumeration (CPE) matching as a fallback.

CPE matching occurs when:

No exact package match exists in ecosystem-specific feeds
Grype falls back to the NVD database
The match is based on CPE identifiers derived from package metadata

This match type has lower confidence because:

CPE matching is generic and not package-ecosystem aware
Package naming may not match CPE naming conventions exactly
Version ranges may be broader or less precise

Understanding version constraints

The found.versionConstraint field shows the version range (found on the vulnerability) which the package version was found to be within (thus, the package is affected by the vulnerability). The format indicates the constraint type and the comparison logic used:

< 1.2.3 (apk) - Alpine package version constraint using apk version comparison
< 1.2.3 (deb) - Debian package version constraint using dpkg version comparison
< 1.2.3 (rpm) - RPM package version constraint using rpm version comparison
< 1.2.3 (python) - Python package version constraint using PEP 440 comparison
< 1.2.3 (semantic) - Semantic versioning constraint using semver comparison
< 1.2.3 (unknown) - Unknown version format (lower reliability)

The constraint type tells you how Grype compared versions. Ecosystem-specific formats (apk, deb, rpm) use that ecosystem’s version comparison rules, which handle epoch numbers, release tags, and other format-specific details correctly. Generic formats like unknown may have less precise matching.

Tip

When you use filtering flags or ignore rules, filtered vulnerabilities appear in the ignoredMatches array instead of matches.

See View filtered results to learn how to inspect filtered vulnerabilities.

Filtering and querying results

Use jq to filter and analyze JSON output based on match type, severity, or data source.

Filter by match type

Show only high-confidence exact matches:

grype <image> -o json | jq '.matches[] | select(.matchDetails[0].type == "exact-direct-match")'

Exclude CPE matches:

grype <image> -o json | jq '.matches[] | select(.matchDetails[0].type != "cpe-match")'

Filter by data source

Show only matches from Alpine security data:

grype <image> -o json | jq '.matches[] | select(.vulnerability.namespace | startswith("alpine:"))'

Show only GitHub Security Advisories:

grype <image> -o json | jq '.matches[] | select(.vulnerability.namespace | startswith("github:"))'

Filter by severity

Show only Critical and High severity vulnerabilities:

grype <image> -o json | jq '.matches[] | select(.vulnerability.severity == "Critical" or .vulnerability.severity == "High")'

Combine filters

Show Critical/High severity vulnerabilities with exact matches only:

grype <image> -o json | jq '.matches[] | select(
  (.vulnerability.severity == "Critical" or .vulnerability.severity == "High") and
  (.matchDetails[0].type == "exact-direct-match" or .matchDetails[0].type == "exact-indirect-match")
)'

Count matches by type

grype <image> -o json | jq '[.matches[].matchDetails[0].type] | group_by(.) | map({type: .[0], count: length})'

Understanding a match

Each match in JSON output contains information about how Grype found the vulnerability and links to the original sources. This lets you examine what Grype looked at and verify the match yourself.

Reference URLs

The vulnerability object includes reference URLs from the vulnerability data:

grype <image> -o json | jq '.matches[].vulnerability | {id, dataSource, urls}'

dataSource - URL to the vulnerability record in Grype’s data feed
urls - Reference URLs from the original vulnerability disclosure (CVE details, vendor advisories, etc.)

These URLs point to the original vulnerability information that Grype used.

What Grype searched for

The matchDetails[].searchedBy field shows what Grype looked at when searching for vulnerabilities:

grype <image> -o json | jq '.matches[].matchDetails[].searchedBy'

For distro packages, this shows the distro, package name, and version. For CPE matches, this shows the CPE strings Grype constructed. This lets you see exactly what Grype queried.

What Grype found

The matchDetails[].found field shows what matched in the vulnerability data:

grype <image> -o json | jq '.matches[].matchDetails[] | {found, type}'

This shows the vulnerability ID and version constraint that matched, along with the match type. Comparing searchedBy and found shows how Grype connected your package to the vulnerability.

Next steps

Continue the guide

Next: Learn how to filter scan results to control which vulnerabilities Grype reports.

Additional resources:

Filter results: Use result filtering for severity thresholds and ignore rules
Supported ecosystems: Understand data source selection for different package types
Configuration: See Grype configuration reference for customizing behavior

3.2.7 - Filter scan results

Control which vulnerabilities Grype reports using filtering flags, configuration rules, and VEX documents

TL;DR

Use --fail-on <severity> to set exit code thresholds for CI/CD pipelines
Filter by fix availability with --only-fixed or --only-notfixed
Create ignore rules in .grype.yaml to exclude specific vulnerabilities or packages
Use VEX documents with --vex to filter based on exploitability information

Learn how to control which vulnerabilities Grype reports using filtering flags and configuration options.

Set failure thresholds

Use the --fail-on flag to control Grype’s exit code based on vulnerability severity. This can be helpful for integrating Grype into CI/CD pipelines.

The --fail-on flag (alias: -f) sets a severity threshold. When scanning completes, Grype exits with code 2 if it found vulnerabilities at or above the specified severity:

grype alpine:3.10 --fail-on high

You’ll see vulnerabilities at or above the threshold:

NAME          INSTALLED  FIXED IN   TYPE  VULNERABILITY   SEVERITY  EPSS           RISK
zlib          1.2.11-r1             apk   CVE-2022-37434  Critical  92.7% (99th)   87.1
libcrypto1.1  1.1.1k-r0             apk   CVE-2023-0286   High      89.1% (99th)   66.4
libssl1.1     1.1.1k-r0             apk   CVE-2023-0286   High      89.1% (99th)   66.4
...
[0026] ERROR discovered vulnerabilities at or above the severity threshold

# Exit code: 2

Valid severity values, from lowest to highest:

negligible < low < medium < high < critical

When you set a threshold, Grype fails if it finds vulnerabilities at that severity or higher. For example, --fail-on high fails on both high and critical vulnerabilities.

Filter by fix availability

Grype provides flags to filter vulnerabilities based on whether fixes are available.

Show only vulnerabilities with fixes available

The --only-fixed flag filters scan results to show only vulnerabilities that have fixes available:

grype alpine:latest --only-fixed

This flag filters out vulnerabilities with these fix states:

not-fixed - No fix is available yet
wont-fix - Maintainers won’t fix this vulnerability
unknown - No fix state information is available

This is useful when you want to focus on actionable vulnerabilities that you can remediate by updating packages.

Note

Do not use --only-fixed and --only-notfixed together. These flags are mutually exclusive and filter out all vulnerabilities.

Show only vulnerabilities without fixes available

The --only-notfixed flag filters scan results to show only vulnerabilities that do not have fixes available:

grype alpine:3.10 --only-notfixed

These vulnerabilities don’t have fixes available yet:

NAME          INSTALLED  TYPE  VULNERABILITY   SEVERITY  EPSS           RISK
zlib          1.2.11-r1  apk   CVE-2022-37434  Critical  92.7% (99th)   87.1
libcrypto1.1  1.1.1k-r0  apk   CVE-2023-0286   High      89.1% (99th)   66.4
libssl1.1     1.1.1k-r0  apk   CVE-2023-0286   High      89.1% (99th)   66.4
libcrypto1.1  1.1.1k-r0  apk   CVE-2023-2650   Medium    92.0% (99th)   52.9
libssl1.1     1.1.1k-r0  apk   CVE-2023-2650   Medium    92.0% (99th)   52.9
...

This flag filters out vulnerabilities with fix state fixed. Notice the FIXED-IN column is empty for these vulnerabilities.

This is useful when you want to identify vulnerabilities that require alternative mitigation strategies, such as:

Accepting the risk
Implementing compensating controls
Waiting for a fix to become available
Switching to a different package

Understanding fix states

Grype assigns one of four fix states to each vulnerability based on information from vulnerability data sources:

Fix State	Description
`fixed`	A fix is available for this vulnerability
`not-fixed`	No fix is available yet, but maintainers may release one
`wont-fix`	Package maintainers have decided not to fix this vulnerability
`unknown`	No fix state information is available

Vulnerabilities with no fix state information are treated as unknown. This ensures Grype handles missing data consistently.

Ignore specific fix states

The --ignore-states flag gives you fine-grained control over which fix states to filter out. You can ignore one or more fix states by specifying them as a comma-separated list:

# Ignore vulnerabilities with unknown fix states
grype alpine:3.10 --ignore-states unknown

Only vulnerabilities with known fix states appear:

NAME       INSTALLED  FIXED IN   TYPE  VULNERABILITY   SEVERITY  EPSS         RISK
apk-tools  2.10.6-r0  2.10.7-r0  apk   CVE-2021-36159  Critical  1.0% (76th)  0.9

# Ignore both wont-fix and not-fixed vulnerabilities
grype alpine:3.10 --ignore-states wont-fix,not-fixed

This leaves only fixed vulnerabilities and those with unknown states:

NAME          INSTALLED  FIXED IN   TYPE  VULNERABILITY   SEVERITY  EPSS           RISK
zlib          1.2.11-r1             apk   CVE-2022-37434  Critical  92.7% (99th)   87.1
libcrypto1.1  1.1.1k-r0             apk   CVE-2023-0286   High      89.1% (99th)   66.4
libssl1.1     1.1.1k-r0             apk   CVE-2023-0286   High      89.1% (99th)   66.4
apk-tools     2.10.6-r0  2.10.7-r0  apk   CVE-2021-36159  Critical  1.0% (76th)    0.9
...

Valid fix state values are: fixed, not-fixed, wont-fix, unknown.

If you specify an invalid fix state, Grype returns an error:

grype alpine:latest --ignore-states invalid-state
# Error: unknown fix state invalid-state was supplied for --ignore-states

Combining severity with fix filtering

You can combine --fail-on with fix state filtering to create sophisticated CI/CD policies:

# Fail only if fixable critical or high vulnerabilities exist
grype alpine:3.10 --fail-on high --only-fixed

Grype now only fails on fixable critical/high vulnerabilities:

NAME       INSTALLED  FIXED IN   TYPE  VULNERABILITY   SEVERITY  EPSS         RISK
apk-tools  2.10.6-r0  2.10.7-r0  apk   CVE-2021-36159  Critical  1.0% (76th)  0.9
[0026] ERROR discovered vulnerabilities at or above the severity threshold

# Exit code: 2

# Fail on medium or higher, but ignore wont-fix vulnerabilities
grype alpine:latest --fail-on medium --ignore-states wont-fix

The --fail-on check runs after vulnerability matching and filtering. Grype converts all filtering options (--only-fixed, --only-notfixed, --ignore-states, configuration ignore rules, and VEX documents) into ignore rules and applies them during matching. The severity threshold check then evaluates only the remaining vulnerabilities.

View filtered results

By default, Grype hides filtered vulnerabilities from output. You can view them in table output with --show-suppressed or in JSON output by inspecting the ignoredMatches field.

In table output

The --show-suppressed flag displays filtered vulnerabilities in table output with a (suppressed) label:

grype alpine:3.10 --only-fixed --show-suppressed

Filtered vulnerabilities now appear with a (suppressed) label:

NAME          INSTALLED  FIXED IN   TYPE  VULNERABILITY   SEVERITY  EPSS           RISK
apk-tools     2.10.6-r0  2.10.7-r0  apk   CVE-2021-36159  Critical  1.0% (76th)    0.9
zlib          1.2.11-r1             apk   CVE-2018-25032  High      < 0.1% (26th)  < 0.1  (suppressed)
libcrypto1.1  1.1.1k-r0             apk   CVE-2021-3711   Critical  2.7% (85th)    2.4    (suppressed)
libssl1.1     1.1.1k-r0             apk   CVE-2021-3711   Critical  2.7% (85th)    2.4    (suppressed)
libcrypto1.1  1.1.1k-r0             apk   CVE-2021-3712   High      0.5% (66th)    0.4    (suppressed)
libssl1.1     1.1.1k-r0             apk   CVE-2021-3712   High      0.5% (66th)    0.4    (suppressed)
...

Note

The --show-suppressed flag only applies to table output format. It has no effect on JSON, SARIF, or other output formats.

In JSON output

When you use JSON output (-o json), Grype places filtered vulnerabilities in the ignoredMatches array. Non-filtered vulnerabilities appear in the matches array.

For details on the complete JSON structure and all fields, see Reading JSON output.

View the structure:

grype alpine:3.10 --only-fixed -o json | jq '{matches, ignoredMatches}'

The structure separates matched from ignored vulnerabilities:

{
  "matches": [
    {
      "vulnerability": {...},
      "artifact": {...},
      ...
    }
  ],
  "ignoredMatches": [
    {
      "vulnerability": {...},
      "artifact": {...},
      ...
    },
    ...
  ]
}

Inspect a specific ignored vulnerability:

grype alpine:3.10 --only-fixed -o json | jq '.ignoredMatches[0] | {vulnerability: .vulnerability.id, package: .artifact.name, reason: .appliedIgnoreRules}'

Each ignored match shows why it was filtered:

{
  "vulnerability": "CVE-2018-25032",
  "package": "zlib",
  "reason": [
    {
      "namespace": "",
      "fix-state": "unknown"
    }
  ]
}

The appliedIgnoreRules field shows why each vulnerability was filtered.

Ignore specific vulnerabilities or packages

You can create ignore rules in your .grype.yaml configuration file to exclude specific vulnerabilities or packages from scan results.

Use ignore rules

Create a .grype.yaml file with ignore rules:

ignore:
  # Ignore specific CVEs
  - vulnerability: CVE-2008-4318
  - vulnerability: GHSA-1234-5678-90ab

  # Ignore all vulnerabilities in a package
  - package:
      name: libcurl

  # Ignore vulnerabilities in a specific version
  - package:
      name: openssl
      version: 1.1.1g

  # Ignore by package type
  - package:
      type: npm
      name: lodash

  # Ignore by package location (supports glob patterns)
  - package:
      location: "/usr/local/lib/node_modules/**"

  # Ignore by fix state
  - vulnerability: CVE-2020-1234
    fix-state: not-fixed

  # Combine multiple criteria
  - vulnerability: CVE-2008-4318
    fix-state: unknown
    package:
      name: libcurl
      version: 1.5.1

Valid fix-state values are: fixed, not-fixed, wont-fix, unknown.

When you combine multiple criteria in a rule, all criteria must match for the rule to apply.

Use VEX documents

Grype supports Vulnerability Exploitability eXchange (VEX) documents to provide information about which vulnerabilities affect your software. VEX allows you to communicate vulnerability status in a machine-readable format that follows CISA minimum requirements.

Grype supports two VEX formats as input:

OpenVEX - Compact JSON format with minimal required fields
CSAF VEX - Comprehensive format with rich advisory metadata (OASIS standard)

VEX-filtered vulnerabilities behave like other filtered results:

Table output: Hidden by default, shown with --show-suppressed flag and marked as (suppressed by VEX)
JSON output: Moved to the ignoredMatches array with VEX rules listed in appliedIgnoreRules

This guide uses OpenVEX examples for simplicity, but both formats work identically with Grype. The core concepts (status values, product identification, filtering behavior) apply to both formats.

Basic usage

Use the --vex flag to provide one or more VEX documents:

# Single VEX document
grype alpine:latest --vex vex-report.json

# Multiple VEX documents
grype alpine:latest --vex vex-1.json,vex-2.json

You can also specify VEX documents in your configuration file:

# .grype.yaml file
vex-documents:
  - vex-report.json
  - vex-findings.json

VEX status values

VEX documents use four standard status values:

Filtering statuses (automatically applied):

not_affected - Product is not affected by the vulnerability
fixed - Vulnerability has been remediated

Augmenting statuses (require explicit configuration):

affected - Product is affected by the vulnerability
under_investigation - Impact is still being assessed

By default, Grype moves vulnerabilities with not_affected or fixed status to the ignored list. Vulnerabilities with affected or under_investigation status are only added to results when you enable augmentation:

vex-add: ["affected", "under_investigation"]

Creating VEX documents with vexctl

The easiest way to create OpenVEX documents is with vexctl:

# Create a VEX statement marking a CVE as not affecting your image
vexctl create \
  --product="pkg:oci/alpine@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412" \
  --subcomponents="pkg:apk/alpine/busybox@1.37.0-r19" \
  --vuln="CVE-2024-58251" \
  --status="not_affected" \
  --justification="vulnerable_code_not_present" \
  --file="vex.json"

# Use the VEX document with Grype
grype alpine:3.22.2 --vex vex.json

Note

vexctl creates OpenVEX documents only.

For CSAF VEX, you’ll need to create documents manually or use CSAF-specific tooling. Both formats work the same way with Grype.

You can also create VEX documents manually. Here’s an OpenVEX example:

{
  "@context": "https://openvex.dev/ns/v0.2.0",
  "@id": "https://openvex.dev/docs/public/vex-07f09249682f6d9d2924be146078475538731fa0ee6a50ad3c9f33617e4a0be4",
  "author": "Alex Goodman",
  "version": 1,
  "statements": [
    {
      "vulnerability": {
        "name": "CVE-2024-58251"
      },
      "products": [
        {
          "@id": "pkg:oci/alpine@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412",
          "subcomponents": [
            {
              "@id": "pkg:apk/alpine/busybox@1.37.0-r19"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_present",
      "timestamp": "2025-11-21T20:30:11.725672Z"
    }
  ],
  "timestamp": "2025-11-21T20:30:11Z"
}

CSAF VEX documents have a more complex structure with product trees, branches, and vulnerability arrays. See the CSAF specification for complete structure details.

Justifications for not_affected

OpenVEX provides standardized justification values when marking vulnerabilities as not_affected:

component_not_present - The component is not included in the product
vulnerable_code_not_present - The vulnerable code is not present
vulnerable_code_not_in_execute_path - The vulnerable code cannot be executed
vulnerable_code_cannot_be_controlled_by_adversary - The vulnerability cannot be exploited
inline_mitigations_already_exist - Mitigations prevent exploitation

CSAF VEX uses a richer product status model with categories like known_not_affected that Grype maps to the standard VEX statuses. See the CSAF specification for details on CSAF-specific fields.

These justifications help security teams understand the rationale behind VEX statements.

Product identification

Grype matches VEX statements to scan results using several identification methods:

Container images (most reliable):

"products": [
  { "@id": "pkg:oci/alpine@sha256:124c7d2707a0ee..." }
]

Image tags (less reliable, can change):

"products": [
  { "@id": "alpine:3.17" }
]

Individual packages via PURLs:

"products": [
  {
    "@id": "pkg:oci/alpine@sha256:124c7d...",
    "subcomponents": [
      { "@id": "pkg:apk/alpine/libssl3@3.0.8-r3" }
    ]
  }
]

Use container digests for the most reliable matching, as tags can move to different images over time.

Next steps

Continue the guide

Next: Learn about the vulnerability database to understand how Grype keeps vulnerability data up to date.

Additional resources:

Interpret results: Learn how to understand scan output and assess match reliability
Configuration: See Grype configuration reference for all configuration options
Data sources: Explore vulnerability data sources for details on each feed

3.2.8 - Vulnerability Database

Using the Grype Vulnerability Database

TL;DR

Grype uses a locally cached database of known vulnerabilities
Database auto-updates on each Grype launch when newer version is available
Manage manually with grype db check and grype db update
Database published by Anchore at no cost from multiple upstream feeds

Grype uses a locally cached database of known vulnerabilities when searching a container, directory, or SBOM for security vulnerabilities. Anchore collates vulnerability data from common feeds, and publishes that data online, at no cost to users.

Learn more

Find out more about the vulnerability data sources at Vulnerability Data Sources.

Updating the local database

When Grype is launched, it checks for an existing vulnerability database, and looks for an updated one online. If available, Grype will automatically download the new database.

Database age validation

Grype will automatically fail scans if the vulnerability database is more than 5 days old.

You can disable this behavior or adjust the age threshold in your configuration:

Set db.validate-age: false to disable age validation
Adjust db.max-allowed-built-age to change the threshold (e.g., 168h for 7 days)

To update the database manually, use the following command:

grype db update

If instead, you would like to simply check if a new DB is available without actually updating, use:

grype db check

This will return 0 if the database is up to date, and 1 if an update is available.

Or, you can delete the local database entirely:

grype db delete

Searching the database

The Grype vulnerability database contains detailed information about vulnerabilities and affected packages across all supported ecosystems. While you can examine the raw SQLite database directly (use grype db status to find the local storage path), the grype db search commands provide a much easier way to explore what’s in the database.

Search tips

For both affected package and vulnerability searches, keep these tips in mind:

Result limit: By default, searches return up to 5,000 results. Use --limit 0 for unlimited results.
JSON output: Add --output json for programmatic processing of results.

Search for affected packages

Use grype db search to find packages affected by vulnerabilities. This is useful when you want to understand what packages are impacted by a specific CVE, or when you want to see all vulnerabilities affecting a particular package.

For example, to find all packages affected by Log4Shell across all ecosystems:

grype db search --vuln CVE-2021-44228

To find all vulnerable versions of the log4j package:

grype db search --pkg log4j

To search by PURL or CPE formats:

grype db search --pkg 'pkg:rpm/redhat/openssl'
grype db search --pkg 'cpe:2.3:a:jetty:jetty_http_server:*:*:*:*:*:*:*:*'

Any version value provided will be ignored entirely.

You can also use these options in combination to filter results further (finding the common intersection); in this example, finding packages named “openssl” in Alpine Linux 3.18 that have fixes available:

grype db search --pkg openssl --distro alpine-3.18 --fixed-state fixed

Search for vulnerabilities

Use grype db search vuln to look up vulnerability details directly, including descriptions, severity ratings, and data sources.

This is subtly different from searching for affected packages, as it focuses on the vulnerabilities themselves, so you can find information about vulnerabilities that may not affect any packages (there are a few reasons why this could happen.)

To view full metadata for a specific CVE:

grype db search vuln CVE-2021-44228

To filter by data provider:

grype db search vuln CVE-2021-44228 --provider nvd

Next steps

Explore more

Generate SBOMs with Syft to enable faster vulnerability scanning workflows.

Now that you understand how Grype’s vulnerability database works, here are additional resources:

Scan targets: Learn about all supported scan targets Grype can analyze
EOL detection: Understand end-of-life distro warnings and incomplete vulnerability data
Filter results: Use result filtering to focus on actionable findings
Data sources: Explore vulnerability data sources for details on each feed
License scanning: Check dependency licenses with Grant

3.3 - License Scanning

Learn how to scan container images and filesystems for software licenses covering detection, compliance checking, and managing license obligations.

License scanning is the automated process of identifying and analyzing the licenses associated with software components in your projects. This is important because most software relies on third-party and open-source components, each with its own licensing terms that dictate how the software can be used, modified, and distributed, and failing to comply can lead to legal issues.

Grant is an open-source command-line tool designed to discover and report on the software licenses present in container images, SBOM documents, or filesystems. It helps users understand the licenses of their software dependencies and can check them against user-defined policies to ensure compliance.

3.3.1 - Getting Started

Use Grant to discover and analyze software licenses in your container images, directories, or SBOMs.

What is License Scanning?

License scanning is the process of automatically identifying and analyzing the licenses associated with software components in your projects.

For developers, it helps ensure license compliance early in development and understand the legal obligations of dependencies.
For organizations, it’s essential for managing legal risk, meeting compliance requirements, and avoiding license violations.

Grant is a CLI tool for discovering and analyzing software licenses in container images, SBOM documents, and filesystems. It categorizes licenses by risk level and helps verify compliance against your policies.

Installation

Grant is provided as a single compiled executable and requires no external dependencies to run. Run the command for your platform to download the latest release.

curl -sSfL https://get.anchore.io/grant | sudo sh -s -- -b /usr/local/bin

brew install grant

Check out installation guide for full list of official and community-maintained packaging options.

Note

Grant is not currently available for Windows

Discover licenses in a container image

Run grant list against a container image. Grant will analyze the image and display a summary table of all licenses found, categorized by risk level:

grant list alpine:latest

 LICENSE              PACKAGES  RISK
 GPL-2.0-only                8  High
 MIT                         5  Low
 Apache-2.0                  2  Low
 BSD-2-Clause                1  Low
 GPL-2.0-or-later            1  High
 MPL-2.0                     1  Medium
 Zlib                        1  Low

You can also get more information with the -o json flag to output the full details in JSON format:

grant list alpine:latest -o json

Grant categorizes licenses into three risk levels:

High: Strong copyleft licenses that may require source code disclosure
Medium: Weak copyleft licenses with more limited obligations
Low: Permissive licenses with minimal restrictions

License detection modes

Grant performs two types of license detection:

SBOM-based detection: Analyzes package manifests and metadata to identify licenses associated with specific packages
File-based detection: Searches the filesystem for standalone license files (LICENSE, COPYING, etc.) that may not be associated with any specific package

Use --disable-file-search to skip file-based detection when you only want licenses that are directly associated with packages:

grant check dir:. --disable-file-search

This can be useful for faster scanning or when you only care about package-level license data.

Group licenses by risk

Use --group-by risk to see an aggregated summary of licenses by risk category:

grant list alpine:latest --group-by risk

 RISK CATEGORY    LICENSES  PACKAGES
 Strong Copyleft         2         9
 Weak Copyleft           1         1
 Permissive              4         8

This view helps you quickly assess the overall risk profile of your dependencies.

Learn more

Grant supports more than just containers. You can scan SBOM files, directories, and archives.

The target types are the same as those supported by Syft.

View packages with specific licenses

To see which packages use a particular license, add the license name (or list of names) as an argument:

grant list alpine:latest MIT

 NAME                    VERSION      LICENSE    RISK
 alpine-keys             2.5-r0       MIT        Low
 alpine-release          3.22.2-r0    MIT        Low
 ca-certificates-bundle  20250911-r0  MIT, ...   Medium (+1 more)
 musl                    1.2.5-r10    MIT        Low
 musl-utils              1.2.5-r10    BSD-2-C... High (+2 more)

This view shows the package-level detail, including package names, versions, and all licenses associated with each package.

Get detailed package information

Use --pkg with a license filter to see detailed information about a specific package:

grant list dir:. MIT --pkg "github.com/BurntSushi/toml"

Name:     github.com/BurntSushi/toml
Version:  v1.5.0
Type:     go-module
ID:       go-module:github.com/BurntSushi/toml@v1.5.0
Licenses (1):

• MIT
  OSI Approved: true | Deprecated: false

Scan an existing SBOM for licenses

Grant can also scan an SBOM instead of a container image. The simplest approach is to pipe Syft’s output directly:

syft alpine:latest -o json | grant list

Alternatively, scan an SBOM file you’ve already generated:

grant list alpine.spdx.json

Check license compliance

Use grant check to verify that licenses comply with your organization’s policies. By default, Grant uses a “deny-all” policy, flagging any licenses found:

grant check alpine:latest

This command exits with:

Exit code 0: All licenses are compliant
Exit code 1: Non-compliant licenses detected or an error occurred

Learn more

You can customize Grant’s behavior by specifying a policy file. Learn more about creating policies.

Find unlicensed packages

Use --unlicensed to identify packages that have no detected license:

grant list alpine:latest --unlicensed

Packages without licenses may indicate missing metadata or need manual investigation to determine their licensing terms.

FAQ

Does Grant need internet access?

Only for downloading container images if you’re scanning containers directly. Scanning SBOM files or local directories works completely offline.

What license data does Grant use?

Grant uses SPDX (Software Package Data Exchange) license identifiers and categorizes them based on copyleft strength and common usage patterns.

Can I use Grant in CI/CD pipelines?

Absolutely! Grant is designed for automation. Use grant check to fail builds when non-compliant licenses are detected.

What data does Grant send externally?

Nothing. Grant runs entirely locally and doesn’t send any data to external services.

Next steps

Continue the guide

Next: Learn about how to enforce licnes compliance with Policies.

Now that you’ve scanned for licenses, here are additional resources:

Configure policies: Run grant config to generate a sample configuration file with allowed licenses and packages to ignore
Scan for vulnerabilities: Use Grype to find security issues in your containers
Generate SBOMs: Learn about SBOM generation with Syft for comprehensive software analysis

3.3.2 - Policies

Configure license compliance policies to automatically enforce allowed licenses and flag violations in your software supply chain.

Grant policies let you define which licenses are acceptable in your projects and automatically flag violations when running grant check.

Default behavior:

Deny all licenses except those explicitly permitted in the allow list
Deny packages without licenses when require-license is true (the default)
Allow non-SPDX licenses when require-known-license is false (the default)

You customize this behavior by specifying allowed licenses and other options in a configuration file.

Grant categorizes licenses by risk level based on their copyleft strength:

Risk	License type	Examples	Implication
High	Strong copyleft	GPL-3.0, AGPL-3.0	May require source disclosure
Medium	Weak copyleft	LGPL-2.1, MPL-2.0	Obligations for modifications
Low	Permissive	MIT, Apache-2.0, BSD	Attribution only

License types affect how software can be used, modified, and distributed. Understanding these categories helps you create effective compliance policies:

Strong copyleft (also called “reciprocal” or “restrictive”) licenses require that derivative works are distributed under the same license. Any modifications or software that incorporates the code must have its source code made available.
Weak copyleft licenses balance permissive and restrictive terms. They allow linking to open source libraries with limited obligations, making them practical for library code.
Permissive licenses have minimal restrictions on how you can modify or redistribute software. They typically only require you to retain copyright notices and attribution.

Create a policy file

Grant searches for configuration in this order:

File specified with -c or --config flag
Current directory: grant.yaml, .grant.yaml
XDG config: ~/.config/grant/grant.yaml
Home directory: ~/.grant.yaml

If no configuration is found, Grant uses a deny-all default.

Policy options

Option	Type	Default	Description
`allow`	`string[]`	`[]`	License patterns to permit
`ignore-packages`	`string[]`	`[]`	Package patterns to skip
`require-license`	`bool`	`true`	Deny packages with no license
`require-known-license`	`bool`	`false`	Deny non-SPDX licenses

`allow`

Specifies which licenses pass compliance checks. Supports glob patterns with * as a wildcard. Matching is case-sensitive.

allow:
  - MIT # Exact match
  - Apache-* # Matches Apache-1.0, Apache-1.1, Apache-2.0
  - BSD-*-Clause # Matches BSD-2-Clause, BSD-3-Clause
  - CC0-* # Matches CC0-1.0

A package passes if any of its licenses matches the allow list. With an empty allow list, all licenses are denied.

`ignore-packages`

Skips license evaluation for specific packages. Use this for internal packages or known exceptions you’ve reviewed. Supports glob patterns with *:

ignore-packages:
  - "internal-*" # Packages starting with internal-
  - "legacy-component" # Exact match

Ignored packages appear with status “ignore” in output and don’t affect the exit code.

`require-license`

When true (the default), packages with no detected license are denied. This catches packages with missing metadata that may need investigation.

require-license: true

Set to false if you want to allow packages without license information.

`require-known-license`

When true, only SPDX-recognized license identifiers pass. Custom or unrecognized license strings are denied.

require-known-license: true

This catches packages with unusual license declarations like “See LICENSE file” or custom proprietary licenses that need review.

Example policies

Permissive-only for commercial software

For a SaaS product where you want to avoid any copyleft obligations:

# .grant.yaml
allow:
  - MIT
  - Apache-2.0
  - BSD-2-Clause
  - BSD-3-Clause
  - ISC
  - 0BSD
  - Unlicense
  - CC0-1.0

require-license: true
require-known-license: true # Catch unexpected license strings

This policy ensures all dependencies use permissive licenses with no source disclosure requirements.

Internal tooling with exceptions

For internal tools that aren’t distributed, you can allow weak copyleft and ignore internal packages:

# .grant.yaml
allow:
  # Permissive
  - MIT
  - Apache-2.0
  - BSD-*-Clause
  - ISC

  # Weak copyleft (OK for internal use)
  - LGPL-*
  - MPL-2.0
  - EPL-*

ignore-packages:
  - "github.com/yourcompany/*"
  - "@yourorg/*"

require-license: true

Next steps

Getting Started - Basic Grant usage
Configuration Reference - Full Grant CLI options
Open Source Licenses - License details and OSI approval status
Choose a License - License comparison and selection guide

3.4 - Private Registries

Configure authentication for scanning container images from private registries using credentials, registry tokens, and credential helpers.

The Anchore OSS tools analyze container images from private registries using multiple authentication methods. When a container runtime isn’t available, the tools use the go-containerregistry library to handle authentication directly with registries.

When using a container runtime explicitly (for instance, with the --from docker flag) the tools defer to the runtime’s authentication mechanisms. However, if the registry source is used, the tools use the Docker configuration file and any configured credential helpers to authenticate with the registry.

Registry tokens and personal access tokens

Many registries support personal access tokens (PATs) or registry tokens for authentication. Use docker login with your token, then the tools can use the cached credentials:

# GitHub Container Registry - create token at https://github.com/settings/tokens (needs read:packages scope)
docker login ghcr.io -u <username> -p <token>
syft ghcr.io/username/private-image:latest

# GitLab Container Registry - use deploy token or personal access token
docker login registry.gitlab.com -u <username> -p <token>
syft registry.gitlab.com/group/project/image:latest

The tools read credentials from ~/.docker/config.json, the same file Docker uses when you run docker login. This file can contain either basic authentication credentials or credential helper configurations.

Here are examples of what the config looks like if you are crafting it manually:

Basic authentication example:

{
  "auths": {
    "registry.example.com": {
      "username": "AzureDiamond",
      "password": "hunter2"
    }
  }
}

Token authentication example:

// token auth, where credentials are base64-encoded
{
  "auths": {
    "ghcr.io": {
      "auth": "dXNlcm5hb...m5h=="
    }
  }
}

Security Warning

Storing plaintext passwords in config.json is insecure. Use credential helpers where possible.

By default, the tools look for credentials in ~/.docker/config.json. You can override this location using the DOCKER_CONFIG environment variable:

export DOCKER_CONFIG=/path/to/custom/config
syft registry.example.com/private/image:latest

You can also use this in a container:

docker run -v ./config.json:/auth/config.json -e "DOCKER_CONFIG=/auth" anchore/syft:latest <private_image>

Docker credential helpers

Docker credential helpers are specialized programs that securely store and retrieve registry credentials. They’re particularly useful for cloud provider registries that use dynamic, short-lived tokens.

Instead of storing passwords as plaintext in config.json, you configure helpers that generate credentials on-demand. This is facilitated by the google/go-containerregistry library.

Configuring credential helpers

Add credential helpers to your config.json:

{
  "credHelpers": {
    // using the docker-credential-gcr for Google Container Registry and Artifact Registry
    "gcr.io": "gcr",
    "us-docker.pkg.dev": "gcloud",

    // using the amazon-ecr-credential-helper for AWS Elastic Container Registry
    "123456789012.dkr.ecr.us-west-2.amazonaws.com": "ecr-login",

    // using the docker-credential-acr for Azure Container Registry
    "myregistry.azurecr.io": "acr"
  }
}

When the tools access these registries, they execute the corresponding helper program (for example, docker-credential-gcr, or more generically docker-credential-NAME where NAME is the config value) to obtain credentials.

Note

If both credHelpers and auths are configured for the same registry, credHelpers takes precedence.

For more information about Docker credential helpers for various cloud providers:

Within Kubernetes

When running the tools in Kubernetes and you need access to private registries, mount Docker credentials as a secret.

Create secret

Create a Kubernetes secret containing your Docker credentials. The key config.json is important—it becomes the filename when mounted into the pod. For more information about the credential file format, see the go-containerregistry config docs.

# secret.yaml
apiVersion: v1
kind: Secret
metadata:
  name: registry-config
  namespace: syft
data:
  config.json: <base64-encoded-config.json>

Create the secret:

# Base64 encode your config.json
cat ~/.docker/config.json | base64

# Apply the secret
kubectl apply -f secret.yaml

Configure pod

Configure your pod to use the credential secret. The DOCKER_CONFIG environment variable tells the tools where to look for credentials. Setting DOCKER_CONFIG=/config means the tools look for credentials at /config/config.json. This matches the secret key config.json we created above—when Kubernetes mounts secrets, each key becomes a file with that name.

The volumeMounts section mounts the secret to /config, and the volumes section references the secret created in the previous step.

# pod.yaml
apiVersion: v1
kind: Pod
metadata:
  name: syft-k8s-usage
spec:
  containers:
    - image: anchore/syft:latest
      name: syft-private-registry-demo
      env:
        - name: DOCKER_CONFIG
          value: /config
      volumeMounts:
        - mountPath: /config
          name: registry-config
          readOnly: true
      args:
        - <private-image>
  volumes:
    - name: registry-config
      secret:
        secretName: registry-config

Apply and check logs:

kubectl apply -f pod.yaml
kubectl logs syft-private-registry-demo

4 - Capabilities

Summary of package analysis and vulnerability scanning capabilities across ecosystems

Capabilities describe the cross-cutting features available across Anchore’s tools:

Package analysis: What Syft can catalog from package manifests, lock files, and installed packages
Vulnerability scanning: What Grype can detect using vulnerability databases and matching rules

These capabilities are ecosystem-specific. For example, Python’s capabilities differ from Go’s, and Ubuntu’s capabilities differ from Alpine’s.

Default capabilities do not require to be online or have special configuration (other than having a vulnerability DB downloaded). Some capabilities may be conditionally supported, requiring additional configuration or online access to function.

Show me the data!

This page explains how to interpret the capabilities tables found on each ecosystem-specific capability pages.

There are separate overviews of supported package ecosystems as well as supported Operating Systems.

Vulnerability scanning capabilities

Vulnerability data source qualities vary in the information they provide and how to interpret them correctly.

Disclosure and fix information

In terms of disclosures and fixes, each data source can be described along the following dimensions:

Independent Disclosure: Whether the advisory discloses the vulnerability regardless of fix availability. Sources with this capability report vulnerabilities even when no fix is available yet.
Disclosure Date: Whether the data source provides the date when a vulnerability was first publicly disclosed. This helps you understand the timeline of vulnerability exposure.
Fix Versions: Whether the data source specifies which package versions contain fixes for a vulnerability. This allows Grype to determine if an installed package version is vulnerable or fixed.
Fix Date: Whether the advisory includes a date when the fix was made available. This helps you understand the timeline of vulnerability remediation.

Track by source package

Some ecosystems have parent packages where the source code for the current package is maintained. For example, the libcrypto for debian is part of the larger openssl package (where openssl is denoted as the origin package). The same is true for redhat-based packages, except the parent package is denoted as the srcrpm package.

Ecosystems like this have vulnerabilities are often disclosed and fixed at the parent package level (origin and srcrpm). More critically, the parent packages are often not installed on the system, making it impossible to directly detect vulnerabilities against them. There tends to be package metadata on the downstream package that denotes the parent package name and version, which Syft can extract during package analysis.

Package analysis capabilities

Dependencies

We describe Syft’s ability to capture dependency information in the following dimentions:

Depth: How far into the true dependency graph we are able to discover package nodes.
- direct: only captures dependencies explicitly declared by the project, but not necessarily dependencies of those dependencies
- transitive: all possible depths of dependencies are captured
Edges: Whether we are able to capture relationships between packages, and if so, describe the topology of those relationships.
- flat: we can capture the root package relative to all other dependencies, but are unaware of relationships between dependencies (a simple star topology, where all dependencies point to the root package)
- complete: all possible relationships between packages are captured (the full dependency graph)
Kinds: The types of dependencies we are able to capture.
- runtime: dependencies required for the package to function at runtime
- dev: dependencies required for development

Licenses

Indicates whether Syft can detect and catalog license information from package metadata. When supported, Syft extracts license declarations from package manifests, metadata files, or installed package databases.

Package manager features

Syft can extract various package manager metadata beyond basic package information:

Files: Whether Syft can catalog the list of files that are part of a package installation. This provides visibility into all files installed by the package manager.
Digests: Whether Syft can capture file checksums (digests/hashes) for individual files within a package. This enables integrity verification of installed files. Note: this is not necessarily the actual hash of the file, but instead the claims made by the package manager about those files. We capture actual file hashes in the files section of the SBOM.
Integrity Hash: Whether Syft can capture a single package-level integrity hash used by package managers to verify the package archive itself (for example, the https://go.dev/ref/mod#go-sum-files for go packages).

Next steps

Explore capabilities for specific ecosystems using the navigation menu
Learn about Supported ecosystems for package analysis
Learn about Supported operating systems
Learn details about all supported data sources

4.1 - Supported operating systems

A high-level summary of which OS’s are supported

Syft and Grype support several operating systems for package cataloging and vulnerability detection. The table below shows which OS versions are supported and where Grype’s vulnerability data comes from.

Operating System	Supported Versions	Vunnel Provider	Data Source
AlmaLinux	`8`, `9`, `10`	`alma`	AlmaLinux OSV Database
Alpine Linux	`3.2+`, `edge`	`alpine`	Alpine SecDB
Amazon Linux	`2`, `2022`, `2023`	`amazon`	Amazon Linux Security Center
Arch Linux	`rolling`	`arch`	arch
Azure Linux	`3.0`	`mariner`	Microsoft CBL-Mariner OVAL
CentOS	`5`, `6`, `7`, `8`	`rhel`	Red Hat Security Data API
Chainguard OS	`rolling`	`chainguard`	Chainguard Security
Debian	`7` (wheezy), `8` (jessie), `9` (stretch), `10` (buster), `11` (bullseye), `12` (bookworm), `13` (trixie), `14`, `unstable`	`debian`	Debian Security Tracker
Echo OS	`rolling`	`echo`	ECHO Security
Fedora	`5`, `6`, `7`, `8`, `9`, `21`, `22`, `23`, `24`, `25`, `26`, `27`, `28`, `29`, `30`, `31`, `32`, `33`, `34`, `35`, `36`, `37`, `38`, `39`, `40`, `41`, `42`, `43`, `44`, `45`	`fedora`	fedora
CBL-Mariner	`1.0`, `2.0`	`mariner`	Microsoft CBL-Mariner OVAL
MinimOS	`rolling`	`minimos`	MINIMOS Security
Oracle Linux	`5`, `6`, `7`, `8`, `9`, `10`	`oracle`	Oracle Linux Security
Photon OS	`1.0`, `2.0`, `3.0`, `4.0`, `5.0`	`photon`	photon
Raspberry Pi OS	`7` (wheezy), `8` (jessie), `9` (stretch), `10` (buster), `11` (bullseye), `12` (bookworm), `13` (trixie), `14`, `unstable`	`debian`	Debian Security Tracker
Red Hat Enterprise Linux	`5`, `6`, `7`, `8`, `9`, `10` EUS: `5.9`, `6.4+`, `7`, `8.1`, `8.2`, `8.4`, `8.6`, `8.8`, `9`	`rhel`	Red Hat Security Data API
Rocky Linux	`5`, `6`, `7`, `8`, `9`, `10`	`rhel`	Red Hat Security Data API
Secureos	`rolling`	`secureos`	secureos
SUSE Linux Enterprise Server	`11`, `12`, `15`	`sles`	SUSE Security OVAL
Ubuntu	`12.04` (precise), `12.10` (quantal), `13.04` (raring), `14.04` (trusty), `14.10` (utopic), `15.04` (vivid), `15.10` (wily), `16.04` (xenial), `16.10` (yakkety), `17.04` (zesty), `17.10` (artful), `18.04` (bionic), `18.10` (cosmic), `19.04` (disco), `19.10` (eoan), `20.04` (focal), `20.10` (groovy), `21.04` (hirsute), `21.10` (impish), `22.04` (jammy), `22.10` (kinetic), `23.04` (lunar), `23.10` (mantic), `24.04` (noble), `24.10` (oracular), `25.04` (plucky), `25.10`	`ubuntu`	Ubuntu CVE Tracker
Wolfi	`rolling`	`wolfi`	Wolfi Security

4.2 - Supported package ecosystems

A high-level summary of all package detection capabilities across ecosystems

The table below shows which ecosystems support package analysis and vulnerability scanning.

What do these columns mean?

For a detailed explanation of the columns in the table, please see the Capabilities overview.

Ecosystem	Cataloger + Evidence	Licenses	Dependencies	Files
Ai	gguf-cataloger `*.gguf`
Ai	safetensors-cataloger `*.safetensors`
Alpine Linux `pkg:apk`	apk-db-cataloger `lib/apk/db/installed`
Apple	apple-app-bundle-cataloger `*.app/Contents/Info.plist`
Arch Linux `pkg:alpm`	alpm-db-cataloger `var/lib/pacman/local/**/desc`
Binary `pkg:apk` `pkg:rpm`	binary-classifier-cataloger arangodb-binary`arangosh` auditbeat-binary`auditbeat` bash-binary`bash` bun-binary`bun` busybox-binary`busybox` chrome-binary`chrome` consul-binary`consul` curl-binary`curl` dart-binary`dart` deno-binary`deno` elastic-agent-binary`elastic-agent` elixir-binary`elixir` elixir-library`elixir/ebin/elixir.app` envoy-binary`envoy` erlang-alpine-binary`beam.smp` erlang-binary`erlexec` erlang-library`liberts_internal.a` ffmpeg-binary`ffmpeg` ffmpeg-library`libav`, `libswresample` filebeat-binary`filebeat` firefox-binary`{firefox,firefox.exe}` fluent-bit-binary`fluent-bit` gcc-binary`gcc` go-binary`{go,go.exe}` grafana-binary`grafana`, `grafana-server` gzip-binary`gzip` haproxy-binary`haproxy` hashicorp-vault-binary`vault` haskell-cabal-binary`cabal` haskell-ghc-binary`ghc` haskell-stack-binary`stack` heartbeat-binary`heartbeat` heimdal-krb5-library`libkrb5.so` helm`helm` httpd-binary`httpd` ingress-nginx-binary`nginx-ingress-controller` istio-binary`pilot-agent`, `pilot-discovery` java-binary`java` java-jdb-binary`jdb` jq-binary`jq` julia-binary`julia`, `libjulia-internal.so` krb5-library`libkrb5.so` lighttpd-binary`lighttpd` mariadb-binary`{mariadb,mysql}` memcached-binary`memcached` metricbeat-binary`metricbeat` mongodb-binary`mongod` mysql-binary`mysql` mysqld-binary`mysqld` mysqld-mysql-cluster-legacy-binary`mysqld` ndb_mgmd-binary`ndb_mgmd` ndbd-binary`ndbd` ndbmtd-binary`ndbmtd` nginx-binary`nginx` nodejs-binary`node` openldap-search-binary`ldapsearch` openssl-binary`openssl` packetbeat-binary`packetbeat` perl-binary`perl` php-composer-binary`composer` postgresql-binary`postgres` proftpd-binary`proftpd` pypy-binary-lib`libpypy.so` python-binary`python` python-binary-lib`libpython.so` qt-qtbase-lib`libQtCore.so` redis-binary`redis-server` ruby-binary`ruby` rust-standard-library-linux`libstd-.so` rust-standard-library-macos`libstd-*.dylib` sqlcipher-binary`sqlcipher` swipl-binary`swipl` traefik-binary`traefik` util-linux-binary`getopt` valkey-binary`valkey-server` wordpress-cli-binary`wp` xtrabackup-binary`xtrabackup` xz-binary`xz` zstd-binary`zstd`
	elf-binary-package-cataloger `application/x-executable`, `application/x-mach-binary`, `application/x-elf`, `application/x-sharedlib`, `application/vnd.microsoft.portable-executable` (mimetype)
	pe-binary-package-cataloger `.DLL`, `.EXE`, `.BPL`, `.dll`, `.exe`, `.bpl`
Bitnami `pkg:bitnami`	bitnami-cataloger `/opt/bitnami/.bitnami_components.json`
Bitnami `pkg:bitnami`	bitnami-cataloger `/opt/bitnami/*/.spdx-.spdx`
C/C++ `pkg:conan` `pkg:vcpkg`	conan-cataloger `conan.lock`
	conan-cataloger `conanfile.txt`
	conan-info-cataloger `conaninfo.txt`
	vcpkg-manifest-cataloger `vcpkg.json`
Conda `pkg:generic`	conda-meta-cataloger `conda-meta/*.json`
Dart `pkg:pub`	dart-pubspec-cataloger `pubspec.yml`, `pubspec.yaml`
Dart `pkg:pub`	dart-pubspec-lock-cataloger `pubspec.lock`
Debian `pkg:deb`	deb-archive-cataloger `*.deb`
Debian `pkg:deb`	dpkg-db-cataloger `lib/dpkg/status`, `lib/dpkg/status.d/`, `lib/opkg/info/.control`, `lib/opkg/status`
Elixir `pkg:hex`	elixir-mix-lock-cataloger `mix.lock`
Erlang `pkg:hex` `pkg:otp`	erlang-otp-application-cataloger `*.app`
Erlang `pkg:hex` `pkg:otp`	erlang-rebar-lock-cataloger `rebar.lock`
Gentoo `pkg:portage`	portage-cataloger `var/db/pkg///CONTENTS`
GitHub Actions `pkg:github`	github-action-workflow-usage-cataloger `.github/workflows/.yaml`, `.github/workflows/.yml`
	github-actions-usage-cataloger `.github/actions//action.yml`, `.github/actions//action.yaml`
	github-actions-usage-cataloger `.github/workflows/.yaml`, `.github/workflows/.yml`
Go `pkg:golang`	go-module-binary-cataloger `application/x-executable`, `application/x-mach-binary`, `application/x-elf`, `application/x-sharedlib`, `application/vnd.microsoft.portable-executable`, `application/x-executable` (mimetype)
Go `pkg:golang`	go-module-file-cataloger `go.mod`
Haskell `pkg:hackage`	haskell-cataloger `cabal.project.freeze`
	haskell-cataloger `stack.yaml.lock`
	haskell-cataloger `stack.yaml`
Homebrew `pkg:homebrew`	homebrew-cataloger `Cellar///.brew/.rb`, `Library/Taps///Formula/.rb`
Java `pkg:maven`	graalvm-native-image-cataloger `application/x-executable`, `application/x-mach-binary`, `application/x-elf`, `application/x-sharedlib`, `application/vnd.microsoft.portable-executable` (mimetype)
	java-archive-cataloger `.jar`, `.war`, `.ear`, `.par`, `.sar`, `.nar`, `.jpi`, `.hpi`, `.kar`, `.lpkg`
	java-archive-cataloger `*.zip`
	java-archive-cataloger `.tar`, `.tar.gz`, `.tgz`, `.tar.bz`, `.tar.bz2`, `.tbz`, `.tbz2`, `.tar.br`, `.tbr`, `.tar.lz4`, `.tlz4`, `.tar.sz`, `.tsz`, `.tar.xz`, `.txz`, `.tar.zst`, `.tzst`, `.tar.zstd`, `*.tzstd`
	java-gradle-lockfile-cataloger `gradle.lockfile*`
	java-jvm-cataloger `release`
	java-pom-cataloger `*pom.xml`
JavaScript `pkg:npm`	javascript-lock-cataloger `deno.lock`
	javascript-lock-cataloger `bun.lock`
	javascript-lock-cataloger `pnpm-lock.yaml`
	javascript-lock-cataloger `yarn.lock`
	javascript-lock-cataloger `package-lock.json`
	javascript-package-cataloger `package.json`
Linux `pkg:generic` `pkg:generic/linux-kernel`	linux-kernel-cataloger `kernel`, `kernel-`, `vmlinux`, `vmlinux-`, `vmlinuz`, `vmlinuz-`, `bzImage`, `bzImage-`, `zImage`, `zImage-`, `lib/modules//.ko`, `lib/modules/*/.ko.gz`, `lib/modules/*/.ko.xz`, `lib/modules/*/.ko.zst`
Lua `pkg:luarocks`	lua-rock-cataloger `*.rockspec`
.NET `pkg:npm` `pkg:nuget`	dotnet-deps-binary-cataloger `.deps.json`, `.dll`, `.exe`, `.bpl`, `.DLL`, `.EXE`, `*.BPL`
	dotnet-deps-cataloger deprecated `*.deps.json`
	dotnet-packages-lock-cataloger `packages.lock.json`
	dotnet-portable-executable-cataloger deprecated `.dll`, `.exe`, `.bpl`, `.DLL`, `.EXE`, `.BPL`
Nix `pkg:nix`	nix-cataloger `nix/var/nix/db/db.sqlite`, `nix/store/`, `nix/store/.drv`
Nix `pkg:nix`	nix-store-cataloger deprecated `nix/store/`, `nix/store/.drv`
OCaml `pkg:opam`	opam-cataloger `*opam`
Perl `pkg:cpan`	perl-cpan-installed-cataloger `auto/**/.packlist`
	perl-cpan-installed-cataloger `.meta/*/install.json`
	perl-cpan-meta-cataloger `META.json`, `META.yml`
PHP `pkg:composer` `pkg:pear`	php-composer-installed-cataloger `installed.json`
	php-composer-lock-cataloger `composer.lock`
	php-interpreter-cataloger `php`, `php/*/.so`, `php-fpm`, `apache/*/libphp.so`
	php-pear-serialized-cataloger `php/.registry/*/.reg`
	php-pecl-serialized-cataloger deprecated `php/.registry/.channel./.reg`
Prolog `pkg:swiplpack`	swipl-pack-cataloger `pack.pl`
Python `pkg:pypi`	python-installed-package-cataloger `.egg-info`, `dist-info/METADATA`, `egg-info/PKG-INFO`, `DIST-INFO/METADATA`, `*EGG-INFO/PKG-INFO`
	python-package-cataloger `pdm.lock`
	python-package-cataloger `uv.lock`, `*.py.lock`
	python-package-cataloger `setup.py`
	python-package-cataloger `Pipfile.lock`
	python-package-cataloger `poetry.lock`
	python-package-cataloger `requirements.txt`
R `pkg:cran`	r-package-cataloger `DESCRIPTION`
RPM-based Linux `pkg:rpm`	rpm-archive-cataloger `*.rpm`
	rpm-db-cataloger `var/lib/rpmmanifest/container-manifest-2`
	rpm-db-cataloger `{var/lib,usr/share,usr/lib/sysimage}/rpm/{Packages,Packages.db,rpmdb.sqlite}`
Ruby `pkg:gem`	ruby-gemfile-cataloger `Gemfile.lock`, `Gemfile.next.lock`
	ruby-gemspec-cataloger `*.gemspec`
	ruby-installed-gemspec-cataloger `specifications/*/.gemspec`
Rust `pkg:cargo`	cargo-auditable-binary-cataloger `application/x-executable`, `application/x-mach-binary`, `application/x-elf`, `application/x-sharedlib`, `application/vnd.microsoft.portable-executable`, `application/x-executable` (mimetype)
Rust `pkg:cargo`	rust-cargo-lock-cataloger `Cargo.lock`
SBOM `pkg:apk`	sbom-cataloger `.syft.json`, `.bom.`, `.bom`, `bom`, `.sbom.`, `.sbom`, `sbom`, `.cdx.`, `.cdx`, `.spdx.`, `*.spdx`
Snap `pkg:deb`	snap-cataloger `snap/snapcraft.yaml`
	snap-cataloger `snap/manifest.yaml`
	snap-cataloger `doc/linux-modules-*/changelog.Debian.gz`
	snap-cataloger `usr/share/snappy/dpkg.yaml`
Swift `pkg:cocoapods` `pkg:swift`	cocoapods-cataloger `Podfile.lock`
Swift `pkg:cocoapods` `pkg:swift`	swift-package-manager-cataloger `Package.resolved`, `.package.resolved`
Terraform `pkg:terraform`	terraform-lock-cataloger `.terraform.lock.hcl`
WordPress `pkg:wordpress-plugin`	wordpress-plugins-cataloger `wp-content/plugins//.php`

Legend:

: Supported by default
: Conditionally supported (requires configuration)
(empty) : Not supported

4.3 - ALPM

ALPM package format used by Arch-based Linux distributions

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
alpm-db-cataloger `var/lib/pacman/local/**/desc`	`pkg:alpm`		Transitive	Complete	Runtime

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
arch

Operating systems

Operating System	Supported Versions	Provider	Data Source
Arch Linux	`rolling`	`arch`	arch

Contributing

Interested in contributing vulnerability scanning support?

Feel free to add a new vunnel provider for Arch-based distributions. See the existing issue in the Vunnel repository.

Next steps

4.4 - AI

AI model analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
gguf-cataloger `*.gguf`
safetensors-cataloger `*.safetensors`

Vulnerability scanning

Unsupported at this time.

Next steps

4.5 - APK

APK package format analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
apk-db-cataloger `lib/apk/db/installed`	`pkg:apk`		Transitive	Complete	Runtime

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
Alpine SecDB
National Vulnerability Database (NVD)
Chainguard Security
MINIMOS Security
Wolfi Security

The APK vulnerability matcher searches all data sources for upstream packages, including NVD.

Operating systems

Operating System	Supported Versions	Provider	Data Source
Alpine Linux	`3.2+`, `edge`	`alpine`	Alpine SecDB
Chainguard OS	`rolling`	`chainguard`	Chainguard Security
MinimOS	`rolling`	`minimos`	MINIMOS Security
Wolfi	`rolling`	`wolfi`	Wolfi Security

The APK vulnerability database (a.k.a. “SecDB”) includes data from the Alpine Security Tracker, which provides fix information for known vulnerabilities that affect Alpine Linux packages. This database only includes vulnerabilities that have fixes available and does not track unfixed vulnerabilities. The maintainers of the SecDB intend for the primary source of truth for disclosures to be the National Vulnerability Database (NVD).

This is true of other APK vulnerability data sources as well (such as Chainguard, Wolfi, and MinimOS).

Next steps

4.6 - Binary

Binary package analysis and vulnerability scanning capabilities

File analysis

Within the .files[].executable sections of the Syft JSON there is an analysis of what features and claims were found within a binary file.

This includes:

Imported libraries (use of shared libraries)
Exported symbols
Security features (like NX, PIE, RELRO, etc)

Security features that can be detected include:

if debugging symbols have been stripped
presence of Stack Canaries to protect against stack smashing (which lead to buffer overflows)
NoExecute (NX) bit support to prevent execution of code on the stack or heap
Relocation Read-Only (RelRO) to protect the Global Offset Table (GOT) from being overwritten (can be “partial” or “full”)
Position Independent Executable (PIE) support such that offsets are used instead of absolute addresses
if it is a Dynamic Shared Object (DSO) (not a security feature, but important for analysis)
LLVM SafeStack partitioning is in use, which separates unsafe stack objects from safe stack objects to mitigate stack-based memory corruption vulnerabilities
LLVM Control Flow Integrity (CFI) is in use, which adds runtime checks to ensure that indirect function calls only target valid functions, helping to prevent control-flow hijacking attacks
Clang Fortified Builds is enabled, which adds additional runtime checks for certain standard library functions to detect buffer overflows and other memory errors

When it comes to shared library requirement claims and exported symbol claims, these are used by Syft to:

associate file-to-file relationships (in the case of executables/shared libraries being distributed without a package manager)
associate file-to-package relationships (when an executable imports a shared library that is managed by a package manager)

Syft can synthesize a dependency graph from the imported libraries and exported symbols found within a set of binaries, even if all package manager information has been removed, allowing for a more complete SBOM to be generated. In a mixed case, where there are some packages managed by package managers and some binaries without package manager metadata, Syft can still use the binary analysis to fill in the gaps. Package-level relationships are preferred over file-level relationships when both are available, which simplifies the dependency graph.

Package analysis

ELF package notes

Syft is capable of looking at ELF formatted binaries, specifically the .note.package note, that are formatted using the convention established by the systemd project. This spec requires a PE/COFF section that wraps a json payload describing the package metadata for the binary, however, syft does not require the PE/COFF wrapping and can extract the json payload directly from the ELF note.

Here’s an example of what the json payload looks like:

{
  "name": "my-application",
  "version": "1.2.3",
  "purl": "pkg:deb/debian/my-application@1.2.3?arch=amd64&distro=debian-12",
  "cpe": "cpe:2.3:a:vendor:my-application:1.2.3:*:*:*:*:*:*:*",
  "license": "Apache-2.0",
  "type": "deb"
}

Which, if stored in payload.json, can be injected into an existing ELF binary using the following command:

objcopy --add-section .note.package=payload.json --set-section-flags .note.package=noload,readonly

Known patterns

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
binary-classifier-cataloger (see table below)
elf-binary-package-cataloger `application/x-executable`, `application/x-mach-binary`, `application/x-elf`, `application/x-sharedlib`, `application/vnd.microsoft.portable-executable` (mimetype)	`pkg:apk` `pkg:rpm`
pe-binary-package-cataloger `.DLL`, `.EXE`, `.BPL`, `.dll`, `.exe`, `.bpl`

Binary Package Details

Class	Files	PURL	CPEs
arangodb-binary	`arangosh`	`pkg:generic/arangodb`	`cpe:2.3:a:arangodb:arangodb::::::::`
auditbeat-binary	`auditbeat`	`pkg:generic/auditbeat`	`cpe:2.3:a:elastic:auditbeat::::::::`
bash-binary	`bash`	`pkg:generic/bash`	`cpe:2.3:a:gnu:bash::::::::`
bun-binary	`bun`	`pkg:generic/bun`	`cpe:2.3:a:oven-sh:bun::::::::`
busybox-binary	`busybox`	`pkg:generic/busybox`	`cpe:2.3:a:busybox:busybox::::::::`
chrome-binary	`chrome`	`pkg:generic/chrome`	`cpe:2.3:a:google:chrome::::::::`
consul-binary	`consul`	`pkg:golang/github.com/hashicorp/consul`	`cpe:2.3:a:hashicorp:consul::::::::`
curl-binary	`curl`	`pkg:generic/curl`	`cpe:2.3:a:haxx:curl::::::::`
dart-binary	`dart`	`pkg:generic/dart`	`cpe:2.3:a:dart:dart_software_development_kit::::::::`
deno-binary	`deno`	`pkg:generic/deno`	`cpe:2.3:a:deno:deno::::::::`
elastic-agent-binary	`elastic-agent`	`pkg:generic/elastic-agent`	`cpe:2.3:a:elastic:elastic_agent::::::::`
elixir-binary	`elixir`	`pkg:generic/elixir`	`cpe:2.3:a:elixir-lang:elixir::::::::`
elixir-library	`elixir/ebin/elixir.app`	`pkg:generic/elixir`	`cpe:2.3:a:elixir-lang:elixir::::::::`
envoy-binary	`envoy`	`pkg:generic/envoy`	`cpe:2.3:a:envoyproxy:envoy::::::::`
erlang-alpine-binary	`beam.smp`	`pkg:generic/erlang`	`cpe:2.3:a:erlang:erlang/otp::::::::`
erlang-binary	`erlexec`	`pkg:generic/erlang`	`cpe:2.3:a:erlang:erlang/otp::::::::`
erlang-library	`liberts_internal.a`	`pkg:generic/erlang`	`cpe:2.3:a:erlang:erlang/otp::::::::`
ffmpeg-binary	`ffmpeg`	`pkg:generic/ffmpeg`	`cpe:2.3:a:ffmpeg:ffmpeg::::::::`
ffmpeg-library	`libav*`	`pkg:generic/ffmpeg`	`cpe:2.3:a:ffmpeg:ffmpeg::::::::`
ffmpeg-library	`libswresample*`	`pkg:generic/ffmpeg`	`cpe:2.3:a:ffmpeg:ffmpeg::::::::`
filebeat-binary	`filebeat`	`pkg:generic/filebeat`	`cpe:2.3:a:elastic:filebeat::::::::`
firefox-binary	`{firefox,firefox.exe}`	`pkg:generic/firefox`	`cpe:2.3:a:mozilla:firefox::::::::`
fluent-bit-binary	`fluent-bit`	`pkg:github/fluent/fluent-bit`	`cpe:2.3:a:treasuredata:fluent_bit::::::::`
gcc-binary	`gcc`	`pkg:generic/gcc`	`cpe:2.3:a:gnu:gcc::::::::`
go-binary	`{go,go.exe}`	`pkg:generic/go`	`cpe:2.3:a:golang:go::::::::`
grafana-binary	`grafana`	`pkg:generic/grafana`	`cpe:2.3:a:grafana:grafana::::::::`
grafana-binary	`grafana-server`	`pkg:generic/grafana`	`cpe:2.3:a:grafana:grafana::::::::`
gzip-binary	`gzip`	`pkg:generic/gzip`	`cpe:2.3:a:gnu:gzip::::::::`
haproxy-binary	`haproxy`	`pkg:generic/haproxy`	`cpe:2.3:a:haproxy:haproxy::::::::`
hashicorp-vault-binary	`vault`	`pkg:golang/github.com/hashicorp/vault`	`cpe:2.3:a:hashicorp:vault::::::::`
haskell-cabal-binary	`cabal`	`pkg:generic/haskell/cabal`	`cpe:2.3:a:haskell:cabal::::::::`
haskell-ghc-binary	`ghc*`	`pkg:generic/haskell/ghc`	`cpe:2.3:a:haskell:ghc::::::::`
haskell-stack-binary	`stack`	`pkg:generic/haskell/stack`	`cpe:2.3:a:haskell:stack::::::::`
heartbeat-binary	`heartbeat`	`pkg:generic/heartbeat`	`cpe:2.3:a:elastic:heartbeat::::::::`
heimdal-krb5-library	`libkrb5.so*`	`pkg:generic/heimdal-krb5`	`cpe:2.3:a:heimdal_project:heimdal::::::::`
helm	`helm`	`pkg:golang/helm.sh/helm`	`cpe:2.3:a:helm:helm::::::::`
httpd-binary	`httpd`	`pkg:generic/httpd`	`cpe:2.3:a:apache:http_server::::::::`
ingress-nginx-binary	`nginx-ingress-controller`	`pkg:generic/nginx-ingress-controller`	`cpe:2.3:a:kubernetes:ingress-nginx::::::::`
istio-binary	`pilot-discovery`	`pkg:generic/istio`	`cpe:2.3:a:istio:istio::::::::`
istio-binary	`pilot-agent`	`pkg:generic/istio`	`cpe:2.3:a:istio:istio::::::::`
java-binary	`java`	`pkg:generic/oracle/graalvm` `pkg:generic/azul/zulu` `pkg:generic/oracle/openjdk` `pkg:generic/oracle/openjdk` `pkg:generic/ibm/java` `pkg:generic/oracle/jre` `pkg:generic/oracle/jre`	`cpe:2.3:a:oracle:graalvm::::::::` `cpe:2.3:a:azul:zulu::::::::` `cpe:2.3:a:oracle:openjdk:{{.primary}}:update{{.update}}::::::` `cpe:2.3:a:oracle:openjdk::::::::` `cpe:2.3:a:ibm:java::::::::` `cpe:2.3:a:oracle:jre::::::::` `cpe:2.3:a:oracle:jre::::::::`
java-jdb-binary	`jdb`	`pkg:generic/oracle/graalvm` `pkg:generic/azul/zulu` `pkg:generic/oracle/openjdk` `pkg:generic/ibm/java_sdk` `pkg:generic/oracle/openjdk` `pkg:generic/oracle/jdk`	`cpe:2.3:a:oracle:graalvm_for_jdk::::::::` `cpe:2.3:a:azul:zulu::::::::` `cpe:2.3:a:oracle:openjdk::::::::` `cpe:2.3:a:ibm:java_sdk::::::::` `cpe:2.3:a:oracle:openjdk::::::::` `cpe:2.3:a:oracle:jdk::::::::`
jq-binary	`jq`	`pkg:generic/jq`	`cpe:2.3:a:jqlang:jq::::::::`
julia-binary	`libjulia-internal.so`	`pkg:generic/julia`	`cpe:2.3:a:julialang:julia::::::::`
julia-binary	`julia`	`pkg:generic/julia`	`cpe:2.3:a:julialang:julia::::::::`
krb5-library	`libkrb5.so*`	`pkg:generic/krb5`	`cpe:2.3:a:mit:kerberos_5::::::::`
lighttpd-binary	`lighttpd`	`pkg:generic/lighttpd`	`cpe:2.3:a:lighttpd:lighttpd::::::::`
mariadb-binary	`{mariadb,mysql}`	`pkg:generic/mariadb`	`cpe:2.3:a:mariadb:mariadb::::::::`
memcached-binary	`memcached`	`pkg:generic/memcached`	`cpe:2.3:a:memcached:memcached::::::::`
metricbeat-binary	`metricbeat`	`pkg:generic/metricbeat`	`cpe:2.3:a:elastic:metricbeat::::::::`
mongodb-binary	`mongod`	`pkg:generic/mongodb`	`cpe:2.3:a:mongodb:mongodb::::::::`
mysql-binary	`mysql`	`pkg:generic/mysql`	`cpe:2.3:a:oracle:mysql::::::::`
mysql-binary	`mysql`	`pkg:generic/percona-server`	`cpe:2.3:a:oracle:mysql::::::::` `cpe:2.3:a:percona:percona_server::::::::`
mysql-binary	`mysql`	`pkg:generic/percona-xtradb-cluster`	`cpe:2.3:a:oracle:mysql::::::::` `cpe:2.3:a:percona:percona_server::::::::` `cpe:2.3:a:percona:xtradb_cluster::::::::`
mysqld-binary	`mysqld`	`pkg:generic/mysql-cluster` `pkg:generic/mysql-cluster` `pkg:generic/mysql-server`	`cpe:2.3:a:oracle:mysql_cluster::::::::` `cpe:2.3:a:oracle:mysql::::::::` `cpe:2.3:a:oracle:mysql_server::::::::` `cpe:2.3:a:oracle:mysql_cluster::::::::` `cpe:2.3:a:oracle:mysql::::::::` `cpe:2.3:a:oracle:mysql_server::::::::`
mysqld-mysql-cluster-legacy-binary	`mysqld`	`pkg:generic/mysql-server`	`cpe:2.3:a:oracle:mysql::::::::` `cpe:2.3:a:oracle:mysql_server::::::::`
ndb_mgmd-binary	`ndb_mgmd`	`pkg:generic/mysql-cluster`	`cpe:2.3:a:oracle:mysql_cluster::::::::`
ndbd-binary	`ndbd`	`pkg:generic/mysql-cluster`	`cpe:2.3:a:oracle:mysql_cluster::::::::`
ndbmtd-binary	`ndbmtd`	`pkg:generic/mysql-cluster`	`cpe:2.3:a:oracle:mysql_cluster::::::::`
nginx-binary	`nginx`	`pkg:generic/nginx`	`cpe:2.3:a:f5:nginx::::::::` `cpe:2.3:a:nginx:nginx::::::::`
nodejs-binary	`node`	`pkg:generic/node`	`cpe:2.3:a:nodejs:node.js::::::::`
openldap-search-binary	`ldapsearch`	`pkg:generic/openldap`	`cpe:2.3:a:openldap:openldap::::::::`
openssl-binary	`openssl`	`pkg:generic/aws-lc` `pkg:generic/openssl`	`cpe:2.3:a:amazon:aws_libcrypto::::::::` `cpe:2.3:a:openssl:openssl::::::::`
packetbeat-binary	`packetbeat`	`pkg:generic/packetbeat`	`cpe:2.3:a:elastic:packetbeat::::::::`
perl-binary	`perl`	`pkg:cpan/perl`	`cpe:2.3:a:perl:perl::::::::`
php-composer-binary	`composer*`	`pkg:generic/composer`	`cpe:2.3:a:getcomposer:composer::::::::`
postgresql-binary	`postgres`	`pkg:generic/postgresql`	`cpe:2.3:a:postgresql:postgresql::::::::`
proftpd-binary	`proftpd`	`pkg:generic/proftpd`	`cpe:2.3:a:proftpd:proftpd::::::::`
pypy-binary-lib	`libpypy.so`	`pkg:generic/pypy`	-
python-binary	`python*`	`pkg:generic/python`	`cpe:2.3:a:python_software_foundation:python::::::::` `cpe:2.3:a:python:python::::::::`
python-binary-lib	`libpython.so`	`pkg:generic/python`	`cpe:2.3:a:python_software_foundation:python::::::::` `cpe:2.3:a:python:python::::::::`
qt-qtbase-lib	`libQtCore.so`	`pkg:generic/qtbase`	`cpe:2.3:a:qt:qt::::::::` `cpe:2.3:a:qt:qtbase::::::::`
redis-binary	`redis-server`	`pkg:generic/redis`	`cpe:2.3:a:redislabs:redis::::::::` `cpe:2.3:a:redis:redis::::::::`
ruby-binary	`ruby`	`pkg:generic/ruby`	`cpe:2.3:a:ruby-lang:ruby::::::::`
rust-standard-library-linux	`libstd-*.so`	`pkg:generic/rust`	`cpe:2.3:a:rust-lang:rust::::::::`
rust-standard-library-macos	`libstd-*.dylib`	`pkg:generic/rust`	`cpe:2.3:a:rust-lang:rust::::::::`
sqlcipher-binary	`sqlcipher`	`pkg:generic/sqlcipher`	`cpe:2.3:a:zetetic:sqlcipher::::::::`
swipl-binary	`swipl`	`pkg:generic/swipl`	`cpe:2.3:a:erlang:erlang/otp::::::::`
traefik-binary	`traefik`	`pkg:generic/traefik`	`cpe:2.3:a:traefik:traefik::::::::`
util-linux-binary	`getopt`	`pkg:generic/util-linux`	`cpe:2.3:a:kernel:util-linux::::::::`
valkey-binary	`valkey-server`	`pkg:generic/valkey`	`cpe:2.3:a:lfprojects:valkey::::::::` `cpe:2.3:a:linuxfoundation:valkey::::::::` `cpe:2.3:a:valkey-io:valkey::::::::`
wordpress-cli-binary	`wp`	`pkg:generic/wp-cli`	`cpe:2.3:a:wp-cli:wp-cli::::::::`
xtrabackup-binary	`xtrabackup`	`pkg:generic/percona-xtrabackup`	`cpe:2.3:a:percona:xtrabackup::::::::`
xz-binary	`xz`	`pkg:generic/xz`	`cpe:2.3:a:tukaani:xz::::::::`
zstd-binary	`zstd`	`pkg:generic/zstd`	`cpe:2.3:a:facebook:zstandard::::::::`

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.7 - Bitnami

Bitnami package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
bitnami-cataloger `/opt/bitnami/.bitnami_components.json`	`pkg:bitnami`
bitnami-cataloger `/opt/bitnami/*/.spdx-.spdx`	`pkg:bitnami`		Transitive	Complete	Runtime

Since all package data is gathered from SPDX SBOMs, the quality of the package analysis is dependent on the quality of the provided SBOMs.

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
Bitnami Vulnerability Database

Next steps

4.8 - Conda

Conda package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
conda-meta-cataloger `conda-meta/*.json`	`pkg:generic`		Direct		Runtime

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.9 - C/C++

C/C++ package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
conan-cataloger `conan.lock`	`pkg:conan`		Transitive		Runtime, Build
conan-cataloger `conanfile.txt`	`pkg:conan`		Direct		Runtime
conan-info-cataloger `conaninfo.txt`	`pkg:conan`		Direct	Flat	Runtime
vcpkg-manifest-cataloger `vcpkg.json`	`pkg:vcpkg`		Transitive	Complete	Runtime

We support package detection for v1 and v2 formatted conan.lock files.

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.10 - Dart

Dart package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
dart-pubspec-cataloger `pubspec.yml`, `pubspec.yaml`	`pkg:pub`		Direct		Runtime
dart-pubspec-lock-cataloger `pubspec.lock`	`pkg:pub`		Transitive		Runtime, Dev

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.11 - DPKG

Debian package format used by Debian-based Linux distributions

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
deb-archive-cataloger `*.deb`	`pkg:deb`
dpkg-db-cataloger `lib/dpkg/status`, `lib/dpkg/status.d/`, `lib/opkg/info/.control`, `lib/opkg/status`	`pkg:deb`		Transitive	Complete	Runtime

There is additional functionality for:

the detection of OpenWrt’s OPKG packages
the detection of Google Distroless image debian-based packages

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
Debian Security Tracker (DSA, DLA)
ECHO Security
Ubuntu CVE Tracker (USN)

Operating systems

Operating System	Supported Versions	Provider	Data Source
Debian	`7` (wheezy), `8` (jessie), `9` (stretch), `10` (buster), `11` (bullseye), `12` (bookworm), `13` (trixie), `14`, `unstable`	`debian`	Debian Security Tracker
Echo OS	`rolling`	`echo`	ECHO Security
Raspberry Pi OS	`7` (wheezy), `8` (jessie), `9` (stretch), `10` (buster), `11` (bullseye), `12` (bookworm), `13` (trixie), `14`, `unstable`	`debian`	Debian Security Tracker
Ubuntu	`12.04` (precise), `12.10` (quantal), `13.04` (raring), `14.04` (trusty), `14.10` (utopic), `15.04` (vivid), `15.10` (wily), `16.04` (xenial), `16.10` (yakkety), `17.04` (zesty), `17.10` (artful), `18.04` (bionic), `18.10` (cosmic), `19.04` (disco), `19.10` (eoan), `20.04` (focal), `20.10` (groovy), `21.04` (hirsute), `21.10` (impish), `22.04` (jammy), `22.10` (kinetic), `23.04` (lunar), `23.10` (mantic), `24.04` (noble), `24.10` (oracular), `25.04` (plucky), `25.10`	`ubuntu`	Ubuntu CVE Tracker

Next steps

4.12 - .NET

.NET package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
dotnet-deps-binary-cataloger `.deps.json`, `.dll`, `.exe`, `.bpl`, `.DLL`, `.EXE`, `*.BPL`	`pkg:npm` `pkg:nuget`		Transitive	Complete	Runtime
dotnet-deps-cataloger deprecated `*.deps.json`	`pkg:nuget`		Transitive	Complete	Runtime
dotnet-packages-lock-cataloger `packages.lock.json`	`pkg:nuget`		Transitive	Complete	Runtime, Dev, Build
dotnet-portable-executable-cataloger deprecated `.dll`, `.exe`, `.bpl`, `.DLL`, `.EXE`, `.BPL`	`pkg:nuget`

Syft Configuration

Configuration Key	Description
`dotnet.dep-packages-must-claim-dll`	Allows for deps.json packages to be included only if there is a runtime/resource DLL claimed in the deps.json targets section. This does not require such claimed DLLs to exist on disk. The behavior of this
`dotnet.dep-packages-must-have-dll`	Allows for deps.json packages to be included only if there is a DLL on disk for that package.
`dotnet.exclude-project-references`	Excludes packages with type "project" from deps.json output. These are internal project references, not external NuGet packages.
`dotnet.propagate-dll-claims-to-parents`	Allows for deps.json packages to be included if any child (transitive) package claims a DLL. This applies to both the claims configuration and evidence-on-disk configurations.
`dotnet.relax-dll-claims-when-bundling-detected`	Will look for indications of IL bundle tooling via deps.json package names and, if found (and this config option is enabled), will relax the DepPackagesMustClaimDLL value to `false` only in those cases.

When scanning a .NET application evidence from deps.json (compiler output) as well as any built binaries are used together to identify packages. This way we can enrich missing data from any one source and synthesize a more complete and accurate package graph.

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
GitHub Security Advisories (GHSA)
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.dotnet.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.13 - Elixir

Elixir package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
elixir-mix-lock-cataloger `mix.lock`	`pkg:hex`		Transitive		Runtime, Dev

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.14 - Erlang

Erlang package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
erlang-otp-application-cataloger `*.app`	`pkg:otp`		Direct		Runtime, Dev
erlang-rebar-lock-cataloger `rebar.lock`	`pkg:hex`		Transitive		Runtime, Dev

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.15 - GitHub Actions

GitHub Actions package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
github-action-workflow-usage-cataloger `.github/workflows/.yaml`, `.github/workflows/.yml`	`pkg:github`
github-actions-usage-cataloger `.github/actions//action.yml`, `.github/actions//action.yaml`	`pkg:github`
github-actions-usage-cataloger `.github/workflows/.yaml`, `.github/workflows/.yml`	`pkg:github`

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
GitHub Security Advisories (GHSA)

Next steps

4.16 - Go

Go package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
go-module-binary-cataloger `application/x-executable`, `application/x-mach-binary`, `application/x-elf`, `application/x-sharedlib`, `application/vnd.microsoft.portable-executable`, `application/x-executable` (mimetype)	`pkg:golang`		Transitive	Flat	Runtime, Dev
go-module-file-cataloger `go.mod`	`pkg:golang`		Transitive	Flat	Runtime, Dev

Syft Configuration

Configuration Key	Description
`golang.capture-symbols`	Controls extracting function symbols from the binary symbol table (pclntab). Valid values are "none" (disabled), "stdlib" (only the synthetic stdlib package), "extended-stdlib" (stdlib plus every module under golang.org/x/), and "all" (all module packages plus stdlib).
`golang.capture-symbols-modules`	Is a list of glob patterns (doublestar syntax, where ** crosses path separators and * does not) matched against go module paths. Matching modules get symbols in addition to whatever CaptureSymbols selects, so this can only widen the selection and never narrow it. It has no effect under the "none" scope. A trailing major version suffix is not part of a module's identity, so a pattern matches with or without it: both "github.com/foo/bar" and "github.com/foo/*" select "github.com/foo/bar/v2". A pattern that spells out a suffix selects only that major version.
`golang.local-mod-cache-dir`	Specifies the location of the local go module cache directory. When not set, syft will attempt to discover the GOPATH env or default to $HOME/go.
`golang.local-vendor-dir`	Specifies the location of the local vendor directory. When not set, syft will search for a vendor directory relative to the go.mod file.
`golang.no-proxy`	Is a list of glob patterns that match go module names that should not be fetched from the go proxy. When not set, syft will use the GOPRIVATE and GONOPROXY env vars.
`golang.proxy`	Is a list of go module proxies to use when fetching go module metadata and licenses. When not set, syft will use the GOPROXY env or default to https://proxy.golang.org,direct.
`golang.search-local-mod-cache-licenses`	Enables searching for go package licenses in the local GOPATH mod cache.
`golang.search-local-vendor-licenses`	Enables searching for go package licenses in the local vendor directory relative to the go.mod file.
`golang.search-remote-licenses`	Enables downloading go package licenses from the upstream go proxy (typically proxy.golang.org).

Version detection for binaries

When Syft scans a Go binary, the main module often has version (devel) because Go doesn’t embed version information by default. Syft attempts to detect the actual version using three strategies (configurable via golang.main-module-version.*):

From ldflags (enabled by default): Looks for version strings passed during build like -ldflags="-X main.version=v1.2.3". Supports common patterns: *.version=, *.gitTag=, *.release=, etc.
From build settings (enabled by default): Uses VCS metadata (commit hash and timestamp) embedded by Go 1.18+ to generate a pseudo-version like v0.0.0-20230101120000-abcdef123456.
From contents (disabled by default): Scans binary contents for version string patterns. Can produce false positives.

Best practice: Use -ldflags when building to embed your version explicitly.

Example:

go build -ldflags="-X main.version=v1.2.3"

This ensures Syft (and Grype) can accurately identify your application version for vulnerability matching.

Standard library

Syft automatically creates a stdlib package for each Go binary, representing the Go standard library version used to compile it. The version is extracted from the binary’s build metadata (e.g., go1.22.2). This enables Grype to check for vulnerabilities reported against the go standard library.

Why this matters: Vulnerabilities in the Go compiler (like CVEs affecting the crypto library or net/http) can affect your application even if your code doesn’t directly use those packages.

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
GitHub Security Advisories (GHSA)
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.golang.using-cpes`	Use CPE package identifiers to find vulnerabilities
`match.golang.always-use-cpe-for-stdlib`	use CPE matching to find vulnerabilities for the Go standard library
`match.golang.allow-main-module-pseudo-version-comparison`	allow comparison between main module pseudo-versions (e.g. v0.0.0-20240413-2b432cf643...)

Main module filtering

Grype skips vulnerability matching for packages that match all these conditions:

Package name equals the main module name (from the SBOM metadata)
Package version is unreliable:
- When allow-main-module-pseudo-version-comparison is false (default): version starts with v0.0.0- or is (devel)
- When allow-main-module-pseudo-version-comparison is true: version is (devel) only

This filtering exists because Go doesn’t have a standard way to embed the main module’s version into compiled binaries (see golang/go#50603). Pseudo-versions in compiled binaries are often unreliable for vulnerability matching.

You can disable this filtering with the allow-main-module-pseudo-version-comparison configuration option.

Troubleshooting

No vulnerabilities found for main module

Cause: The main module has a pseudo-version (v0.0.0-*) or (devel), which Grype filters by default.

Solution: Enable pseudo-version matching in your Grype configuration:

match:
  golang:
    allow-main-module-pseudo-version-comparison: true

Note

This may produce false positives. Use properly versioned builds when possible.

No vulnerabilities found for stdlib

Possible causes:

Missing CPEs: Verify Syft generates CPEs with generate-cpes: true in .syft.yaml
CPE matching disabled: Ensure always-use-cpe-for-stdlib: true in Grype config (default)
Incorrect version format: Stdlib version should be go1.18.3, not v1.18.3 (file a Syft bug if incorrect)

Next steps

4.17 - Haskell

Haskell package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
haskell-cataloger `cabal.project.freeze`	`pkg:hackage`		Transitive		Runtime, Dev
haskell-cataloger `stack.yaml.lock`	`pkg:hackage`		Transitive		Runtime, Dev
haskell-cataloger `stack.yaml`	`pkg:hackage`		Direct		Runtime, Dev

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.18 - Homebrew

Homebrew package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
homebrew-cataloger `Cellar///.brew/.rb`, `Library/Taps///Formula/.rb`	`pkg:homebrew`

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.19 - Java

Java package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
graalvm-native-image-cataloger `application/x-executable`, `application/x-mach-binary`, `application/x-elf`, `application/x-sharedlib`, `application/vnd.microsoft.portable-executable` (mimetype)			Transitive	Complete	Runtime, Dev
java-archive-cataloger `.jar`, `.war`, `.ear`, `.par`, `.sar`, `.nar`, `.jpi`, `.hpi`, `.kar`, `.lpkg`	`pkg:maven`		Transitive	Complete	Runtime, Dev
java-archive-cataloger `*.zip`	`pkg:maven`		Transitive	Complete	Runtime, Dev
java-archive-cataloger `.tar`, `.tar.gz`, `.tgz`, `.tar.bz`, `.tar.bz2`, `.tbz`, `.tbz2`, `.tar.br`, `.tbr`, `.tar.lz4`, `.tlz4`, `.tar.sz`, `.tsz`, `.tar.xz`, `.txz`, `.tar.zst`, `.tzst`, `.tar.zstd`, `*.tzstd`	`pkg:maven`		Transitive	Complete	Runtime, Dev
java-gradle-lockfile-cataloger `gradle.lockfile*`	`pkg:maven`		Transitive		Runtime, Dev
java-jvm-cataloger `release`
java-pom-cataloger `*pom.xml`	`pkg:maven`		Direct	Complete	Runtime, Dev

Syft Configuration

Configuration Key	Description
`java.maven-local-repository-dir`	Specifies the location of the local maven repository. When not set, defaults to `~/.m2/repository`.
`java.maven-url`	Specifies the base URL(s) to use for fetching POMs and metadata from maven central or other repositories. When not set, defaults to `https://repo1.maven.org/maven2`.
`java.max-parent-recursive-depth`	Limits how many parent POMs will be fetched recursively before stopping. This prevents fetching excessively deep parent graphs.
`java.resolve-transitive-dependencies`	Enables resolving transitive dependencies for java packages found within archives.
`java.use-maven-local-repository`	Enables searching the local maven repository (`~/.m2/repository` by default) for parent POMs and other metadata.
`java.use-network`	Enables network operations for java package metadata enrichment, such as fetching parent POMs and license information.

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
GitHub Security Advisories (GHSA)
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.java.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.20 - JavaScript

JavaScript package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
javascript-lock-cataloger `deno.lock`	`pkg:npm`		Transitive		Runtime
javascript-lock-cataloger `bun.lock`	`pkg:npm`		Transitive		Runtime, Dev
javascript-lock-cataloger `pnpm-lock.yaml`	`pkg:npm`		Transitive		Runtime
javascript-lock-cataloger `yarn.lock`	`pkg:npm`		Transitive		Runtime, Dev
javascript-lock-cataloger `package-lock.json`	`pkg:npm`		Transitive		Runtime, Dev
javascript-package-cataloger `package.json`	`pkg:npm`		Direct		Runtime, Dev

Syft Configuration

Configuration Key	Description
`javascript.include-dev-dependencies`	Controls whether development dependencies should be included in the catalog results, in addition to production dependencies.
`javascript.npm-base-url`	Specifies the base URL for the NPM registry API used when searching for remote license information.
`javascript.search-remote-licenses`	Enables querying the NPM registry API to retrieve license information for packages that are missing license data in their local metadata.

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
GitHub Security Advisories (GHSA)
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.javascript.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.21 - Linux Kernel

Linux kernel archive and module analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
linux-kernel-cataloger `kernel`, `kernel-`, `vmlinux`, `vmlinux-`, `vmlinuz`, `vmlinuz-`, `bzImage`, `bzImage-`, `zImage`, `zImage-`, `lib/modules//.ko`, `lib/modules/*/.ko.gz`, `lib/modules/*/.ko.xz`, `lib/modules/*/.ko.zst`	`pkg:generic` `pkg:generic/linux-kernel`

Syft Configuration

Configuration Key	Description
`linux-kernel.catalog-modules`	Enables cataloging linux kernel modules (`.ko` and compressed `.ko.gz`, `.ko.xz`, `.ko.zst` files) in addition to the kernel itself.

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.22 - Lua

Lua package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
lua-rock-cataloger `*.rockspec`	`pkg:luarocks`

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.23 - Nix

Nix package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
nix-cataloger `nix/var/nix/db/db.sqlite`, `nix/store/`, `nix/store/.drv`	`pkg:nix`		Transitive	Complete	Runtime
nix-store-cataloger deprecated `nix/store/`, `nix/store/.drv`	`pkg:nix`		Transitive	Complete	Runtime

Syft Configuration

Configuration Key	Description
`nix.capture-owned-files`	Determines whether to record the list of files owned by each Nix package discovered in the store. Recording owned files provides more detailed information but increases processing time and memory usage.

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.24 - OCaml

OCaml package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
opam-cataloger `*opam`	`pkg:opam`

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.25 - PHP

PHP package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
php-composer-installed-cataloger `installed.json`	`pkg:composer`		Transitive		Runtime, Dev
php-composer-lock-cataloger `composer.lock`	`pkg:composer`		Transitive		Runtime
php-interpreter-cataloger `php`, `php/*/.so`, `php-fpm`, `apache/*/libphp.so`			Direct	Flat	Runtime
php-pear-serialized-cataloger `php/.registry/*/.reg`	`pkg:pear`		Direct		Runtime
php-pecl-serialized-cataloger deprecated `php/.registry/.channel./.reg`	`pkg:pear`		Direct		Runtime

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.26 - Portage

Portage package format used by Gentoo-based Linux distributions

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
portage-cataloger `var/db/pkg///CONTENTS`	`pkg:portage`

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Operating systems

Operating System	Supported Versions	Provider	Data Source
Gentoo Linux	minimal support (CPE-based)	`nvd`	National Vulnerability Database (NVD)

Next steps

4.27 - Prolog

Prolog package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
swipl-pack-cataloger `pack.pl`	`pkg:swiplpack`

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.28 - Python

Python package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
python-installed-package-cataloger `.egg-info`, `dist-info/METADATA`, `egg-info/PKG-INFO`, `DIST-INFO/METADATA`, `*EGG-INFO/PKG-INFO`	`pkg:pypi`		Direct	Complete	Runtime
python-package-cataloger `pdm.lock`	`pkg:pypi`		Transitive	Complete	Runtime, Dev, Optional
python-package-cataloger `uv.lock`, `*.py.lock`	`pkg:pypi`		Transitive	Complete	Runtime, Dev, Optional
python-package-cataloger `setup.py`	`pkg:pypi`		Direct		Any
python-package-cataloger `Pipfile.lock`	`pkg:pypi`		Transitive		Runtime
python-package-cataloger `poetry.lock`	`pkg:pypi`		Transitive	Complete	Runtime, Dev, Optional
python-package-cataloger `requirements.txt`	`pkg:pypi`		Direct		Any

Syft Configuration

Configuration Key	Description
`python.guess-unpinned-requirements`	Attempts to infer package versions from version constraints when no explicit version is specified in requirements files.
`python.pypi-base-url`	Specifies the base URL for the Pypi registry API used when searching for remote license information.
`python.search-remote-licenses`	Enables querying the PyPI registry API to retrieve license information for packages that are missing license data in their local metadata.

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
GitHub Security Advisories (GHSA)
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.python.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.29 - R

R package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
r-package-cataloger `DESCRIPTION`	`pkg:cran`

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.30 - RPM

Red Hat Package Manager format used by Red Hat-based Linux distributions

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
rpm-archive-cataloger `*.rpm`	`pkg:rpm`
rpm-db-cataloger `var/lib/rpmmanifest/container-manifest-2`	`pkg:rpm`		Transitive		Runtime
rpm-db-cataloger `{var/lib,usr/share,usr/lib/sysimage}/rpm/{Packages,Packages.db,rpmdb.sqlite}`	`pkg:rpm`		Transitive	Complete	Runtime

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
AlmaLinux OSV Database (ALSA)
Amazon Linux Security Center (ALAS)
Microsoft AzureLinux OVAL
Red Hat Security Data API (RHSA)
fedora
Microsoft CBL-Mariner OVAL
National Vulnerability Database (NVD)
Oracle Linux Security (ELSA)
photon
SUSE Security OVAL (SUSE-SU)

Operating systems

Operating System	Supported Versions	Provider	Data Source
AlmaLinux	`8`, `9`, `10`	`alma`	AlmaLinux OSV Database
Amazon Linux	`2`, `2022`, `2023`	`amazon`	Amazon Linux Security Center
Azure Linux	`3.0`	`mariner`	Microsoft CBL-Mariner OVAL
CentOS	`5`, `6`, `7`, `8`	`rhel`	Red Hat Security Data API
Fedora	`5`, `6`, `7`, `8`, `9`, `21`, `22`, `23`, `24`, `25`, `26`, `27`, `28`, `29`, `30`, `31`, `32`, `33`, `34`, `35`, `36`, `37`, `38`, `39`, `40`, `41`, `42`, `43`, `44`, `45`	`fedora`	fedora
CBL-Mariner	`1.0`, `2.0`	`mariner`	Microsoft CBL-Mariner OVAL
OpenSUSE Leap	minimal support (CPE-based)	`nvd`	National Vulnerability Database (NVD)
Oracle Linux	`5`, `6`, `7`, `8`, `9`, `10`	`oracle`	Oracle Linux Security
Photon OS	`1.0`, `2.0`, `3.0`, `4.0`, `5.0`	`photon`	photon
Red Hat Enterprise Linux	`5`, `6`, `7`, `8`, `9`, `10` EUS: `5.9`, `6.4+`, `7`, `8.1`, `8.2`, `8.4`, `8.6`, `8.8`, `9`	`rhel`	Red Hat Security Data API
Rocky Linux	`5`, `6`, `7`, `8`, `9`, `10`	`rhel`	Red Hat Security Data API
SUSE Linux Enterprise Server	`11`, `12`, `15`	`sles`	SUSE Security OVAL

Next steps

4.31 - Ruby

Ruby package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
ruby-gemfile-cataloger `Gemfile.lock`, `Gemfile.next.lock`	`pkg:gem`		Transitive		Runtime, Dev
ruby-gemspec-cataloger `*.gemspec`	`pkg:gem`
ruby-installed-gemspec-cataloger `specifications/*/.gemspec`	`pkg:gem`		Transitive		Runtime

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
GitHub Security Advisories (GHSA)
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.ruby.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.32 - Rust

Rust package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
cargo-auditable-binary-cataloger `application/x-executable`, `application/x-mach-binary`, `application/x-elf`, `application/x-sharedlib`, `application/vnd.microsoft.portable-executable`, `application/x-executable` (mimetype)	`pkg:cargo`		Transitive	Complete	Runtime
rust-cargo-lock-cataloger `Cargo.lock`	`pkg:cargo`		Transitive	Complete	Runtime, Dev, Build

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
GitHub Security Advisories (GHSA)
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.rust.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.33 - SBOM

SBOM package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
sbom-cataloger `.syft.json`, `.bom.`, `.bom`, `bom`, `.sbom.`, `.sbom`, `sbom`, `.cdx.`, `.cdx`, `.spdx.`, `*.spdx`	`pkg:apk`

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.34 - Snap

Snap package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
snap-cataloger `snap/snapcraft.yaml`	`pkg:deb`
snap-cataloger `snap/manifest.yaml`	`pkg:deb`
snap-cataloger `doc/linux-modules-*/changelog.Debian.gz`	`pkg:deb`
snap-cataloger `usr/share/snappy/dpkg.yaml`	`pkg:deb`

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.35 - Swift

Swift package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
cocoapods-cataloger `Podfile.lock`	`pkg:cocoapods`		Transitive		Runtime
swift-package-manager-cataloger `Package.resolved`, `.package.resolved`	`pkg:swift`		Transitive		Runtime

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.36 - Terraform

Terraform package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
terraform-lock-cataloger `.terraform.lock.hcl`	`pkg:terraform`		Direct		Runtime

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

4.37 - Wordpress

Wordpress package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + Evidence	Package URL Type	License	Dependencies			Package Manager Claims
Cataloger + Evidence	Package URL Type	License	Depth	Edges	Kinds	Files	Digests	Integrity Hash
wordpress-plugins-cataloger `wp-content/plugins//.php`	`pkg:wordpress-plugin`

Vulnerability scanning

Data Source	Disclosures		Fixes		Track by Source Package
Data Source	Affected	Date	Versions	Date	Track by Source Package
National Vulnerability Database (NVD)

Grype Configuration

Configuration Key	Description
`match.stock.using-cpes`	Use CPE package identifiers to find vulnerabilities

Next steps

5 - Contributing

Guidelines for developing & contributing to Anchore Open Source projects

Welcome! We appreciate all contributions to Anchore’s open source projects. Whether you’re fixing a bug, adding a feature, or improving documentation, your help makes these tools better for everyone.

Getting Help

The Anchore open source community is here to help. Use Discourse for questions, discussions, and troubleshooting. Use GitHub for reporting bugs, requesting features, and submitting code contributions. See Issues vs Discussions for guidance on which channel to use.

For security vulnerabilities, email security@anchore.com - do not create public issues. See our Security Policy for details.

5.1 - Issues and Discussions

When to use GitHub Issues versus Discourse Discussions

Understanding where to post helps you get faster, more relevant responses.

GitHub Issues

Use GitHub issues for:

Bug reports: Something isn’t working as documented
Feature requests: Proposals for new functionality
Enhancement requests: Improvements to existing features
Security vulnerabilities: Please follow our Security Policy (reported privately)

Creating a good issue

Write a clear title: Issue titles become changelog entries in release notes, so make them descriptive and user-focused
Search existing issues first: This helps avoid duplicates and keeps discussions in one place
Use issue templates: Templates guide you through providing the right information
Include version information: Specify which version you’re using
Provide reproduction steps: For bugs, describe how to recreate the issue
Describe expected vs actual behavior: Explain what you expected to happen and what actually happened
Add supporting details: Include relevant logs, error messages, or screenshots

Note

We use chronicle to automatically generate changelogs from issue and PR titles, so a well-written title goes a long way.

Discourse Discussions

Use the Anchore Discourse for:

Questions: “How do I…?” or “Why does…?”
Clarifications: Understanding how features work
General discussion: Ideas, use cases, and community chat
Help requests: Troubleshooting your specific setup
Best practices: Sharing knowledge and experiences

Why separate channels?

GitHub issues track work items that require code changes. Each issue represents a potential task for the development team. Discourse provides a better format for conversations, questions, and community support without cluttering the issue tracker.

If you’re unsure which to use, start with Discourse. The community can help identify if an issue should be created.

Security Issues

If you discover a security vulnerability, please report it privately rather than creating a public issue. See our Security Policy for details on how to report security issues responsibly. This gives us time to fix the problem and protect users before details become public.

5.2 - Syft

Developer guidelines when contributing to Syft

Getting started

In order to test and develop in the Syft repo you will need the following dependencies installed:

Golang (>= 1.26.8)
Docker
Python (>= 3.9)
make

Initial setup

Run once after cloning to install development tools:

make bootstrap

Make sure you’ve updated your docker settings so the default docker socket path is available.

Go to docker → settings → advanced and ensure “Allow the default Docker socket to be used” is checked.
Use the default docker context, run: docker context use default

Useful commands

Common commands for ongoing development:

make help - List all available commands
make lint - Check code formatting and linting
make lint-fix - Auto-fix formatting issues
make unit - Run unit tests
make integration - Run integration tests
make cli - Run CLI tests
make snapshot - Build release snapshot with all binaries and packages

Testing

Levels of testing

unit (make unit): The default level of test which is distributed throughout the repo are unit tests. Any _test.go file that does not reside somewhere within the /test directory is a unit test. Other forms of testing should be organized in the /test directory. These tests should focus on the correctness of functionality in depth. % test coverage metrics only considers unit tests and no other forms of testing.
integration (make integration): located within cmd/syft/internal/test/integration, these tests focus on the behavior surfaced by the common library entrypoints from the syft package and make light assertions about the results surfaced. Additionally, these tests tend to make diversity assertions for enum-like objects, ensuring that as enum values are added to a definition that integration tests will automatically fail if no test attempts to use that enum value. For more details see the “Data diversity and freshness assertions” section below.
cli (make cli): located with in test/cli, these are tests that test the correctness of application behavior from a snapshot build. This should be used in cases where a unit or integration test will not do or if you are looking for in-depth testing of code in the cmd/ package (such as testing the proper behavior of application configuration, CLI switches, and glue code before syft library calls).
acceptance (make install-test): located within test/compare and test/install, these are smoke-like tests that ensure that application packaging and installation works as expected. For example, during release we provide RPM packages as a download artifact. We also have an accompanying RPM acceptance test that installs the RPM from a snapshot build and ensures the output of a syft invocation matches canned expected output. New acceptance tests should be added for each release artifact and architecture supported (when possible).

Data diversity and freshness assertions

It is important that tests against the codebase are flexible enough to begin failing when they do not cover “enough” of the objects under test. “Cover” in this case does not mean that some percentage of the code has been executed during testing, but instead that there is enough diversity of data input reflected in testing relative to the definitions available.

For instance, consider an enum-like value like so:

type Language string

const (
  Java            Language = "java"
  JavaScript      Language = "javascript"
  Python          Language = "python"
  Ruby            Language = "ruby"
  Go              Language = "go"
)

Say we have a test that exercises all the languages defined today:

func TestCatalogPackages(t *testing.T) {
  testTable := []struct {
    // ... the set of test cases that test all languages
  }
  for _, test := range cases {
    t.Run(test.name, func (t *testing.T) {
      // use inputFixturePath and assert that syft.CatalogPackages() returns the set of expected Package objects
      // ...
    })
  }
}

Where each test case has a inputFixturePath that would result with packages from each language. This test is brittle since it does not assert that all languages were exercised directly and future modifications (such as adding a new language) won’t be covered by any test cases.

To address this, the enum-like object should have a definition of all objects that can be used in testing:

type Language string

// const( Java Language = ..., ... )

var AllLanguages = []Language{
 Java,
 JavaScript,
 Python,
 Ruby,
 Go,
 Rust,
}

Allowing testing to automatically fail when adding a new language:

func TestCatalogPackages(t *testing.T) {
  testTable := []struct {
   // ... the set of test cases that (hopefully) covers all languages
  }

  // new stuff...
  observedLanguages := strset.New()

  for _, test := range cases {
    t.Run(test.name, func (t *testing.T) {
      // use inputFixturePath and assert that syft.CatalogPackages() returns the set of expected Package objects
     // ...

     // new stuff...
     for _, actualPkg := range actual {
        observedLanguages.Add(string(actualPkg.Language))
     }

    })
  }

   // new stuff...
  for _, expectedLanguage := range pkg.AllLanguages {
    if  !observedLanguages.Contains(expectedLanguage) {
      t.Errorf("failed to test language=%q", expectedLanguage)
    }
  }
}

This is a better test since it will fail when someone adds a new language but fails to write a test case that should exercise that new language. This method is ideal for integration-level testing, where testing correctness in depth is not needed (that is what unit tests are for) but instead testing in breadth to ensure that units are well integrated.

A similar case can be made for data freshness; if the quality of the results will be diminished if the input data is not kept up to date then a test should be written (when possible) to assert any input data is not stale.

An example of this is the static list of licenses that is stored in internal/spdxlicense for use by the SPDX presenters. This list is updated and published periodically by an external group and syft can grab and update this list by running go generate ./... from the root of the repo.

An integration test has been written to grabs the latest license list version externally and compares that version with the version generated in the codebase. If they differ, the test fails, indicating to someone that there is an action needed to update it.

Key Takeaway

Try and write tests that fail when data assumptions change and not just when code changes.

Snapshot tests

The format objects make a lot of use of “snapshot” testing, where you save the expected output bytes from a call into the git repository and during testing make a comparison of the actual bytes from the subject under test with the golden copy saved in the repo. The “golden” files are stored in the test-fixtures/snapshot directory relative to the go package under test and should always be updated by invoking go test on the specific test file with a specific CLI update flag provided.

Many of the Format tests make use of this approach, where the raw SBOM report is saved in the repo and the test compares that SBOM with what is generated from the latest presenter code. The following command can be used to update the golden files for the various snapshot tests:

make update-format-golden-files

These flags are defined at the top of the test files that have tests that use the snapshot files.

Snapshot testing is only as good as the manual verification of the golden snapshot file saved to the repo! Be careful and diligent when updating these files.

Test fixtures

Syft uses a sophisticated test fixture caching system to speed up test execution. Test fixtures include pre-built test images, language-specific package manifests, and other test data. Rather than rebuilding fixtures on every checkout, Syft can download a pre-built cache from GitHub Container Registry.

Common fixture commands:

make fixtures - Intelligently download or rebuild fixtures as needed
make build-fixtures - Manually build all fixtures from scratch
make clean-cache - Remove all cached test fixtures
make check-docker-cache - Verify docker cache size is within limits

When to use each command:

First time setup: Run make fixtures after cloning the repository. This will download the latest fixture cache.
Tests failing unexpectedly: Try make clean-cache followed by make fixtures to ensure you have fresh fixtures.
Working offline: Set DOWNLOAD_TEST_FIXTURE_CACHE=false and run make build-fixtures to build fixtures locally without downloading.
Modifying test fixtures: After changing fixture source files, run make build-fixtures to rebuild affected fixtures.

The fixture system tracks input fingerprints and only rebuilds fixtures when their source files change. This makes the development cycle faster while ensuring tests always run against the correct fixture data.

Code generation

Syft generates several types of code and data files that need to be kept in sync with external sources or internal structures:

What gets generated:

JSON Schema - Generated from Go structs to define the Syft JSON output format
SPDX License List - Up-to-date list of license identifiers from the SPDX project
CPE Dictionary Index - Index of Common Platform Enumeration identifiers for vulnerability matching

When to regenerate:

Run code generation after:

Modifying the pkg.Package struct or related types (requires JSON schema regeneration)
SPDX releases a new license list
CPE dictionary updates are available

Generation commands:

make generate - Run all generation tasks
make generate-json-schema - Generate JSON schema from Go types
make generate-license-list - Download and generate latest SPDX license list
make generate-cpe-dictionary-index - Generate CPE dictionary index

After running generation commands, review the changes carefully and commit them as part of your pull request. The CI pipeline will verify that generated files are up to date.

Adding a new cataloger

Catalogers must fulfill the pkg.Cataloger interface in order to add packages to the SBOM.

All catalogers are registered as tasks in Syft’s task-based cataloging system:

Add your cataloger to DefaultPackageTaskFactories() using newSimplePackageTaskFactory or newPackageTaskFactory
Tag the task appropriately to indicate when it should run:
- pkgcataloging.InstalledTag - for packages positively installed
- pkgcataloging.DeclaredTag - for packages described in manifests (places where we intend to install software, but does not describe installed software)
- pkgcataloging.ImageTag - should run when scanning container images
- pkgcataloging.DirectoryTag - should run when scanning directories/filesystems
- pkgcataloging.LanguageTag - for language-specific packages
- pkgcataloging.OSTag - for OS-specific packages
- Ecosystem tags like "java", "python", "alpine", etc.
If your cataloger needs configuration, add it to pkgcataloging.Config

The task system orchestrates all catalogers through CreateSBOMConfig, which manages task execution, parallelism, and configuration.

generic.NewCataloger is an abstraction syft used to make writing common components easier (see the alpine cataloger for example usage). It takes the following information as input:

A catalogerName to identify the cataloger uniquely among all other catalogers.
Pairs of file globs as well as parser functions to parse those files. These parser functions return a slice of pkg.Package as well as a slice of artifact.Relationship to describe how the returned packages are related. See this the alpine cataloger parser function as an example.

Identified packages share a common pkg.Package struct so be sure that when the new cataloger is constructing a new package it is using the Package struct. If you want to return more information than what is available on the pkg.Package struct then you can do so in the pkg.Package.Metadata field, which accepts any type. Metadata types tend to be unique for each pkg.Type but this is not required. See the pkg package for examples of the different metadata types that are supported today. When encoding to JSON, metadata type names are determined by reflection and mapped according to internal/packagemetadata/names.go.

Finally, here is an example of where the package construction is done within the alpine cataloger:

Interested in building a new cataloger?

Checkout the list of issues with the new-cataloger label!

If you have questions about implementing a cataloger, feel free to file an issue or reach out to us on discourse!

Documenting Cataloger Capabilities

When adding a new cataloger or changing the capabilities of an existing one, you’ll need to document its capabilities in syft/pkg/cataloger/*/capabilities.yaml.

This includes:

What metadata types it produces
What package types it catalogs
What dependency information it provides (depth, edges, kinds)
Whether it extracts license information
How configuration affects its behavior

After implementing your cataloger:

Write tests using the pkgtest helpers - this automatically generates test observations that feed into capability documentation
Run make generate-capabilities - this regenerates the syft/pkg/cataloger/*/capabilities.yaml file and validates your changes
Manually edit capabilities - add the ecosystem field and detailed capabilities sections in syft/pkg/cataloger/*/capabilities.yaml

For detailed information about the capability documentation system, see the internal capabilities documentation and the capability generation documentation for a more detailed explanation of how this works under the hood.

Troubleshooting

Cannot build test fixtures with Artifactory repositories

Some companies have Artifactory setup internally as a solution for sourcing secure dependencies. If you’re seeing an issue where the unit tests won’t run because of the below error then this section might be relevant for your use case.

[ERROR] [ERROR] Some problems were encountered while processing the POMs

If you’re dealing with an issue where the unit tests will not pull/build certain java fixtures check some of these settings:

a settings.xml file should be available to help you communicate with your internal artifactory deployment
this can be moved to syft/pkg/cataloger/java/test-fixtures/java-builds/example-jenkins-plugin/ to help build the unit test-fixtures
you’ll also want to modify the build-example-jenkins-plugin.sh to use settings.xml

For more information on this setup and troubleshooting see issue 1895

Next Steps

Understanding the Codebase

Architecture - Learn about package structure, core library flow, cataloger design patterns, and file searching
API Reference - Explore the public Go API, type definitions, and function signatures

Contributing Your Work

Pull Requests - Guidelines for submitting PRs and working with reviewers
Issues and Discussions - Where to get help and report issues

Finding Work

New Cataloger Issues - Great first contributions for adding ecosystem support
Good First Issues - Beginner-friendly issues

Getting Help

Anchore Discourse - Community discussions and questions

5.3 - Grype

Developer guidelines when contributing to Grype

Getting started

In order to test and develop in the Grype repo you will need the following dependencies installed:

Golang (>= 1.26.8)
Docker
Python (>= 3.9)
make
SQLite3 (optional – for database inspection)

Make sure you’ve updated your docker settings so the default docker socket path is available.

Go to docker → settings → advanced and ensure “Allow the default Docker socket to be used” is checked.
Use the default docker context, run: docker context use default

Useful commands

Common commands for ongoing development:

make help - List all available commands
make lint - Check code formatting and linting
make lint-fix - Auto-fix formatting issues
make format - Auto-format source code
make unit - Run unit tests
make integration - Run integration tests
make cli - Run CLI tests
make quality - Run vulnerability matching quality tests
make snapshot - Build release snapshot with all binaries and packages

Testing

Levels of testing

unit (make unit): The default level of test which is distributed throughout the repo are unit tests. Any _test.go file that does not reside somewhere within the /test directory is a unit test. Other forms of testing should be organized in the /test directory. These tests should focus on the correctness of functionality in depth. % test coverage metrics only considers unit tests and no other forms of testing.
integration (make integration): located within test/integration, these tests focus on the behavior surfaced by the Grype library entrypoints and make assertions about vulnerability matching results. The integration tests also update the vulnerability database and run with the race detector enabled to catch concurrency issues.
cli (make cli): located within test/cli, these are tests that test the correctness of application behavior from a snapshot build. This should be used in cases where a unit or integration test will not do or if you are looking for in-depth testing of code in the cmd/ package (such as testing the proper behavior of application configuration, CLI switches, and glue code before grype library calls).
quality (make quality): located within test/quality, these are tests that verify vulnerability matching quality by comparing Grype’s results against known-good results (quality gates). These tests help ensure that changes to vulnerability matching logic don’t introduce regressions in match quality. The quality tests use a pinned database version to ensure consistent results. See the quality gate architecture documentation for how the system works and the test/quality README for practical development workflows.
install (part of acceptance testing): located within test/install, these are smoke-like tests that ensure that application packaging and installation works as expected. For example, during release we provide RPM packages as a download artifact. We also have an accompanying RPM acceptance test that installs the RPM from a snapshot build and ensures the output of a grype invocation matches canned expected output.

Quality Gates

Quality gates validate that code changes don’t cause performance regressions in vulnerability matching. The system compares your PR’s matching results against a baseline using a pinned database to isolate code changes from database volatility.

What quality gates validate:

F1 score (combination of true positives, false positives, and false negatives)
False negative count (should not increase)
Indeterminate matches (should remain below 10%)

Common development workflows:

make capture - Download SBOMs and generate match results
make validate - Analyze output and evaluate pass/fail
yardstick label explore [UUID] - Interactive TUI for labeling matches
./gate.py --image [digest] - Test specific images

Learn more:

test/quality README - Detailed setup and workflows

Relationship to Syft

Grype uses Syft as a library for all-things related to obtaining and parsing the given scan target (pulling container images, parsing container images, indexing directories, cataloging packages, etc). Releases of Grype should always use released versions of Syft (commits that are tagged and show up in the GitHub releases page). However, continually integrating unreleased Syft changes into Grype incrementally is encouraged (e.g. go get github.com/anchore/syft@main) as long as by the time a release is cut the Syft version is updated to a released version (e.g. go get github.com/anchore/syft@v<semantic-version>).

DB build utilities

Grype also contains the DB build utilities under grype/db/, which includes processors, transformers, and writers used to transform raw vulnerability data into a Grype database. For architecture details, see the DB build utilities section. If you are contributing to the build utilities, you may also want to review the Grype DB contributing guide for orchestration and testing context.

Inspecting the database

The v6 database is a highly normalized database with JSON data, making queries more difficult than the previous version. The easiest way to understand what’s in the database is using the grype db search subcommand, e.g.:

go run ./cmd/grype db search CVE-2025-1234 -o json

If you need to inspect the database directly, the current database format is Sqlite3. Install sqlite3 in your system and ensure that the sqlite3 executable is available in your path. Ask grype about the location of the database, which will be different depending on the operating system:

$ go run ./cmd/grype db status
Path:      /Users/kzantow/Library/Caches/grype/db/6/vulnerability.db
Schema:    v6.1.3
Built:     2025-12-01T16:28:25Z
From:      https://grype.anchore.io/databases/v6/vulnerability-db_v6.1.3_2025-12-01T11:57:14Z_1764606505.tar.zst?checksum=sha256%3A8d34ad53aebced159559e767e1ccedddc41dfeb3f70492bdbb1b94df629def05
Status:    valid

Next, open the vulnerability.db with sqlite3:

sqlite3 /Users/kzantow/Library/Caches/grype/db/6/vulnerability.db

To make the reporting from Sqlite3 easier to read, enable the following:

sqlite> .mode column
sqlite> .headers on

List the tables:

sqlite> .tables
affected_cpe_handles                   operating_systems                    affected_package_handles               package_cpes
...

To retrieve basic information for a specific vulnerability, join the vulnerability_handles table with blobs, for example:

sqlite> select * from blobs b join vulnerability_handles h on b.id = h.blob_id where h.name = 'CVE-2025-1234';
id       value                                                         id      name           status    published_date                 modified_date                  withdrawn_date  provider_id  blob_id
-------  ------------------------------------------------------------  ------  -------------  --------  -----------------------------  -----------------------------  --------------  -----------  -------
1016723  {"id":"CVE-2025-1234","assigner":["cve@gitlab.com"],"descrip  287704  CVE-2025-1234  rejected  2025-07-05 23:15:24.613+00:00  2025-07-05 23:15:24.613+00:00                  nvd          1016723
         tion":"Rejected reason: This CVE ID has been rejected or wit
         hdrawn by its CVE Numbering Authority.","refs":[{"url":"http
         s://nvd.nist.gov/vuln/detail/CVE-2025-1234"}]}

Next Steps

Understanding the Codebase

Architecture - Learn about package structure, core library flow, and matchers
API Reference - Explore the public Go API, type definitions, and function signatures Contributing Your Work
Pull Requests - Guidelines for submitting PRs and working with reviewers
Issues and Discussions - Where to get help and report issues

Finding Work

Good First Issues - Beginner-friendly issues
Help Wanted - Issues where contributions are especially welcome

Getting Help

Anchore Discourse - Community discussions and questions

5.4 - Pull Requests

Guidelines for submitting pull requests and working with reviewers

If you’ve made changes and the tests are passing, it’s time to submit a pull request (PR). This guide will help you through the process.

Quick Checklist

Before submitting your PR, make sure you have:

✓ Run the test suite and confirmed tests pass
✓ Signed off all commits (see Sign-off Requirements)
✓ Updated in-repo documentation if your changes affect user-facing behavior
✓ Written a clear PR title that describes the user-facing impact
✓ Followed existing code style and patterns in the project

Each of these items helps maintainers review your contribution more effectively and merge it faster.

PR Title

Your PR title is important—it becomes the changelog entry in release notes. Write titles that are meaningful to end users, not just developers.

Guidelines

Start with an action verb: “Add”, “Fix”, “Update”, “Remove”
Be specific: “Add support for Alpine 3.19” rather than “Update Alpine”
Keep it concise: Under 72 characters when possible
Focus on user impact: What changed for users, not implementation details

Examples

Good titles:

Add support for Python 3.12 package detection
Fix crash when parsing malformed RPM databases
Update documentation for custom template usage

Poor titles:

Updates (too vague—updates to what?)
Fixed bug (which bug?)
WIP: trying some things (not ready for review)
Refactor parseRPM function (implementation detail, not a user-facing change)

Note

We use chronicle to automatically generate changelogs from issue and PR titles, so a well-written title goes a long way.

PR Description

A clear description helps reviewers understand your changes quickly. Include these key sections:

What to include

Summary: Briefly describe what changed
Motivation: Explain why this change is needed or what problem it solves
Approach: If your solution isn’t obvious, explain your approach
Testing: Describe how you tested the changes
Related issues: Link to issues or discussions that provide context

Template

## Summary

Brief description of the change.

## Motivation

Why is this change needed? What problem does it solve?

## Changes

- Bullet point list of key changes
- Include any breaking changes or migration steps

## Type of change

<!-- Delete any that are not relevant -->

- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (please discuss with the team first; Syft is 1.0 software and we won't accept breaking changes without going to 2.0)
- [ ] Documentation (updates the documentation)
- [ ] Chore (improve the developer experience, fix a test flake, etc, without changing the visible behavior of Syft)
- [ ] Performance (make Syft run faster or use less memory, without changing visible behavior much)

## Checklist

- [ ] I have added unit tests that cover changed behavior
- [ ] I have tested my code in common scenarios and confirmed there are no regressions
- [ ] I have added comments to my code, particularly in hard-to-understand sections

Closes #123

Commit History

We use squash merging for all pull requests, which means:

Your entire PR becomes a single commit on the main branch
You don’t need to maintain a clean commit history in your PR
Merge commits in your feature branch are perfectly fine
You can commit as frequently as you like during development
The PR title (not individual commit messages) becomes the changelog entry

This approach keeps the main branch clean and linear while reducing friction for contributors. Focus on code quality rather than commit structure—reviewers care about the changes, not how you got there.

Size Matters

Small PRs get reviewed faster. Here’s how to make your PR easier to review:

Keep changes focused: Try to address one concern per PR
Avoid mixing unrelated changes: Don’t combine bug fixes with new features
Split large PRs when possible: If a PR is unavoidably large, provide extra context in the description

Consider breaking work into multiple PRs if you’re making both refactoring changes and feature additions. Reviewers can process smaller, focused changes more quickly.

What to Expect

Review Feedback

It’s normal and expected for reviewers to have questions and suggestions:

Questions about your approach: Be prepared to explain your decisions
Code style adjustments: You may be asked to match existing project patterns
Additional tests: Reviewers might request more test coverage
Scope changes: You might be asked to split or narrow the PR

How to respond to feedback

Address feedback promptly: Respond when you can, even if just to acknowledge
Ask for clarification: If something isn’t clear, ask questions
Explain your reasoning: It’s okay to discuss alternatives respectfully
Make changes in new commits: This makes incremental review easier
Mark conversations as resolved: When you’ve addressed a comment

Remember that review feedback is about the code, not about you. Reviewers want to help make the contribution successful.

After Approval

Once approved, a maintainer will merge your PR. Depending on the project, you might be asked to:

Rebase on the latest main branch if there are conflicts
Update the PR title or description for clarity
Make final adjustments based on last-minute feedback

Common Issues

Watch out for these common pitfalls:

Missing sign-off: All commits must be signed off (see Sign-off Requirements)
Failing CI checks: Make sure all tests and checks pass before requesting review
Merge conflicts: Keep your branch up to date with main to avoid conflicts
Formatting-only changes: Submit formatting and refactoring in separate PRs from features
Missing documentation: User-facing changes need corresponding documentation updates

Need Help?

If you’re stuck or have questions about the PR process:

Ask in the PR comments—maintainers are happy to help
Reach out on the project’s Discourse
Check the project-specific contributing guide for any additional requirements

Contributing to open source can feel intimidating at first, but the community is here to support you. Don’t hesitate to ask questions.

5.5 - Grype DB

Developer guidelines when contributing to Grype DB

Getting started

Adding Data Sources

Grype DB is responsible for building the database used by Grype, aggregating data provided by Vunnel providers. If you’re interested in adding a data source, you probably want to start with the Vunnel documentation.

This codebase is primarily Go, however, there are also Python scripts critical to the daily DB publishing process as well as acceptance testing. You will require the following:

Python 3.11+ installed on your system (Python 3.11-3.13 supported). Consider using pyenv if you do not have a preference for managing python interpreter installations.
zstd binary utility if you are packaging v6+ DB schemas
(optional) xz binary utility if you have specifically overridden the package command options
uv installed for Python package and virtualenv management

To download Go tooling used for static analysis, dependent Go modules, and Python dependencies run:

make bootstrap

Useful commands

Common commands for ongoing development:

make help - List all available commands
make lint - Check code formatting and linting
make lint-fix - Auto-fix formatting issues
make unit - Run unit tests (Go and Python)
make cli - Run CLI tests
make db-acceptance schema=<version> - Run DB acceptance tests for a schema version
make snapshot - Build release snapshot with all binaries and packages
make download-all-provider-cache - Download pre-built vulnerability data cache

Development workflows

Getting vulnerability data

In order to build a grype DB you will need a local cache of vulnerability data:

make download-all-provider-cache

This will populate the ./data directory locally with everything needed to run grype-db build (without needing to run grype-db pull).

This data being pulled down is the same data used in the daily DB publishing workflow, so it should be relatively fresh.

Creating a new DB schema

Create a new v# schema package in the grype repo (within grype/db)
Create the build utilities (processors, transformers, writer) for the new schema in grype under grype/db/v#/build/, then update grype-db to wire up the new schema version
Modify the manager/src/grype_db_manager/data/schema-info.json to pin the last-latest version to a specific version of grype and add the new schema version pinned to the “main” branch of grype (or a development branch)
Update all references in grype to use the new schema
Use the Staging DB Publisher workflow to test your DB changes with grype in a flow similar to the daily DB publisher workflow

Testing with staging databases

While developing a new schema version it may be useful to get a DB built for you by the Staging DB Publisher GitHub Actions workflow. This code exercises the same code as the Daily DB Publisher, with the exception that only a single schema is built and is validated against a given development branch of grype. When these DBs are published you can point grype at the proper listing file like so:

GRYPE_DB_UPDATE_URL=https://toolbox-data.anchore.io/grype/staging-databases/listing.json grype centos:8 ...

Testing

Levels of testing

unit (make unit): Unit tests for both Go code in the main codebase and Python scripts in the manager/ directory. These tests focus on correctness of individual functions and components. Coverage metrics track Go test coverage.
cli (make cli): CLI tests for both Go and Python components. These validate that command-line interfaces work correctly with various inputs and configurations.
db-acceptance (make db-acceptance schema=<version>): Acceptance tests that verify a specific DB schema version works correctly with Grype. These tests build a database, run Grype scans, and validate that vulnerability matches are correct and complete.

Running tests

To run unit tests for Go code and Python scripts:

make unit

To verify that a specific DB schema version interops with Grype:

make db-acceptance schema=<version>
# Note: this may take a while... go make some coffee.

Next Steps

Understanding the Codebase

Architecture - Learn about the orchestration layer, schema support, and publishing workflow
Grype DB Build utilities - Understand the build utilities internals (processors, transformers, writers) in grype
Vunnel Documentation - Understand the vulnerability data provider system that feeds Grype DB Contributing Your Work
Pull Requests - Guidelines for submitting PRs and working with reviewers
Issues and Discussions - Where to get help and report issues

Related Projects

Grype Contributing Guide - Understand how Grype uses the database
Vunnel Contributing Guide - Learn about vulnerability data providers

Getting Help

Anchore Discourse - Community discussions and questions
Grype DB GitHub Issues - Report bugs or request features

5.6 - Vunnel

Developer guidelines when contributing to Vunnel

Getting started

This project requires:

python (>= 3.11)
pip (>= 22.2)
uv
docker
go (>= 1.20)
posix shell (bash, zsh, etc… needed for the make dev “development shell”)

Once you have python and uv installed, get the project bootstrapped by cloning grype, grype-db, and vunnel next to each other:

# clone grype and grype-db, which is needed for provider development
git clone git@github.com:anchore/grype.git
git clone git@github.com:anchore/grype-db.git
# note: if you already have these repos cloned, you can skip this step. However, if they
# reside in a different directory than where the vunnel repo is, then you will need to
# set the `GRYPE_PATH` and/or `GRYPE_DB_PATH` environment variables for the development
# shell to function. You can add these to a local .env file in the vunnel repo root.

# clone the vunnel repo
git clone git@github.com:anchore/vunnel.git
cd vunnel

# get basic project tooling
make bootstrap

# install project dependencies
uv sync --all-extras --dev

Pre-commit is used to help enforce static analysis checks with git hooks:

uv run pre-commit install --hook-type pre-push

Development environment

Development shell

The easiest way to develop providers is to use the development shell, selecting the specific provider(s) you’d like to focus your development workflow on:

# Specify one or more providers you want to develop on.
# Any provider from the output of "vunnel list" is valid.
# Specify multiple as a space-delimited list:
# make dev providers="oracle wolfi nvd"
$ make dev provider="oracle"

Entering vunnel development shell...
• Configuring with providers: oracle ...
• Writing grype config: /Users/wagoodman/code/vunnel/.grype.yaml ...
• Writing grype-db config: /Users/wagoodman/code/vunnel/.grype-db.yaml ...
• Activating virtual env: /Users/wagoodman/code/vunnel/.venv ...
• Installing editable version of vunnel ...
• Building grype ...
• Building grype-db ...

Note: development builds grype and grype-db are now available in your path.
To update these builds run 'make build-grype' and 'make build-grype-db' respectively.
To run your provider and update the grype database run 'make update-db'.
Type 'exit' to exit the development shell.

The development shell provides local builds of grype and grype-db from adjacent directories. You can configure custom paths using environment variables:

# example .env file in the root of the vunnel repo
GRYPE_PATH=~/somewhere/else/grype
GRYPE_DB_PATH=~/also/somewhere/else/grype-db

Example: Running make update-db

You can run the provider you specified in the make dev command, build an isolated grype DB, and import the DB into grype:

$ make update-db
• Updating vunnel providers ...
[0000]  INFO grype-db version: ede464c2def9c085325e18ed319b36424d71180d-adhoc-build
...
[0000]  INFO configured providers parallelism=1 providers=1
[0000] DEBUG   └── oracle
[0000] DEBUG all providers started, waiting for graceful completion...
[0000]  INFO running vulnerability provider provider=oracle
[0000] DEBUG oracle:  2023-03-07 15:44:13 [INFO] running oracle provider
[0000] DEBUG oracle:  2023-03-07 15:44:13 [INFO] downloading ELSA from https://linux.oracle.com/security/oval/com.oracle.elsa-all.xml.bz2
[0019] DEBUG oracle:  2023-03-07 15:44:31 [INFO] wrote 6298 entries
[0019] DEBUG oracle:  2023-03-07 15:44:31 [INFO] recording workspace state
• Building grype-db ...
[0000]  INFO grype-db version: ede464c2def9c085325e18ed319b36424d71180d-adhoc-build
[0000]  INFO reading all provider state
[0000]  INFO building DB build-directory=./build providers=[oracle] schema=5
• Packaging grype-db ...
[0000]  INFO grype-db version: ede464c2def9c085325e18ed319b36424d71180d-adhoc-build
[0000]  INFO packaging DB from="./build" for="https://toolbox-data.anchore.io/grype/databases"
[0000]  INFO created DB archive path=build/vulnerability-db_v5_2023-03-07T20:44:13Z_405ae93d52ac4cde6606.tar.gz
• Importing DB into grype ...
Vulnerability database imported

Example: Scanning with the dev database

You can now run grype that uses the newly created DB:

$ grype oraclelinux:8.4
 ✔ Pulled image
 ✔ Loaded image
 ✔ Parsed image
 ✔ Cataloged packages      [195 packages]
 ✔ Scanning image...       [193 vulnerabilities]
   ├── 0 critical, 25 high, 146 medium, 22 low, 0 negligible
   └── 193 fixed

NAME                        INSTALLED                FIXED-IN                    TYPE  VULNERABILITY   SEVERITY
bind-export-libs            32:9.11.26-4.el8_4       32:9.11.26-6.el8            rpm   ELSA-2021-4384  Medium
bind-export-libs            32:9.11.26-4.el8_4       32:9.11.36-3.el8            rpm   ELSA-2022-2092  Medium
bind-export-libs            32:9.11.26-4.el8_4       32:9.11.36-3.el8_6.1        rpm   ELSA-2022-6778  High
bind-export-libs            32:9.11.26-4.el8_4       32:9.11.36-5.el8            rpm   ELSA-2022-7790  Medium

# note that we're using the database we just built...
$ grype db status
Location:  /Users/wagoodman/code/vunnel/.cache/grype/6  # <--- this is the local DB we just built
...

# also note that we're using a development build of grype
$ which grype
/Users/wagoodman/code/vunnel/bin/grype

Rebuilding development tools

To rebuild the grype and grype-db binaries from local source, run:

make build-grype
make build-grype-db

Recommended development workflow

For most provider development, follow this iterative workflow:

Clone all three repos side-by-side: vunnel, grype, and grype-db
Enter the development shell: make dev provider="<your-provider>"
Make changes to your provider code in vunnel
Build and test: Run make update-db to build a database with your provider’s data. Run make build-grype or make build-grype-db if these tools have code changes.
Validate with grype: Scan test images to verify matching works correctly
Iterate: Adjust code and repeat steps 4-5

If you need to make changes to grype or grype-db during development, use make build-grype or make build-grype-db to rebuild with your changes.

Common commands

This project uses Make for running common development tasks:

make                  # run static analysis and unit testing
make static-analysis  # run static analysis
make unit             # run unit tests
make format           # format the codebase
make lint-fix         # attempt to automatically fix linting errors

To see all available commands:

make help

Snapshot tests

Many providers have snapshot tests, which assert that a fixed set of inputs will always produce the expected outputs. These tests provide end-to-end validation of the transformation logic within the vunnel provider.

Snapshot tests run as part of make unit.

To update snapshots, pass --snapshot-update to pytest:

uv run pytest ./tests/unit/providers/debian/test_debian.py -k test_provider_via_snapshot --snapshot-update

Quality gate tests

All vunnel providers are protected by a quality gate. A quality gate essentially does the following:

Use vunnel and grype-db to build a vulnerability database
Use Syft to create an SBOM
Use grype to scan the SBOM with the vulnerability database
Compare the results to known vulnerability labels using yardstick

Understanding Vunnel and Grype architecture

Key concepts for provider authors

Before implementing a provider, understand how the pieces fit together:

Vulnerability matching overview

Syft: Catalogs packages from images/filesystems with metadata (type, name, version, distro, etc.)
Vunnel: Provides vulnerability data from various sources
Grype DB: Orchestrates data fetching and delegates transformation/storage to grype’s build library
Grype: Matches packages against vulnerabilities in the database built by grype-db

Affected vs. unaffected package handles

Grype uses two types of package records:

Affected: “If a package meets this version constraint, it IS vulnerable”
Unaffected: “If a package meets this version constraint, it is NOT vulnerable”

Most providers emit affected package records. Some providers (like AlmaLinux) emit unaffected records to filter matches from other sources (Red Hat in AlmaLinux’s case).

Examples in code:

Affected packages: Most distro providers (Red Hat, Debian, Ubuntu, etc.)
Unaffected packages: AlmaLinux matcher, OSV transformer

Schemas

Vulnerability data must conform to a structured schema. Vunnel supports several schemas including OSV, OpenVEX, NVD, and GitHub Security Advisory. Schema selection is covered in detail below.

Architecture details

For detailed information about Vunnel’s internal architecture, including provider abstraction, workspace conventions, and integration with Grype DB, see the Vunnel Architecture page.

Adding a new provider

Before you start: Understanding requirements

Schema selection

Choosing the right schema

Legacy Vunnel providers emit vulnerabilities in the OS schema, but generally, new providers should use an externally specified schema like OSV or OpenVEX.

Schema preference hierarchy for new providers:

OSV (strongly preferred) - Use for most vulnerability data
Other externally specified schemas - OpenVEX, CSAF VEX, etc.
Existing internal schemas - NVD, GitHub Security Advisory, OS (only if data naturally fits)
Custom schemas - Requires discussion with maintainers

Why we prefer externally specified schemas:

Based on open standards (OSV, OpenVEX, CSAF)
Better interoperability with other tools
Reduced maintenance burden
Broader ecosystem support

The OS schema is an internal format that exists primarily to support legacy providers. While it’s still supported, we encourage new providers to use externally specified schemas when possible.

Decision tree: What schema should my provider use?

Source already provides OSV format? → Use OSV
Easy to transform to OSV without data loss? → Use OSV
Source already uses an externally specified format (OpenVEX, CSAF VEX, etc.)? → Probably use that format (may need to add a transformer to grype-db; check with maintainers in an issue)
Not already in an external format and not easy to make into OSV? → Check with maintainers in an issue

Schema resources:

OSV Schema Documentation
OpenVEX Specification
CSAF VEX
OSV examples in Vunnel: See providers in src/vunnel/providers

Key questions before implementing

Before implementing a provider, answer these questions to understand what changes will be needed:

1. Can Syft identify which packages should be matched against your data?

This is critical—Grype needs to know when to use your vulnerability data. Examples:

New Linux distro: Does the distro have something distinctive in /etc/os-release that Syft can detect? (Concretely, does syft -o json my-test-image | jq .distro produce something correct and specific to your vulnerability feed?)
Vendor-specific patches: Do patched packages have a distinctive version pattern (e.g., .<vendor_name> in dpkg versions)?
Language ecosystem: Does your data apply to all packages from a specific package manager?

If Syft can’t distinguish your packages, you may need changes to Syft first. See contributing to Syft.

2. Do you have public test artifacts?

You must have publicly accessible test images or artifacts that:

Contain packages your provider has data for
Can be scanned by Syft
Can be used in CI/CD for ongoing validation

Without test artifacts, we cannot validate that your provider works correctly.

3. Is your vulnerability feed comprehensive or supplementary?

Comprehensive: Contains both vulnerability disclosures AND fixes (e.g., most Linux distro security advisories, GHSA)
Supplementary: Contains only fixes that layer over another source (e.g., AlmaLinux provides fixes on top of Red Hat data; Alpine SecDB provides fixes on top of NVD CVE data)

Supplementary feeds typically require additional Grype changes to filter existing matches.

4. What schema is your vulnerability data available in?

Already OSV? Great—minimal work needed
Already in another external format (OpenVEX, CSAF, etc.)? May need to add a transformer to grype-db
Custom format? You’ll need to transform it to an external schema (preferably OSV)

See the schema selection section above for guidance.

5. How should Vunnel retrieve your data?

Important: Vunnel must be able to enumerate and fetch the entire vulnerability feed. APIs that only provide individual vulnerability lookups (e.g., GET /vuln-id without a GET /all-vulns endpoint) are very difficult to integrate.

Common patterns:

Downloadable archive (tar.gz, zip, etc. with vulnerability data)—provide the URL
Public HTTP API with enumeration support—provide the endpoint
Public Git repository (with JSON/YAML/XML files)—provide the repo URL
Requires authentication or special access? Discuss with maintainers in an issue

What these answers tell you:

Syft changes needed? Question 1
Grype changes needed? Questions 1 and 3
Grype DB changes needed? Question 4
Feasibility? Question 2 is a hard requirement
Complexity? All questions together determine overall complexity

If you’re unsure about any of these, open an issue to discuss with maintainers before starting implementation.

Initial prerequisites

“Vulnerability matching” is the process of taking a list of vulnerabilities and matching them against a list of packages. A provider in this repo is responsible for the “vulnerability” side of this process. The “package” side is handled by Syft. A prerequisite for adding a new provider is that Syft can catalog the package types that the provider is feeding vulnerability data for, so Grype can perform the matching from these two sources.

For a detailed example on the implementation details of a provider, see the “example” provider.

Understanding multi-repository coordination

Adding a new provider often requires PRs in multiple repositories.

Depending on your answers to the key questions above, you may need PRs in vunnel, grype-db, and grype. This is normal and expected.

Recommended approach:

Set up all three repos as siblings: Clone vunnel, grype, and grype-db in the same parent directory
Make changes across all needed repos: Create branches in each repo that needs changes
Test locally with the dev shell: Use make dev provider=<your-new-provider> in vunnel, which will use your local grype and grype-db branches
Validate end-to-end: Run make update-db and then grype <your-test-artifacts> to verify matching works correctly
Open PRs in all repos: When your local branches work together correctly, open PRs. If possible, make sure maintainers have permission to edit your PRs.
Add quality gate tests: Add a block to tests/quality/config.yaml that exercises your provider. You may need to temporarily make config.yaml point to your branches of Grype or Grype-DB in order for the validation to pass.
Maintainers coordinate merging: Once all PRs are approved, maintainers will coordinate getting them merged and update version references

Which PRs do you need?

Vunnel PR: Always needed—implements the provider and emits vulnerability data
Grype PR: Needed if adding new matching logic, distro types, filtering behavior, or a new schema transformer (transformer work now lives in grype under grype/db/)
Grype DB PR: Rarely needed for new providers; mainly for orchestration or provider configuration changes

Don’t be discouraged by the multi-repo requirement—this is a well-established workflow. Open draft PRs early and maintainers can help guide you through the process.

Step-by-step: Implementing your provider

Step 1: Prove Syft can find your artifacts

Before implementing anything, verify that Syft can catalog the packages you want to provide vulnerability data for:

syft -q <your-test-image> | grep <expected-pattern>
# You should see packages that your provider will have data for

For distro-specific providers, verify Syft detects the distro correctly:

syft -o json <your-test-image> | jq .distro
# Should show the correct distro name and version

If Syft can’t find your packages or detect your distro, you may need Syft changes before proceeding. Generally, we are happy for Syft to learn to parse new distros and package types. See contributing to Syft.

Step 2: Find or create test artifacts showing incorrect matching

Identify concrete test cases that your provider will fix. Run Grype on your test artifact:

grype <your-test-artifact>

Document what’s wrong:

Missing vulnerabilities: Grype should report CVE-X for package Y but doesn’t
False positives: Grype reports CVE-X for package Y but shouldn’t (e.g., the package is patched)

These incorrect matches are what you’ll use to validate your provider works correctly.

Step 3: Set up the three-repo workspace

Clone vunnel, grype, and grype-db as siblings in the same parent directory:

# Fork the repos on GitHub first, then:
git clone git@github.com:your-username/vunnel.git
git clone git@github.com:your-username/grype.git
git clone git@github.com:your-username/grype-db.git

# Or clone from upstream and add forks as remotes:
cd vunnel
git remote add fork git@github.com:your-username/vunnel.git
# (repeat for grype and grype-db)

Create branches in each repo where you’ll make changes:

cd vunnel
git checkout -b add-my-provider

cd ../grype
git checkout -b support-my-provider

cd ../grype-db
git checkout -b transform-my-provider-data

Step 4: Implement the Vunnel provider

Take a look at the example provider in the example directory. You are encouraged to copy it as a starting point:

# from the root of the vunnel repo
cp -a example/awesome src/vunnel/providers/YOURPROVIDERNAME

See the “example” provider README for detailed guidance.

Core implementation requirements:

Create a provider class under /src/vunnel/providers/<name> that inherits from provider.Provider and implements:

name(): A unique and semantically-useful name for the provider
update(): Downloads and processes raw data, writing all results with self.results_writer()

Wire up your provider:

Add an entry to the dispatch table in src/vunnel/providers/__init__.py mapping your provider name to the class
Add provider configuration to src/vunnel/cli/config.py (specifically the Providers dataclass)

Validation:

vunnel list  # Should show your provider
vunnel run <your-provider-name>  # Should execute successfully

Need help with your provider?

At this point you can open a draft Vunnel PR and ask maintainers for guidance on the next steps.

Step 5: Implement Grype build utilities changes (if needed)

When needed:

If your provider uses a schema that doesn’t already have a transformer, add one in grype (not grype-db):

Add processor logic in grype/db/processors/
Add transformation logic in grype/db/v6/build/transformers/ (the v5 data is only consumed by old versions of Grype, and new providers generally should not change v5 or older code)

Note: For OSV and OpenVEX, transformers already exist—check existing transformers.

Test the data flow:

Use the dev shell to test that your vulnerability data flows into Grype’s database:

cd vunnel
make dev provider="<your-provider-name>"

# This enters a shell with local builds of grype and grype-db
make update-db

# Check that data was imported (you can inspect the SQLite database if needed)

Step 6: Determine if Grype changes are needed

Test whether Grype automatically picks up your new data:

# In the dev shell from step 5
grype <your-test-artifact>

Compare against the incorrect matches you documented in step 2. If Grype now correctly reports previously missing vulnerabilities or filters out false positives, you’re done with Grype changes—skip to step 7.

Common reasons for needing Grype changes:

Grype does not support the distro type and it needs to be added. See the grype/distro/type.go file to add the new distro.
Grype supports the distro already, but matching is disabled. See the grype/distro/distro.go file to enable the distro explicitly.
Supplementary fixes require filtering logic. See the AlmaLinux matcher example.

Implement and test:

If you’re using the developer shell (make dev ...) then you can run make build-grype to get a build of grype with your changes, then test again with grype <your-test-artifact>.

Note: Steps 5 and 6 are iterative—you may go back and forth between provider implementation, grype-db transformers, and grype matchers until everything works correctly.

Step 7: Add test configuration

Add your provider and test images to tests/quality/config.yaml:

- provider: your-provider-name
  images:
    - docker.io/yourorg/test:tag@sha256:digest

These images are used to test the provider on PRs and nightly builds to verify the provider is working. Always use both the image tag and digest for all container image entries. Pick an image that has a good representation of the package types that your new provider is adding vulnerability data for.

Before continuing, validate your test images:

syft -q <your-test-image> | grep <expected-pattern>
# You should see packages that your provider has vulnerability data for

Common mistake: Test images that don’t contain relevant packages. Always verify before proceeding!

Step 8: Update quality gate configuration for your branches

If you have Grype or Grype DB changes, update the yardstick.tools[*] entries in tests/quality/config.yaml to use versions that point to your fork:

yardstick:
  tools:
    - name: grype
      version: your-username/grype@your-branch-name
      # ...
  # (similar for grype-db if needed)

If you don’t have any grype or grype-db changes, you can skip this step.

Step 9: Add vulnerability match labels

In order to evaluate the quality of the new provider, we need to know what the expected results are. This is done by annotating Grype results with “True Positive” labels (good results) and “False Positive” labels (bad results). We’ll use Yardstick to do this:

cd tests/quality

# Capture results with the development version of grype (from your fork)
make capture provider=<your-provider-name>

# List your results
uv run yardstick result list | grep grype

d415064e-2bf3-4a1d-bda6-9c3957f2f71a  docker.io/anc...  grype@v0.58.0             2023-03...
75d1fe75-0890-4d89-a497-b1050826d9f6  docker.io/anc...  grype[custom-db]@bdcefd2  2023-03...

# Use the "grype[custom-db]" result UUID and explore the results and add labels to each entry
uv run yardstick label explore 75d1fe75-0890-4d89-a497-b1050826d9f6

In the Yardstick TUI:

Press T to label a row as a True Positive (correct match)
Press F to label a row as a False Positive (incorrect match)
Press Ctrl-Z to undo a label
Press Ctrl-S to save your labels
Press Ctrl-C to quit when you are done

Later we’ll open a PR in the vulnerability-match-labels repo to persist these labels. For the meantime we can iterate locally with the labels we’ve added.

Step 10: Run the quality gate

cd tests/quality

# Runs your specific provider to gather vulnerability data, builds a DB, and runs grype with the new DB
make capture provider=<your-provider-name>

# Evaluate the quality gate
make validate

This uses the latest Grype DB release to build a DB and the specified Grype version with a DB containing only data from the new provider.

You are looking for a passing run before continuing further.

Troubleshooting:

Quality gate failing? Check that labels are correctly applied
Matches not appearing? Verify your provider is writing data correctly
Images not scanning? Verify test image accessibility and digests

Step 11: Persist labels to vulnerability-match-labels repo

Vunnel uses the labels in the vulnerability-match-labels repo via a git submodule. We’ve already added labels locally within this submodule in an earlier step. To persist these labels we need to push them to a fork and open a PR:

# Fork the github.com/anchore/vulnerability-match-labels repo, but you do not need to clone it...

# From the Vunnel repo...
cd tests/quality/vulnerability-match-labels

git remote add fork git@github.com:your-fork-name/vulnerability-match-labels.git
git checkout -b 'add-labels-for-<your-provider-name>'
git status

# You should see changes from the labels/ directory for your provider that you added
git add .
git commit -m 'add labels for <your-provider-name>'
git push fork add-labels-for-<your-provider-name>

At this point you can open a PR in the vulnerability-match-labels repo.

Note: You will not be able to open a Vunnel PR that passes PR checks until the labels are merged into the vulnerability-match-labels repo.

Once the PR is merged in the vulnerability-match-labels repo you can update the submodule in Vunnel to point to the latest commit in the vulnerability-match-labels repo:

cd tests/quality
git submodule update --remote vulnerability-match-labels

Step 12: Open PRs in all repos

Open PRs in all repos where you made changes:

Vunnel PR: Always needed
Grype DB PR: If you added transformer logic
Grype PR: If you added matching logic

The PR will also run all of the same quality gate checks that you ran locally.

In your PR descriptions:

Link to the related PRs in other repos
Describe what incorrect matching behavior this fixes
Reference your test artifacts
Note the test images you added to config.yaml

Before the Vunnel PR can merge:

Grype DB PR must be merged (if you have one)
Grype PR must be merged (if you have one)
Vulnerability-match-labels PR must be merged
Update tests/quality/config.yaml to point back to the latest versions (not branch names)

Getting help:

Open draft PRs early and ask maintainers for guidance. Maintainers are experienced with multi-repo coordination and can help you navigate the process. Maintainers may take over coordination and merge the PRs.

Adding a provider with a new schema

If you’re adding a provider that uses a completely new schema (not OSV, OpenVEX, etc.), follow the steps above with these additional requirements:

You will need to add the new schema to the Vunnel repo in the schemas directory
Grype will need a new transformer under grype/db/v*/build/transformers/
The Vunnel tests/quality/config.yaml file will need to be updated to use development grype-db.version, pointing to your fork
The final Vunnel PR will not be able to be merged until the Grype DB PR is merged and the tests/quality/config.yaml file is updated to point back to the latest Grype DB version

Consider carefully: Adding a new schema is complex and increases maintenance burden. Prefer externally specified schemas like OSV whenever possible.

Troubleshooting

My test image doesn’t show any packages

# Verify the image contains expected packages
syft -q <image> | grep <pattern>

# Check the package type
syft -q <image> -o json | jq '.artifacts[] | select(.name=="<pkg>") | .type'

# Verify the image is accessible
docker pull <image>

If packages aren’t appearing, the image may not contain what you expect. Review your test image selection.

Quality gate is failing

Verify labels are correctly applied (T for true positive, F for false positive)
Check that test images are accessible and have correct digests
Ensure grype and grype-db versions in config.yaml are correct
Run make capture and manually inspect the results with uv run yardstick result list

Grype isn’t matching my vulnerabilities

Check your provider’s output: Use vunnel run <name> and inspect the generated data
Verify schema conformance: Ensure your data matches the schema you’ve chosen
Check Grype DB transformation: Inspect the generated SQLite database to see if data was transformed correctly
Add debug logging: Use the dev shell and add logging to Grype matchers to understand why matches aren’t happening
Verify package metadata: Ensure Syft is cataloging packages with the metadata your matcher needs

I’m not sure if I need Grype changes

Try running end-to-end in the dev shell first (make update-db, then scan an image)
If matching doesn’t work as expected, you likely need Grype changes
Look for similar providers and see what Grype changes they required
Ask a maintainer in a draft PR—they can help you determine what’s needed

Getting help

Open a draft PR with your progress so far
Include specific questions or blockers you’re encountering
Share test images so maintainers can reproduce issues
Maintainers are happy to help guide you through the process
Expect response within a few business days

Next Steps

Understanding the Codebase

Vunnel Architecture - Learn about provider abstraction, workspace conventions, and vulnerability schemas
Example Provider - Detailed walkthrough of creating a new provider

Contributing Your Work

Pull Requests - Guidelines for submitting PRs and working with reviewers
Issues and Discussions - Where to get help and report issues

Finding Work

New Provider Issues - Add support for new vulnerability data sources
Refactoring Issues - Help improve code quality
Good First Issues - Beginner-friendly issues

Getting Help

Anchore Discourse - Community discussions and questions

5.7 - Grant

Developer guidelines when contributing to Grant

Getting started

In order to test and develop in the Grant repo you will need the following dependencies installed:

Golang (>= 1.26.8)
Docker
make

Make sure you’ve updated your docker settings so the default docker socket path is available.

Go to docker → settings → advanced and ensure “Allow the default Docker socket to be used” is checked.
Use the default docker context, run: docker context use default

Useful commands

Common commands for ongoing development:

make help - List all available commands
make lint - Check code formatting and linting
make lint-fix - Auto-fix formatting issues
make unit - Run unit tests
make test - Run all tests
make snapshot - Build release snapshot with all binaries and packages (also available as make build)
make generate - Generate SPDX license index and license patterns

Testing

Levels of testing

unit (make unit): The default level of test which is distributed throughout the repo are unit tests. Any _test.go file that does not reside somewhere within the /tests directory is a unit test. These tests focus on the correctness of functionality in depth. % test coverage metrics only consider unit tests and no other forms of testing.
integration (make test): located in tests/integration_test.go, these tests focus on policy loading, license evaluation, and core library behavior. They test the interaction between different components like policy parsing, license matching with glob patterns, and package evaluation logic.
cli (part of make test): located in tests/cli/, these are tests that test the correctness of application behavior from a snapshot build. These tests execute the actual Grant binary and verify command output, exit codes, and behavior of commands like check, list, and version.

Testing conventions

Unit tests should focus on correctness of individual functions and components
Integration tests validate that core library components work together correctly (policy evaluation, license matching, etc.)
CLI tests ensure user-facing commands produce expected output and behavior
Current coverage threshold is 8% (see Taskfile.yaml)
Use table-driven tests where appropriate to test multiple scenarios

Linting

You can run the linter for the project by running:

make lint

This checks code formatting with gofmt and runs golangci-lint checks.

To automatically fix linting issues:

make lint-fix

Code generation

Grant generates code and data files that need to be kept in sync with external sources:

What gets generated:

SPDX License Index - Up-to-date list of license identifiers from the SPDX project for license identification and validation
License File Patterns - Generated patterns to identify license files in scanned directories

When to regenerate:

Run code generation after:

The SPDX license list has been updated
Adding new license file naming patterns
Contributing changes to license detection logic

Generation commands:

make generate - Run all generation tasks
make generate-spdx-licenses - Download and generate latest SPDX license list
make generate-license-patterns - Generate license file patterns (depends on SPDX license index)

After running generation commands, review the changes carefully and commit them as part of your pull request.

Package structure

Grant is organized into two main areas: the public library API and the CLI application. For detailed API documentation, see the Grant Go package reference.

`grant/` - Public Library API

The top-level grant/ package is the public library that other projects can import and use. This is what you’d reference with import "github.com/anchore/grant/grant".

This package contains the core functionality:

License evaluation and matching
Policy loading and validation
Package analysis and filtering

Most contributions to core Grant functionality belong in this package.

`cmd/grant/` - CLI Application

The CLI application is built on top of the grant/ library and contains application-specific code:

cmd/grant/
├── cli/            # Command wiring and application setup
│   ├── command/    # CLI command implementations (list, check, etc.)
│   ├── internal/   # Internal command implementations
│   ├── option/     # Command flags and configuration options
│   └── tui/        # Terminal UI and event handlers
└── main.go         # Application entrypoint

Contributions to CLI features, command behavior, or user interface improvements belong in this package.

Next Steps

Understanding the Codebase

Grant API Reference - Explore the public Go API, type definitions, and function signatures

Contributing Your Work

Pull Requests - Guidelines for submitting PRs and working with reviewers
Issues and Discussions - Where to get help and report issues

Finding Work

Good First Issues - Beginner-friendly issues

Getting Help

Anchore Discourse - Community discussions and questions

5.8 - Sign-off Commits

How to sign-off commits with the Developer’s Certificate of Origin

Sign off your work

All commits require a simple sign-off line to confirm you have the right to contribute your code. This is a standard practice in open source called the Developer Certificate of Origin (DCO).

How to sign off

The easiest way is to use the -s or --signoff flag when committing:

git commit -s -m "your commit message"

This automatically adds a sign-off line to your commit message:

Signed-off-by: Your Name <your.email@example.com>

Tip: You can configure Git to always sign off commits automatically:

git config --global format.signoff true

Verify your sign-off

To check that your commit includes the sign-off, look at the log output:

git log -1

You should see the Signed-off-by: line at the end of your commit message:

commit 37ceh170e4hb283bb73d958f2036ee5k07e7fde7
Author: Your Name <your.email@example.com>
Date:   Mon Aug 1 11:27:13 2020 -0400

    your commit message

    Signed-off-by: Your Name <your.email@example.com>

Why we require sign-off

In plain English: By adding a sign-off line, you’re confirming that:

You wrote the code yourself, OR
You have permission to submit it, AND
You’re okay with it being released under the project’s open source license

This protects both you and the project. It’s a simple legal formality that takes just a few seconds to add to each commit.

All contributions to this project are licensed under the Apache License Version 2.0.

Adding sign-off to existing commits

If you’ve already committed without a sign-off (easy to do!), you can add it retroactively.

For your most recent commit

git commit --amend --signoff

This updates your last commit to include the sign-off line.

For older commits

If you need to add sign-off to commits further back in your history:

git rebase --signoff HEAD~N

Replace N with the number of commits you need to sign. For example, HEAD~3 signs off the last 3 commits.

Note: If you’ve already pushed these commits, you’ll need to force-push after rebasing:

git push --force-with-lease

If you’re new to rebasing

Rebasing rewrites commit history, which can be tricky if you’re not familiar with it. If you run into issues:

Ask for help in the PR comments
Or, create a fresh branch from the latest main and cherry-pick your changes
The maintainers can also help you fix sign-off issues during the review process

What the DCO means (technical details)

The Developer Certificate of Origin (DCO) is a legal attestation that you have the right to submit your contribution under the project’s license. Here’s the full text:

Developer's Certificate of Origin 1.1

By making a contribution to this project, I certify that:

   (a) The contribution was created in whole or in part by me and I
       have the right to submit it under the open source license
       indicated in the file; or

   (b) The contribution is based upon previous work that, to the best
       of my knowledge, is covered under an appropriate open source
       license and I have the right under that license to submit that
       work with modifications, whether created in whole or in part
       by me, under the same open source license (unless I am
       permitted to submit under a different license), as indicated
       in the file; or

   (c) The contribution was provided directly to me by some other
       person who certified (a), (b) or (c) and I have not modified
       it.

   (d) I understand and agree that this project and the contribution
       are public and that a record of the contribution (including all
       personal information I submit with it, including my sign-off) is
       maintained indefinitely and may be redistributed consistent with
       this project or the open source license(s) involved.

The DCO protects both contributors and the project by creating a clear record of contribution rights and licensing terms.

5.9 - SBOM Action

Developer guidelines when contributing to sbom-action

Getting started

In order to test and develop in the sbom-action repo you will need the following dependencies installed:

Node.js (>= 20.11.0)
npm
Docker

Initial setup

Run once after cloning to install dependencies and development tools:

npm install

This command installs all dependencies and sets up Husky git hooks that automatically format code and rebuild the distribution files before commits.

Useful commands

Common commands for ongoing development:

npm run build - Check TypeScript compilation (no output files)
npm run lint - Check code with ESLint
npm run format - Auto-format code with Prettier
npm run format-check - Check code formatting without changes
npm run package - Build distribution files with ncc (outputs to dist/)
npm test - Run Jest tests
npm run all - Complete validation suite (build + format + lint + package + test)

Testing

The sbom-action uses Jest for testing. To run the test suite:

npm test

The CI workflow handles any additional setup automatically (like Docker registries). For local development, you just need to install dependencies and run tests.

Test types

The test suite includes two main categories:

Unit tests (e.g., tests/GithubClient.test.ts, tests/SyftGithubAction.test.ts): Test individual components in isolation by mocking GitHub Actions context and external dependencies.
Integration tests (tests/integration/): Execute the full action workflow with real Syft invocations against test fixtures in tests/fixtures/ (npm-project, yarn-project). These tests use snapshot testing to validate SBOM output and GitHub dependency snapshot uploads.

Snapshot testing

Integration tests extensively use Jest’s snapshot testing to validate SBOM output. When you run integration tests, Jest compares the generated SBOMs against saved snapshots in tests/integration/__snapshots__/.

The tests normalize dynamic values (timestamps, hashes, IDs) before comparison to ensure consistent snapshots across runs.

Updating snapshots:

When you intentionally change SBOM output format or content, update the snapshots:

npm run test:update-snapshots

Important: Always manually review snapshot changes before committing. Snapshots capture expected behavior, so changes should be intentional and correct.

Development workflow

Pre-commit hooks

The sbom-action uses Husky to run automated checks before each commit:

Code formatting - Prettier formats staged TypeScript files
Distribution rebuild - Runs npm run package to rebuild dist/ directory
Auto-staging - Automatically stages updated dist/ files

The hook is defined in .husky/pre-commit and runs the precommit npm script.

Why commit dist/?

GitHub Actions can’t install dependencies or compile code at runtime. The action must include pre-built JavaScript files in the dist/ directory. The ncc compiler bundles all TypeScript source and dependencies into standalone JavaScript files.

Code organization

The sbom-action consists of three GitHub Actions, each with its own entry point:

Main action (action.yml):

Entry point: src/runSyftAction.ts
Compiled to: dist/runSyftAction/index.js
Generates SBOMs and uploads as workflow artifacts and release assets

Publish SBOM sub-action (publish-sbom/action.yml):

Entry point: src/attachReleaseAssets.ts
Compiled to: dist/attachReleaseAssets/index.js
Uploads existing SBOMs to GitHub releases

Download Syft sub-action (download-syft/action.yml):

Entry point: src/downloadSyft.ts
Compiled to: dist/downloadSyft/index.js
Downloads and caches Syft binary

Key modules:

src/Syft.ts - Wraps Syft execution and configuration
src/SyftVersion.ts - Manages Syft version resolution
src/github/SyftDownloader.ts - Handles Syft binary downloads
src/github/SyftGithubAction.ts - Core action orchestration logic
src/github/GithubClient.ts - GitHub API interactions
src/github/Executor.ts - Command execution wrapper

GitHub Actions specifics

Debugging Actions

Enable detailed debug logging by setting a repository secret:

Go to your repository Settings → Secrets and variables → Actions
Add a new secret: ACTIONS_STEP_DEBUG = true

This enables debug logging from the @actions/toolkit libraries used throughout the action.

See the GitHub documentation for more details.

Testing Actions locally

CI validation:

The repository includes comprehensive CI workflows in .github/workflows/test.yml that:

Test on Ubuntu and Windows
Validate distribution files are up-to-date
Test scanning directories and container images
Verify all SBOM formats
Test sub-actions (download-syft, publish-sbom)

Manual testing:

Test changes in your own workflows using the repository name and branch:

- uses: your-username/sbom-action@your-branch
  with:
    path: ./

Or test locally using act if you have it installed.

Action runtime

The sbom-action uses the Node.js 20 runtime (runs.using: node20 in action.yml). This runtime is provided by GitHub Actions and doesn’t require separate installation in workflows.

Next Steps

Understanding the Codebase

SBOM Action Repository - Source code and issue tracker
Syft Documentation - The underlying SBOM generation tool that sbom-action uses

Contributing Your Work

Pull Requests - Guidelines for submitting PRs and working with reviewers
Issues and Discussions - Where to get help and report issues

Finding Work

Good First Issues - Beginner-friendly issues

Getting Help

Anchore Discourse - Community discussions and questions

5.10 - Security Policy

How to report security vulnerabilities in Anchore OSS projects

Security is a top priority for Anchore’s open source projects. We appreciate the security research community’s efforts in responsibly disclosing vulnerabilities to help keep our users safe.

Supported Versions

Security updates are applied only to the most recent release of each project. We strongly recommend staying up to date with the latest versions to ensure you have the most recent security patches and fixes.

If you’re using an older version and concerned about a security issue, please upgrade to the latest release. For questions about specific versions, reach out on Discourse.

Reporting a Vulnerability

Found a security vulnerability? Please report security issues privately by emailing security@anchore.com rather than creating a public GitHub issue. This gives us time to fix the problem and protect users before details become public.

What to Include in Your Report

To help us understand and address the issue quickly, please include as much detail as you can:

Description: A clear description of the vulnerability and its potential impact
Steps to reproduce: Detailed steps to recreate the issue
Affected versions: Which versions of the tool are vulnerable
Proof of concept: If available, a minimal example demonstrating the issue
Suggested mitigation: If you have ideas for how to fix or mitigate the issue
Urgency level: Your assessment of the severity (Critical, High, Medium, or Low)

Don’t worry if you can’t provide every detail –partial reports are still valuable and welcome. We’ll work with you to understand the issue.

What to Expect

After you submit a report:

Acknowledgment: You’ll receive an initial response confirming we’ve received your report
Assessment: The security team will investigate and assess the severity and impact
Updates: We’ll keep you informed of our progress and any questions we have
Resolution: Once a fix is developed, if necessary, we’ll coordinate disclosure timing with you
Credit: With your permission, we’ll acknowledge your responsible disclosure in release notes

Disclosure Policy

Anchore follows a coordinated disclosure process:

Security issues are addressed privately until a fix is available
Fixes are released as quickly as possible based on severity
Security advisories are published after fixes are released
Credit is given to security researchers who report responsibly

Thank you for helping keep Anchore’s open source projects and their users secure.

5.11 - Code of Conduct

Community standards and guidelines for respectful collaboration

All Anchore open source projects follow the Contributor Covenant Code of Conduct.

Our Pledge

We as members, contributors, and leaders pledge to make participation in our community a harassment-free experience for everyone, regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, religion, or sexual identity and orientation.

We pledge to act and interact in ways that contribute to an open, welcoming, diverse, inclusive, and healthy community.

Our Standards

Examples of behavior that contributes to a positive environment for our community include:

Demonstrating empathy and kindness toward other people
Being respectful of differing opinions, viewpoints, and experiences
Giving and gracefully accepting constructive feedback
Accepting responsibility and apologizing to those affected by our mistakes, and learning from the experience
Focusing on what is best not just for us as individuals, but for the overall community

Examples of unacceptable behavior include:

The use of sexualized language or imagery, and sexual attention or advances of any kind
Trolling, insulting or derogatory comments, and personal or political attacks
Public or private harassment
Publishing others’ private information, such as a physical or email address, without their explicit permission
Other conduct which could reasonably be considered inappropriate in a professional setting

Enforcement Responsibilities

Community leaders are responsible for clarifying and enforcing our standards of acceptable behavior and will take appropriate and fair corrective action in response to any behavior that they deem inappropriate, threatening, offensive, or harmful.

Community leaders have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, and will communicate reasons for moderation decisions when appropriate.

Scope

This Code of Conduct applies within all community spaces, and also applies when an individual is officially representing the community in public spaces. Examples of representing our community include using an official email address, posting via an official social media account, or acting as an appointed representative at an online or offline event.

Enforcement

Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the community leaders responsible for enforcement at opensource@anchore.com.

All complaints will be reviewed and investigated promptly and fairly.

All community leaders are obligated to respect the privacy and security of the reporter of any incident.

Enforcement Guidelines

Community leaders will follow these Community Impact Guidelines in determining the consequences for any action they deem in violation of this Code of Conduct:

1. Warning

Community Impact: Use of inappropriate language or other behavior deemed unprofessional or unwelcome in the community.

Consequence: The original post will be edited or removed and a warning issued to the offender.

2. Temporary Ban

Community Impact: A serious violation of community standards, including sustained inappropriate behavior.

Consequence: A temporary ban from any sort of interaction or public communication with the community for a specified period of time. No public or private interaction with the people involved, including unsolicited interaction with those enforcing the Code of Conduct, is allowed during this period. Violating these terms may lead to a permanent ban.

3. Permanent Ban

Community Impact: Demonstrating a pattern of violation of community standards, including sustained inappropriate behavior, harassment of an individual, or aggression toward or disparagement of classes of individuals.

Consequence: A permanent ban from any sort of public interaction within the community.

Attribution

This Code of Conduct is adapted from the Contributor Covenant, version 2.0, available at https://www.contributor-covenant.org/version/2/0/code_of_conduct.html.

Community Impact Guidelines were inspired by Mozilla’s code of conduct enforcement ladder.

For answers to common questions about this code of conduct, see the FAQ at https://www.contributor-covenant.org/faq. Translations are available at https://www.contributor-covenant.org/translations.

5.12 - Scan Action

Developer guidelines when contributing to scan-action

Getting started

In order to test and develop in the scan-action repo you will need the following dependencies installed:

Node.js (>= 20.11.0)
npm
Docker

Initial setup

Run once after cloning to install dependencies and development tools:

npm install

This command installs all dependencies and sets up Husky git hooks that automatically format code and rebuild the distribution files before commits.

Useful commands

Common commands for ongoing development:

npm run build - Bundle with ncc and normalize line endings
npm run lint - Check code with ESLint
npm run prettier - Auto-format code with Prettier
npm test - Complete test suite (lint + install Grype + build + run tests)
npm run run-tests - Run Jest tests only
npm run test:update-snapshots - Update test expectations (lint + install Grype + run tests with snapshot updates)
npm run audit - Run security audit on production dependencies
npm run update-deps - Update dependencies with npm-check-updates

Testing

Tests require Grype to be installed locally and a Docker registry for integration tests. Set up your test environment:

Install Grype locally:

npm run install-and-update-grype

Start local Docker registry:

docker run -d -p 5000:5000 --name registry registry:2

Tests automatically disable Grype database auto-update and validation to ensure consistent test results.

CI environment:

The GitHub Actions test workflow automatically:

Starts a Docker registry service on port 5000
Tests on Ubuntu, Windows, and macOS
Validates across multiple configurations (image/path/sbom sources, output formats)

Test types

The scan-action uses Jest for testing with several categories:

Unit tests (e.g., tests/action.test.js, tests/grype_command.test.js): Test individual functions in isolation by mocking GitHub Actions context and external dependencies.
Integration tests: Execute the full action workflow with real Grype invocations. These tests validate end-to-end functionality including downloading Grype, running scans, and generating output files.
SARIF validation tests (tests/sarif_output.test.js): Validate SARIF report structure and content using the @microsoft/jest-sarif library to ensure consistent output format and compliance with the SARIF specification.
Distribution tests (tests/dist.test.js): Verify that the committed dist/ directory is up-to-date with the source code.

Test fixtures:

The tests/fixtures/ directory contains sample projects and files for testing:

npm-project/ - Sample npm project for directory scanning
yarn-project/ - Sample yarn project for directory scanning
test_sbom.spdx.json - Sample SBOM file for SBOM scanning tests

SARIF output testing

The SARIF output tests validate report structure using the @microsoft/jest-sarif library. Tests normalize dynamic values (versions, fully qualified names) before validation to ensure consistent results across test runs.

The tests validate that:

Generated SARIF reports are valid according to the SARIF specification
Expected vulnerabilities are detected in test fixtures
Output structure remains consistent across runs

If you need to update test expectations, run:

npm run test:update-snapshots

Important: Always manually review test changes before committing. Tests capture expected behavior, so changes should be intentional and correct.

Development workflow

Pre-commit hooks

The scan-action uses Husky to run automated checks before each commit:

Code formatting - lint-staged runs Prettier on staged JavaScript files
Distribution rebuild - Runs npm run precommit to rebuild dist/ directory
Auto-staging - Automatically stages updated dist/ files

The hook is defined in .husky/pre-commit and ensures that distribution files are always synchronized with source code.

Why commit dist/?

GitHub Actions can’t install dependencies or compile code at runtime. The action must include pre-built JavaScript files in the dist/ directory. The ncc compiler bundles all source code and dependencies into standalone JavaScript files.

Code organization

The scan-action has a straightforward single-file architecture:

Main action (action.yml):

Entry point: index.js
Compiled to: dist/index.js
Downloads Grype, runs vulnerability scans, generates reports

Download Grype sub-action (download-grype/action.yml):

Entry point: Reuses dist/index.js with run: "download-grype" input
Provides standalone Grype download and caching
Returns cmd output with path to Grype binary

Key functions in index.js:

downloadGrype() - Downloads Grype using install script
downloadGrypeWindowsWorkaround() - Windows-specific download logic
installGrype() - Installs and caches Grype binary
sourceInput() - Validates mutually exclusive inputs (image/path/sbom)
run() - Main action execution flow
Command construction and output handling

GitHub Actions specifics

Debugging Actions

Enable detailed debug logging by setting a repository secret:

Go to your repository Settings → Secrets and variables → Actions
Add a new secret: ACTIONS_STEP_DEBUG = true

This enables debug logging from the @actions/toolkit libraries used throughout the action.

See the GitHub documentation for more details.

Testing Actions locally

CI validation:

The repository includes comprehensive CI workflows in .github/workflows/test.yml that:

Test on Ubuntu, Windows, and macOS
Validate distribution files are up-to-date
Test scanning images, directories, and SBOM files
Verify all output formats (SARIF, JSON, CycloneDX, table)
Test download-grype sub-action

Manual testing:

Test changes in your own workflows using the repository name and branch:

- uses: <your-username>/scan-action@<your-branch>
  with:
    image: "alpine:latest"

Or test locally using act if you have it installed.

Action runtime

The scan-action uses the Node.js 20 runtime (runs.using: node20 in action.yml). This runtime is provided by GitHub Actions and doesn’t require separate installation in workflows.

Next Steps

Understanding the Codebase

Scan Action Repository - Source code and issue tracker
Grype Documentation - Learn about the underlying vulnerability scanner that scan-action uses

Contributing Your Work

Pull Requests - Guidelines for submitting PRs and working with reviewers
Issues and Discussions - Where to get help and report issues

Finding Work

Good First Issues - Beginner-friendly issues

Getting Help

Anchore Discourse - Community discussions and questions

5.13 - Docs (this site!)

Style guide for writing Anchore OSS documentation

This style guide is for the Anchore OSS documentation. The style guide helps contributors to write documentation that readers can understand quickly and correctly.

The Anchore OSS docs aim for:

Consistency in style and terminology, so that readers can expect certain structures and conventions. Readers don’t have to keep re-learning how to use the documentation or questioning whether they’ve understood something correctly.
Clear, concise writing so that readers can quickly find and understand the information they need.

Use standard American spelling

Use American spelling rather than Commonwealth or British spelling. Refer to Merriam-Webster’s Collegiate Dictionary, Eleventh Edition.

Use capital letters sparingly

Some hints:

Capitalize only the first letter of each heading within the page. (That is, use sentence case.)
Capitalize (almost) every word in page titles. (That is, use title case.) The little words like “and”, “in”, etc, don’t get a capital letter.
In page content, use capitals only for brand names, like Syft, Anchore, and so on. See more about brand names below.
Don’t use capital letters to emphasize words.

Spell out abbreviations and acronyms on first use

Always spell out the full term for every abbreviation or acronym the first time you use it on the page. Don’t assume people know what an abbreviation or acronym means, even if it seems like common knowledge.

Example: “To run Grype locally in a virtual machine (VM)”

Use contractions if you want to

For example, it’s fine to write “it’s” instead of “it is”.

Use full, correct brand names

When referring to a product or brand, use the full name. Capitalize the name as the product owners do in the product documentation. Do not use abbreviations even if they’re in common use, unless the product owner has sanctioned the abbreviation.

Use this	Instead of this
Anchore	anchore
Kubernetes	k8s
GitHub	github

Be consistent with punctuation

Use punctuation consistently within a page. For example, if you use a period (full stop) after every item in list, then use a period on all other lists on the page.

Check the other pages if you’re unsure about a particular convention.

Examples:

Most pages in the Anchore OSS docs use a period at the end of every list item.
There is no period at the end of the page subtitle and the subtitle need not be a full sentence. (The subtitle comes from the description in the front matter of each page.)

Use active voice rather than passive voice

Passive voice is often confusing, as it’s not clear who should perform the action.

Use active voice	Instead of passive voice
You can configure Grype to	Grype can be configured to
Add the directory to your path	The directory should be added to your path

Use simple present tense

Avoid future tense (“will”) and complex syntax such as conjunctive mood (“would”, “should”).

Use simple present tense	Instead of future tense or complex syntax
The following command provisions a virtual machine	The following command will provision a virtual machine
If you add this configuration element, the system is open to the Internet	If you added this configuration element, the system would be open to the Internet

Exception: Use future tense if it’s necessary to convey the correct meaning. This requirement is rare.

Address the audience directly

Using “we” in a sentence can be confusing, because the reader may not know whether they’re part of the “we” you’re describing.

For example, compare the following two statements:

“In this release we’ve added many new features.”
“In this tutorial we build a flying saucer.”

The words “the developer” or “the user” can be ambiguous. For example, if the reader is building a product that also has users, then the reader does not know whether you’re referring to the reader or the users of their product.

Address the reader directly	Instead of "we", "the user", or "the developer"
Include the directory in your path	The user must make sure that the directory is included in their path
In this tutorial you build a flying saucer	In this tutorial we build a flying saucer

Use short, simple sentences

Keep sentences short. Short sentences are easier to read than long ones. Below are some tips for writing short sentences.

Use fewer words instead of many words that convey the same meaning
Use this	Instead of this
You can use	It is also possible to use
You can	You are able to

Split a single long sentence into two or more shorter ones
Use this	Instead of this
You do not need a running GKE cluster. The deployment process creates a cluster for you	You do not need a running GKE cluster, because the deployment process creates a cluster for you

Use a list instead of a long sentence showing various options

Use this

Instead of this

To scan a container for vulnerabilities:

Package the software in an OCI container.
Upload the container to an online registry.
Run Grype with the container name as a parameter.

To scan a container, you must package the software in an OCI container, upload the container to an online registry, and run Grype with the container name as a parameter.

Avoid too much text styling

Use bold text when referring to UI controls or other UI elements.

Use code style for:

filenames, directories, and paths
inline code and commands
object field names

Avoid using bold text or capital letters for emphasis. If a page has too much textual highlighting it becomes confusing and even annoying.

Use angle brackets for placeholders

For example:

export SYFT_PARALLELISM=<number>
--email <your email address>

Style your images

The Anchore OSS docs recognize Bootstrap classes to style images and other content.

The following code snippet shows the typical styling that makes an image show up nicely on the page:

<!-- for wide images -->
<img src="/images/my-image.png" alt="My image" class="mt-3 mb-3 border rounded" />

<!-- for tall images -->
<img src="/images/my-image.png" alt="My image" class="mt-3 mb-3 border rounded" style="width: 100%; max-width: 30em" />

To see some examples of styled images, take a look at the Kubeflow OAuth setup page.

For more help, see the guide to Bootstrap image styling and the Bootstrap utilities, such as borders.

A detailed style guide

The Google Developer Documentation Style Guide contains detailed information about specific aspects of writing clear, readable, succinct documentation for a developer audience.

Next steps

Take a look at the documentation README for guidance on contributing to the Anchore OSS docs.

6 - Reference

Reference for Anchore OSS Tools

6.1 - Syft Command Line Reference

Note

This documentation was generated with Syft version 1.54.0.

Generate a packaged-based Software Bill Of Materials (SBOM) from container images and filesystems

Usage:
  syft [SOURCE] [flags]
  syft [command]

Examples:
  syft scan alpine:latest                                a summary of discovered packages
  syft scan alpine:latest -o json                        show all possible cataloging details
  syft scan alpine:latest -o cyclonedx                   show a CycloneDX formatted SBOM
  syft scan alpine:latest -o cyclonedx-json              show a CycloneDX JSON formatted SBOM
  syft scan alpine:latest -o spdx                        show a SPDX 2.3 Tag-Value formatted SBOM
  syft scan alpine:latest -o spdx@2.2                    show a SPDX 2.2 Tag-Value formatted SBOM
  syft scan alpine:latest -o spdx-json                   show a SPDX 2.3 JSON formatted SBOM
  syft scan alpine:latest -o spdx-json@2.2               show a SPDX 2.2 JSON formatted SBOM
  syft scan alpine:latest -vv                            show verbose debug information
  syft scan alpine:latest -o template -t my_format.tmpl  show a SBOM formatted according to given template file

  Supports the following image sources:
    syft scan yourrepo/yourimage:tag     defaults to using images from a Docker daemon. If Docker is not present, the image is pulled directly from the registry.
    syft scan path/to/a/file/or/dir      a Docker tar, OCI tar, OCI directory, SIF container, or generic filesystem directory

  You can also explicitly specify the scheme to use:
    syft scan docker:yourrepo/yourimage:tag            explicitly use the Docker daemon
    syft scan podman:yourrepo/yourimage:tag            explicitly use the Podman daemon
    syft scan registry:yourrepo/yourimage:tag          pull image directly from a registry (no container runtime required)
    syft scan docker-archive:path/to/yourimage.tar     use a tarball from disk for archives created from "docker save"
    syft scan oci-archive:path/to/yourimage.tar        use a tarball from disk for OCI archives (from Skopeo or otherwise)
    syft scan oci-dir:path/to/yourimage                read directly from a path on disk for OCI layout directories (from Skopeo or otherwise)
    syft scan singularity:path/to/yourimage.sif        read directly from a Singularity Image Format (SIF) container on disk
    syft scan oci-model-registry:ai/llama3.2           scan an OCI model artifact from a registry (e.g. Docker Hub AI models)
    syft scan dir:path/to/yourproject                  read directly from a path on disk (any directory)
    syft scan file:path/to/yourproject/file            read directly from a path on disk (any single file)


Available Commands:
  attest      Generate an SBOM as an attestation for the given [SOURCE] container image
  cataloger   Show available catalogers and configuration
  completion  Generate the autocompletion script for the specified shell
  config      show the syft configuration
  convert     Convert between SBOM formats
  help        Help about any command
  login       Log in to a registry
  scan        Generate an SBOM
  version     show version information

Flags:
      --base-path string                          base directory for scanning, no links will be followed above this directory, and all paths will be reported relative to this directory
  -c, --config stringArray                        syft configuration file(s) to use
      --enrich stringArray                        enable package data enrichment from local and online sources (options: all, golang, java, javascript, python, vcpkg)
      --exclude stringArray                       exclude paths from being scanned using a glob expression
      --file string                               file to write the default report output to (default is STDOUT) (DEPRECATED: use: --output FORMAT=PATH)
      --from stringArray                          specify the source behavior to use (e.g. docker, registry, oci-dir, ...)
  -h, --help                                      help for syft
  -o, --output stringArray                        report output format (<format>=<file> to output to a file), formats=[cyclonedx-json cyclonedx-xml github-json purls spdx-json spdx-tag-value syft-json syft-table syft-text template] (default [syft-table])
      --override-default-catalogers stringArray   set the base set of catalogers to use (defaults to 'image' or 'directory' depending on the scan source)
      --parallelism int                           number of cataloger workers to run in parallel
      --platform string                           an optional platform specifier for container image sources (e.g. 'linux/arm64', 'linux/arm64/v8', 'arm64', 'linux')
      --profile stringArray                       configuration profiles to use
  -q, --quiet                                     suppress all logging output
  -s, --scope string                              selection of layers to catalog, options=[squashed all-layers deep-squashed] (default "squashed")
      --select-catalogers stringArray             add, remove, and filter the catalogers to be used
      --source-name string                        set the name of the target being analyzed
      --source-supplier string                    the organization that supplied the component, which often may be the manufacturer, distributor, or repackager
      --source-version string                     set the version of the target being analyzed
  -t, --template string                           specify the path to a Go template file
  -v, --verbose count                             increase verbosity (-v = info, -vv = debug)
      --version                                   version for syft

Use "syft [command] --help" for more information about a command.

`syft attest`

Generate a packaged-based Software Bill Of Materials (SBOM) from a container image as the predicate of an in-toto attestation that will be uploaded to the image registry.

Usage:
  syft attest --output [FORMAT] <IMAGE> [flags]

Examples:
  syft attest --output [FORMAT] alpine:latest            defaults to using images from a Docker daemon. If Docker is not present, the image is pulled directly from the registry

  You can also explicitly specify the scheme to use:
    syft attest docker:yourrepo/yourimage:tag            explicitly use the Docker daemon
    syft attest podman:yourrepo/yourimage:tag            explicitly use the Podman daemon
    syft attest registry:yourrepo/yourimage:tag          pull image directly from a registry (no container runtime required)
    syft attest docker-archive:path/to/yourimage.tar     use a tarball from disk for archives created from "docker save"
    syft attest oci-archive:path/to/yourimage.tar        use a tarball from disk for OCI archives (from Skopeo or otherwise)
    syft attest oci-dir:path/to/yourimage                read directly from a path on disk for OCI layout directories (from Skopeo or otherwise)
    syft attest singularity:path/to/yourimage.sif        read directly from a Singularity Image Format (SIF) container on disk


Flags:
      --base-path string                          base directory for scanning, no links will be followed above this directory, and all paths will be reported relative to this directory
      --enrich stringArray                        enable package data enrichment from local and online sources (options: all, golang, java, javascript, python, vcpkg)
      --exclude stringArray                       exclude paths from being scanned using a glob expression
      --from stringArray                          specify the source behavior to use (e.g. docker, registry, oci-dir, ...)
  -h, --help                                      help for attest
  -k, --key string                                the key to use for the attestation
  -o, --output stringArray                        report output format (<format>=<file> to output to a file), formats=[cyclonedx-json cyclonedx-xml github-json purls spdx-json spdx-tag-value syft-json syft-table syft-text template] (default [syft-json])
      --override-default-catalogers stringArray   set the base set of catalogers to use (defaults to 'image' or 'directory' depending on the scan source)
      --parallelism int                           number of cataloger workers to run in parallel
      --platform string                           an optional platform specifier for container image sources (e.g. 'linux/arm64', 'linux/arm64/v8', 'arm64', 'linux')
  -s, --scope string                              selection of layers to catalog, options=[squashed all-layers deep-squashed] (default "squashed")
      --select-catalogers stringArray             add, remove, and filter the catalogers to be used
      --source-name string                        set the name of the target being analyzed
      --source-supplier string                    the organization that supplied the component, which often may be the manufacturer, distributor, or repackager
      --source-version string                     set the version of the target being analyzed

`syft cataloger list`

List available catalogers.

Usage:
  syft cataloger list [OPTIONS] [flags]

Flags:
  -h, --help                                      help for list
  -o, --output string                             format to output the cataloger list (available: table, json)
      --override-default-catalogers stringArray   set the base set of catalogers to use (defaults to 'image' or 'directory' depending on the scan source) (default [all])
      --select-catalogers stringArray             add, remove, and filter the catalogers to be used
  -s, --show-hidden                               show catalogers that have been de-selected

`syft config`

Show the syft configuration.

Usage:
  syft config [flags]
  syft config [command]

Available Commands:
  locations   shows all locations and the order in which syft will look for a configuration file

Flags:
  -h, --help   help for config
      --load   load and validate the syft configuration

`syft convert`

[Experimental] Convert SBOM files to, and from, SPDX, CycloneDX and Syft’s format. For more info about data loss between formats see https://github.com/anchore/syft/wiki/format-conversion.

Usage:
  syft convert [SOURCE-SBOM] -o [FORMAT] [flags]

Examples:
  syft convert img.syft.json -o spdx-json                      convert a syft SBOM to spdx-json, output goes to stdout
  syft convert img.syft.json -o cyclonedx-json=img.cdx.json    convert a syft SBOM to CycloneDX, output is written to the file "img.cdx.json"
  syft convert - -o spdx-json                                  convert an SBOM from STDIN to spdx-json
  SYFT_CONVERT_PASSTHROUGH_EXACT_FORMAT=true syft convert img.syft.json -o syft-json=out.syft.json    copy the input to "out.syft.json" unchanged if it is already syft-json at the current schema version


Flags:
      --file string          file to write the default report output to (default is STDOUT) (DEPRECATED: use: --output FORMAT=PATH)
  -h, --help                 help for convert
  -o, --output stringArray   report output format (<format>=<file> to output to a file), formats=[cyclonedx-json cyclonedx-xml github-json purls spdx-json spdx-tag-value syft-json syft-table syft-text template] (default [syft-table])
  -t, --template string      specify the path to a Go template file

`syft login`

Usage:
  syft login [OPTIONS] [SERVER] [flags]

Examples:
  # Log in to reg.example.com
  syft login reg.example.com -u AzureDiamond -p hunter2

Flags:
  -h, --help              help for login
  -p, --password string   Password
      --password-stdin    Take the password from stdin
  -u, --username string   Username

`syft scan`

Generate a packaged-based Software Bill Of Materials (SBOM) from container images and filesystems.

Usage:
  syft scan [SOURCE] [flags]

Examples:
  syft scan alpine:latest                                a summary of discovered packages
  syft scan alpine:latest -o json                        show all possible cataloging details
  syft scan alpine:latest -o cyclonedx                   show a CycloneDX formatted SBOM
  syft scan alpine:latest -o cyclonedx-json              show a CycloneDX JSON formatted SBOM
  syft scan alpine:latest -o spdx                        show a SPDX 2.3 Tag-Value formatted SBOM
  syft scan alpine:latest -o spdx@2.2                    show a SPDX 2.2 Tag-Value formatted SBOM
  syft scan alpine:latest -o spdx-json                   show a SPDX 2.3 JSON formatted SBOM
  syft scan alpine:latest -o spdx-json@2.2               show a SPDX 2.2 JSON formatted SBOM
  syft scan alpine:latest -vv                            show verbose debug information
  syft scan alpine:latest -o template -t my_format.tmpl  show a SBOM formatted according to given template file

  Supports the following image sources:
    syft scan yourrepo/yourimage:tag     defaults to using images from a Docker daemon. If Docker is not present, the image is pulled directly from the registry.
    syft scan path/to/a/file/or/dir      a Docker tar, OCI tar, OCI directory, SIF container, or generic filesystem directory

  You can also explicitly specify the scheme to use:
    syft scan docker:yourrepo/yourimage:tag            explicitly use the Docker daemon
    syft scan podman:yourrepo/yourimage:tag            explicitly use the Podman daemon
    syft scan registry:yourrepo/yourimage:tag          pull image directly from a registry (no container runtime required)
    syft scan docker-archive:path/to/yourimage.tar     use a tarball from disk for archives created from "docker save"
    syft scan oci-archive:path/to/yourimage.tar        use a tarball from disk for OCI archives (from Skopeo or otherwise)
    syft scan oci-dir:path/to/yourimage                read directly from a path on disk for OCI layout directories (from Skopeo or otherwise)
    syft scan singularity:path/to/yourimage.sif        read directly from a Singularity Image Format (SIF) container on disk
    syft scan oci-model-registry:ai/llama3.2           scan an OCI model artifact from a registry (e.g. Docker Hub AI models)
    syft scan dir:path/to/yourproject                  read directly from a path on disk (any directory)
    syft scan file:path/to/yourproject/file            read directly from a path on disk (any single file)


Flags:
      --base-path string                          base directory for scanning, no links will be followed above this directory, and all paths will be reported relative to this directory
      --enrich stringArray                        enable package data enrichment from local and online sources (options: all, golang, java, javascript, python, vcpkg)
      --exclude stringArray                       exclude paths from being scanned using a glob expression
      --file string                               file to write the default report output to (default is STDOUT) (DEPRECATED: use: --output FORMAT=PATH)
      --from stringArray                          specify the source behavior to use (e.g. docker, registry, oci-dir, ...)
  -h, --help                                      help for scan
  -o, --output stringArray                        report output format (<format>=<file> to output to a file), formats=[cyclonedx-json cyclonedx-xml github-json purls spdx-json spdx-tag-value syft-json syft-table syft-text template] (default [syft-table])
      --override-default-catalogers stringArray   set the base set of catalogers to use (defaults to 'image' or 'directory' depending on the scan source)
      --parallelism int                           number of cataloger workers to run in parallel
      --platform string                           an optional platform specifier for container image sources (e.g. 'linux/arm64', 'linux/arm64/v8', 'arm64', 'linux')
  -s, --scope string                              selection of layers to catalog, options=[squashed all-layers deep-squashed] (default "squashed")
      --select-catalogers stringArray             add, remove, and filter the catalogers to be used
      --source-name string                        set the name of the target being analyzed
      --source-supplier string                    the organization that supplied the component, which often may be the manufacturer, distributor, or repackager
      --source-version string                     set the version of the target being analyzed
  -t, --template string                           specify the path to a Go template file

`syft version`

Show version information.

Usage:
  syft version [flags]

Flags:
  -h, --help            help for version
  -o, --output string   the format to show the results (allowable: [text json]) (default "text")

6.2 - Syft Configuration Reference

Note

This documentation was generated with Syft version 1.54.0.

Syft searches for configuration files in the following locations, in order:

./.syft.yaml - current working directory
./.syft/config.yaml - app subdirectory in current working directory
~/.syft.yaml - home directory
$XDG_CONFIG_HOME/syft/config.yaml - XDG config directory

The configuration file can use either .yaml or .yml extensions. The first configuration file found will be used.

For general information about how config and environment variables are handled, see the Configuration Reference section.

log:
  # suppress all logging output (env: SYFT_LOG_QUIET)
  quiet: false

  # explicitly set the logging level (available: [error warn info debug trace]) (env: SYFT_LOG_LEVEL)
  level: "warn"

  # file path to write logs to (env: SYFT_LOG_FILE)
  file: ""

dev:
  # capture resource profiling data (available: [cpu, mem, ...]) (env: SYFT_DEV_PROFILE)
  profile: ""

# the configuration file(s) used to load application configuration (env: SYFT_CONFIG)
config: ""

# the output format(s) of the SBOM report (options: syft-table, syft-text, syft-json, spdx-json, ...)
# to specify multiple output files in differing formats, use a list:
# output:
#   - "syft-json=<syft-json-output-file>"
#   - "spdx-json=<spdx-json-output-file>" (env: SYFT_OUTPUT)
output:
  - "syft-table"

format:
  # default value for all formats that support the "pretty" option (default is unset) (env: SYFT_FORMAT_PRETTY)
  pretty:

  template:
    # path to the template file to use when rendering the output with the template output format.
    # Note that all template paths are based on the current syft-json schema (env: SYFT_FORMAT_TEMPLATE_PATH)
    path: ""

    # if true, uses the go structs for the syft-json format for templating.
    # if false, uses the syft-json output for templating (which follows the syft JSON schema exactly).
    #
    # Note: long term support for this option is not guaranteed (it may change or break at any time) (env: SYFT_FORMAT_TEMPLATE_LEGACY)
    legacy: false

  json:
    # transform any syft-json output to conform to an approximation of the v11.0.1 schema. This includes:
    # - using the package metadata type names from before v12 of the JSON schema (changed in https://github.com/anchore/syft/pull/1983)
    #
    # Note: this will still include package types and fields that were added at or after json schema v12. This means
    # that output might not strictly be json schema v11 compliant, however, for consumers that require time to port
    # over to the final syft 1.0 json output this option can be used to ease the transition.
    #
    # Note: long term support for this option is not guaranteed (it may change or break at any time) (env: SYFT_FORMAT_JSON_LEGACY)
    legacy: false

    # include space indentation and newlines
    # note: inherits default value from 'format.pretty' or 'false' if parent is unset (env: SYFT_FORMAT_JSON_PRETTY)
    pretty:

  spdx-json:
    # include space indentation and newlines
    # note: inherits default value from 'format.pretty' or 'false' if parent is unset (env: SYFT_FORMAT_SPDX_JSON_PRETTY)
    pretty:

  cyclonedx-json:
    # include space indentation and newlines
    # note: inherits default value from 'format.pretty' or 'false' if parent is unset (env: SYFT_FORMAT_CYCLONEDX_JSON_PRETTY)
    pretty:

  cyclonedx-xml:
    # include space indentation and newlines
    # note: inherits default value from 'format.pretty' or 'false' if parent is unset (env: SYFT_FORMAT_CYCLONEDX_XML_PRETTY)
    pretty:

# whether to check for an application update on start up or not (env: SYFT_CHECK_FOR_APP_UPDATE)
check-for-app-update: true

# set the base set of catalogers to use (defaults to 'image' or 'directory' depending on the scan source) (env: SYFT_DEFAULT_CATALOGERS)
default-catalogers: []

# add, remove, and filter the catalogers to be used (env: SYFT_SELECT_CATALOGERS)
select-catalogers: []

package:
  # search within archives that do not contain a file index to search against (tar, tar.gz, tar.bz2, etc)
  # note: enabling this may result in a performance impact since all discovered compressed tars will be decompressed
  # note: for now this only applies to the java package cataloger (env: SYFT_PACKAGE_SEARCH_UNINDEXED_ARCHIVES)
  search-unindexed-archives: false

  # search within archives that do contain a file index to search against (zip)
  # note: for now this only applies to the java package cataloger (env: SYFT_PACKAGE_SEARCH_INDEXED_ARCHIVES)
  search-indexed-archives: true

  # allows users to exclude synthetic binary packages from the sbom
  # these packages are removed if an overlap with a non-synthetic package is found (env: SYFT_PACKAGE_EXCLUDE_BINARY_OVERLAP_BY_OWNERSHIP)
  exclude-binary-overlap-by-ownership: true

license:
  # include the content of licenses in the SBOM for a given syft scan; valid values are: [all unknown none] (env: SYFT_LICENSE_CONTENT)
  content: "none"

  # adjust the percent as a fraction of the total text, in normalized words, that
  # matches any valid license for the given inputs, expressed as a percentage across all of the licenses matched. (env: SYFT_LICENSE_COVERAGE)
  coverage: 75

file:
  metadata:
    # select which files should be captured by the file-metadata cataloger and included in the SBOM.
    # Options include:
    #  - "all": capture all files from the search space
    #  - "owned-by-package": capture only files owned by packages
    #  - "none", "": do not capture any files (env: SYFT_FILE_METADATA_SELECTION)
    selection: "owned-by-package"

    # the file digest algorithms to use when cataloging files (options: "md5", "sha1", "sha224", "sha256", "sha384", "sha512") (env: SYFT_FILE_METADATA_DIGESTS)
    digests:
      - "sha1"
      - "sha256"

  content:
    # skip searching a file entirely if it is above the given size (default = 1MB; unit = bytes) (env: SYFT_FILE_CONTENT_SKIP_FILES_ABOVE_SIZE)
    skip-files-above-size: 256000

    # file globs for the cataloger to match on (env: SYFT_FILE_CONTENT_GLOBS)
    globs: []

  executable:
    # file globs for the cataloger to match on (env: SYFT_FILE_EXECUTABLE_GLOBS)
    globs: []

# selection of layers to catalog, options=[squashed all-layers deep-squashed] (env: SYFT_SCOPE)
scope: "squashed"

# number of cataloger workers to run in parallel
# by default, when set to 0: this will be based on runtime.NumCPU * 4, if set to less than 0 it will be unbounded (env: SYFT_PARALLELISM)
parallelism: 0

relationships:
  # include package-to-file relationships that indicate which files are owned by which packages (env: SYFT_RELATIONSHIPS_PACKAGE_FILE_OWNERSHIP)
  package-file-ownership: true

  # include package-to-package relationships that indicate one package is owned by another due to files claimed to be owned by one package are also evidence of another package's existence (env: SYFT_RELATIONSHIPS_PACKAGE_FILE_OWNERSHIP_OVERLAP)
  package-file-ownership-overlap: true

compliance:
  # action to take when a package is missing a name (env: SYFT_COMPLIANCE_MISSING_NAME)
  missing-name: "drop"

  # action to take when a package is missing a version (env: SYFT_COMPLIANCE_MISSING_VERSION)
  missing-version: "stub"

# Enable data enrichment operations, which can utilize services such as Maven Central and NPM.
# By default all enrichment is disabled, use: all to enable everything.
# Available options are: all, golang, java, javascript, python, vcpkg (env: SYFT_ENRICH)
enrich: []

cpp:
  # enables Syft to use clone remote repositories for vcpkg custom git registries.
  #  (also useful if the builtin vcpkg registry is not cloned locally) (env: SYFT_CPP_VCPKG_ALLOW_GIT_CLONE)
  vcpkg-allow-git-clone:

dotnet:
  # only keep dep.json packages which an executable on disk is found. The package is also included if a DLL is found for any child package, even if the package itself does not have a DLL. (env: SYFT_DOTNET_DEP_PACKAGES_MUST_HAVE_DLL)
  dep-packages-must-have-dll: false

  # only keep dep.json packages which have a runtime/resource DLL claimed in the deps.json targets section (but not necessarily found on disk). The package is also included if any child package claims a DLL, even if the package itself does not claim a DLL. (env: SYFT_DOTNET_DEP_PACKAGES_MUST_CLAIM_DLL)
  dep-packages-must-claim-dll: true

  # treat DLL claims or on-disk evidence for child packages as DLL claims or on-disk evidence for any parent package (env: SYFT_DOTNET_PROPAGATE_DLL_CLAIMS_TO_PARENTS)
  propagate-dll-claims-to-parents: true

  # show all packages from the deps.json if bundling tooling is present as a dependency (e.g. ILRepack) (env: SYFT_DOTNET_RELAX_DLL_CLAIMS_WHEN_BUNDLING_DETECTED)
  relax-dll-claims-when-bundling-detected: true

  # exclude packages with type "project" from deps.json output (these are internal project references, not NuGet packages) (env: SYFT_DOTNET_EXCLUDE_PROJECT_REFERENCES)
  exclude-project-references: true

golang:
  # search for go package licences in the GOPATH of the system running Syft, note that this is outside the
  # container filesystem and potentially outside the root of a local directory scan (env: SYFT_GOLANG_SEARCH_LOCAL_MOD_CACHE_LICENSES)
  search-local-mod-cache-licenses:

  # specify an explicit go mod cache directory, if unset this defaults to $GOPATH/pkg/mod or $HOME/go/pkg/mod (env: SYFT_GOLANG_LOCAL_MOD_CACHE_DIR)
  local-mod-cache-dir: "~/go/pkg/mod"

  # search for go package licences in the vendor folder on the system running Syft, note that this is outside the
  # container filesystem and potentially outside the root of a local directory scan (env: SYFT_GOLANG_SEARCH_LOCAL_VENDOR_LICENSES)
  search-local-vendor-licenses:

  # specify an explicit go vendor directory, if unset this defaults to ./vendor (env: SYFT_GOLANG_LOCAL_VENDOR_DIR)
  local-vendor-dir: ""

  # search for go package licences by retrieving the package from a network proxy (env: SYFT_GOLANG_SEARCH_REMOTE_LICENSES)
  search-remote-licenses:

  # remote proxy to use when retrieving go packages from the network,
  # if unset this defaults to $GOPROXY followed by https://proxy.golang.org (env: SYFT_GOLANG_PROXY)
  proxy: "https://proxy.golang.org,direct"

  # specifies packages which should not be fetched by proxy
  # if unset this defaults to $GONOPROXY (env: SYFT_GOLANG_NO_PROXY)
  no-proxy: ""

  main-module-version:
    # look for LD flags that appear to be setting a version (e.g. -X main.version=1.0.0) (env: SYFT_GOLANG_MAIN_MODULE_VERSION_FROM_LD_FLAGS)
    from-ld-flags: true

    # search for semver-like strings in the binary contents (env: SYFT_GOLANG_MAIN_MODULE_VERSION_FROM_CONTENTS)
    from-contents: false

    # use the build settings (e.g. vcs.version & vcs.time) to craft a v0 pseudo version
    # (e.g. v0.0.0-20220308212642-53e6d0aaf6fb) when a more accurate version cannot be found otherwise (env: SYFT_GOLANG_MAIN_MODULE_VERSION_FROM_BUILD_SETTINGS)
    from-build-settings: true

  # use the golang.org/x/tools/go/packages library, which executes golang tooling found on the path in addition to potential network access to get the most accurate results (env: SYFT_GOLANG_USE_PACKAGES_LIB)
  use-packages-lib:

  # capture function symbols from the binary symbol table (pclntab). valid values are:
  # "none" (disabled), "stdlib" (only the synthetic stdlib package), "extended-stdlib" (stdlib plus every
  # module under golang.org/x/), and "all" (all module packages plus stdlib) (env: SYFT_GOLANG_CAPTURE_SYMBOLS)
  capture-symbols: "none"

  # glob patterns matched against go module paths (e.g. github.com/klauspost/**) that should have symbols
  # captured in addition to whatever capture-symbols selects. ** crosses path separators, * does not.
  # a trailing major version suffix is ignored when matching, so github.com/foo/* covers github.com/foo/bar/v2;
  # spelling a suffix out in the pattern selects only that major version.
  # this can only widen the selection, never narrow it, and is inert when capture-symbols is none (env: SYFT_GOLANG_CAPTURE_SYMBOLS_MODULES)
  capture-symbols-modules: []

java:
  # enables Syft to use the network to fetch version and license information for packages when
  # a parent or imported pom file is not found in the local maven repository.
  # the pom files are downloaded from the remote Maven repository at 'maven-url' (env: SYFT_JAVA_USE_NETWORK)
  use-network:

  # use the local Maven repository to retrieve pom files. When Maven is installed and was previously used
  # for building the software that is being scanned, then most pom files will be available in this
  # repository on the local file system. this greatly speeds up scans. when all pom files are available
  # in the local repository, then 'use-network' is not needed.
  # TIP: If you want to download all required pom files to the local repository without running a full
  # build, run 'mvn help:effective-pom' before performing the scan with syft. (env: SYFT_JAVA_USE_MAVEN_LOCAL_REPOSITORY)
  use-maven-local-repository:

  # override the default location of the local Maven repository.
  # the default is the subdirectory '.m2/repository' in your home directory (env: SYFT_JAVA_MAVEN_LOCAL_REPOSITORY_DIR)
  maven-local-repository-dir: "~/.m2/repository"

  # maven repository to use, defaults to Maven central (env: SYFT_JAVA_MAVEN_URL)
  maven-url: "https://repo1.maven.org/maven2"

  # depth to recursively resolve parent POMs, no limit if <= 0 (env: SYFT_JAVA_MAX_PARENT_RECURSIVE_DEPTH)
  max-parent-recursive-depth: 0

  # resolve transient dependencies such as those defined in a dependency's POM on Maven central (env: SYFT_JAVA_RESOLVE_TRANSITIVE_DEPENDENCIES)
  resolve-transitive-dependencies: false

javascript:
  # enables Syft to use the network to fill in more detailed license information (env: SYFT_JAVASCRIPT_SEARCH_REMOTE_LICENSES)
  search-remote-licenses:

  # base NPM url to use (env: SYFT_JAVASCRIPT_NPM_BASE_URL)
  npm-base-url: "https://registry.npmjs.org"

  # include development-scoped dependencies (env: SYFT_JAVASCRIPT_INCLUDE_DEV_DEPENDENCIES)
  include-dev-dependencies:

linux-kernel:
  # whether to catalog linux kernel modules found within lib/modules/** directories (env: SYFT_LINUX_KERNEL_CATALOG_MODULES)
  catalog-modules: true

nix:
  # enumerate all files owned by packages found within Nix store paths (env: SYFT_NIX_CAPTURE_OWNED_FILES)
  capture-owned-files: false

python:
  # enables Syft to use the network to fill in more detailed license information (env: SYFT_PYTHON_SEARCH_REMOTE_LICENSES)
  search-remote-licenses:

  # base Pypi url to use (env: SYFT_PYTHON_PYPI_BASE_URL)
  pypi-base-url: ""

  # when running across entries in requirements.txt that do not specify a specific version
  # (e.g. "sqlalchemy >= 1.0.0, <= 2.0.0, != 3.0.0, <= 3.0.0"), attempt to guess what the version could
  # be based on the version requirements specified (e.g. "1.0.0"). When enabled the lowest expressible version
  # when given an arbitrary constraint will be used (even if that version may not be available/published). (env: SYFT_PYTHON_GUESS_UNPINNED_REQUIREMENTS)
  guess-unpinned-requirements: false

registry:
  # skip TLS verification when communicating with the registry (env: SYFT_REGISTRY_INSECURE_SKIP_TLS_VERIFY)
  insecure-skip-tls-verify: false

  # use http instead of https when connecting to the registry (env: SYFT_REGISTRY_INSECURE_USE_HTTP)
  insecure-use-http: false

  # Authentication credentials for specific registries. Each entry describes authentication for a specific authority:
  # - authority: the registry authority URL the URL to the registry (e.g. "docker.io", "localhost:5000", etc.) (env: SYFT_REGISTRY_AUTH_AUTHORITY)
  #  username: a username if using basic credentials (env: SYFT_REGISTRY_AUTH_USERNAME)
  #  password: a corresponding password (env: SYFT_REGISTRY_AUTH_PASSWORD)
  #  token: a token if using token-based authentication, mutually exclusive with username/password (env: SYFT_REGISTRY_AUTH_TOKEN)
  #  tls-cert: filepath to the client certificate used for TLS authentication to the registry (env: SYFT_REGISTRY_AUTH_TLS_CERT)
  #  tls-key: filepath to the client key used for TLS authentication to the registry (env: SYFT_REGISTRY_AUTH_TLS_KEY)
  auth: []

  # filepath to a CA certificate (or directory containing *.crt, *.cert, *.pem) used to generate the client certificate (env: SYFT_REGISTRY_CA_CERT)
  ca-cert: ""

# specify the source behavior to use (e.g. docker, registry, oci-dir, ...) (env: SYFT_FROM)
from: []

# an optional platform specifier for container image sources (e.g. 'linux/arm64', 'linux/arm64/v8', 'arm64', 'linux') (env: SYFT_PLATFORM)
platform: ""

source:
  # set the name of the target being analyzed (env: SYFT_SOURCE_NAME)
  name: ""

  # set the version of the target being analyzed (env: SYFT_SOURCE_VERSION)
  version: ""

  # the organization that supplied the component, which often may be the manufacturer, distributor, or repackager (env: SYFT_SOURCE_SUPPLIER)
  supplier: ""

  # (env: SYFT_SOURCE_SOURCE)
  source: ""

  # base directory for scanning, no links will be followed above this directory, and all paths will be reported relative to this directory (env: SYFT_SOURCE_BASE_PATH)
  base-path: ""

  file:
    # the file digest algorithms to use on the scanned file (options: "md5", "sha1", "sha224", "sha256", "sha384", "sha512") (env: SYFT_SOURCE_FILE_DIGESTS)
    digests:
      - "SHA-256"

  image:
    # allows users to specify which image source should be used to generate the sbom
    # valid values are: registry, docker, podman (env: SYFT_SOURCE_IMAGE_DEFAULT_PULL_SOURCE)
    default-pull-source: ""

    # (env: SYFT_SOURCE_IMAGE_MAX_LAYER_SIZE)
    max-layer-size: ""

# exclude paths from being scanned using a glob expression (env: SYFT_EXCLUDE)
exclude: []

unknowns:
  # remove unknown errors on files with discovered packages (env: SYFT_UNKNOWNS_REMOVE_WHEN_PACKAGES_DEFINED)
  remove-when-packages-defined: true

  # include executables without any identified packages (env: SYFT_UNKNOWNS_EXECUTABLES_WITHOUT_PACKAGES)
  executables-without-packages: true

  # include archives which were not expanded and searched (env: SYFT_UNKNOWNS_UNEXPANDED_ARCHIVES)
  unexpanded-archives: true

cache:
  # root directory to cache any downloaded content; empty string will use an in-memory cache (env: SYFT_CACHE_DIR)
  dir: "~/.cache/syft"

  # time to live for cached data; setting this to 0 will disable caching entirely (env: SYFT_CACHE_TTL)
  ttl: "7d"

# show catalogers that have been de-selected (env: SYFT_SHOW_HIDDEN)
show-hidden: false

attest:
  # the key to use for the attestation (env: SYFT_ATTEST_KEY)
  key: ""

  # password to decrypt to given private key
  # additionally responds to COSIGN_PASSWORD env var (env: SYFT_ATTEST_PASSWORD)
  password: ""

convert:
  # when a syft-json input SBOM already exactly matches the requested output format and schema version, copy it to that output unchanged instead of decoding and re-encoding it.
  # Note: this only applies to syft-json input, and only when the document's schema version is identical to the schema version this version of syft produces. Any other input is always converted.
  # Note: output written this way is a byte-for-byte copy of the input, so format options (such as 'format.pretty' or 'format.json.legacy') are not applied to it.
  # Note: to keep memory use minimal on large documents, give the input as a file path (or a shell redirect) and write the output with '-o <format>=<path>'. Piped input, or output to STDOUT, requires the whole document to be held in memory. (env: SYFT_CONVERT_PASSTHROUGH_EXACT_FORMAT)
  passthrough-exact-format: false

6.3 - JSON Schema

6.3.1 - Syft v16 JSON Schema Reference

Complete reference for Syft JSON schema version 16.1.11

Document

Represents the syft cataloging findings as a JSON document

Field Name	Type	Description
`artifacts`	`Array<Package>`	Artifacts is the list of packages discovered and placed into the catalog
`artifactRelationships`	`Array<Relationship>`
`files`	`Array<File>`	note: must have omitempty
`source`	`Source`	Source represents the original object that was cataloged
`distro`	`LinuxRelease`	Distro represents the Linux distribution that was detected from the source
`descriptor`	`Descriptor`	Descriptor is a block containing self-describing information about syft
`schema`	`Schema`	Schema is a block reserved for defining the version for the shape of this JSON document and where to find the schema document to validate the shape

Core Types

`CPE`

Represents a Common Platform Enumeration identifier used for matching packages to known vulnerabilities in security databases.

Field Name	Type	Description
`cpe`	`str`	Value is the CPE string identifier.
`source`	`str`	Source is the source where this CPE was obtained or generated from.

`ClassifierMatch`

Represents a single matched value within a binary file and the "class" name the search pattern represents.

Field Name	Type
`classifier`	`str`
`location`	`Location`

`Coordinates`

Contains the minimal information needed to describe how to find a file within any possible source object (e.g.

Field Name	Type	Description
`path`	`str`	RealPath is the canonical absolute form of the path accessed (all symbolic links have been followed and relative path components like '.' and '..' have been removed).
`layerID`	`str`	FileSystemID is an ID representing and entire filesystem. For container images, this is a layer digest. For directories or a root filesystem, this is blank.

`CpanDistribution`

Describes a CPAN distribution installed on disk, as recorded by a CPAN client's install.json and by the .packlist an installer wrote.

Field Name	Type	Description
`dist`	`str`	Dist is the distvname install.json recorded (e.g. URI-5.35), the raw value the package name and version were recovered from
`mainModule`	`str`	MainModule is the module name recovered from the .packlist path (e.g. LWP for libwww-perl). Empty when the name came from install.json, which is authoritative. Set, it means the name is the installer's NAME and may not be the distribution name.
`author`	`str`	Author is the PAUSE ID of the distribution author (e.g. OALDERS), parsed out of Path
`path`	`str`	Path is the raw PAUSE path of the release archive (e.g. O/OA/OALDERS/URI-5.35.tar.gz)
`modules`	`Array<CpanModule>`	Modules are the modules this distribution provides, sorted by name
`files`	`Array<str>`	Files are the paths the .packlist recorded as installed by this distribution, kept in the packlist's own order and unfiltered: a path the packlist claims and the filesystem lacks means the file was removed or overwritten out from under the installer, which is signal rather than noise

`CpanModule`

Is a single perl module provided by a CPAN distribution.

Field Name	Type	Description
`name`	`str`	Name is the module name as it would be used in a perl `use` statement (e.g. URI::Escape)
`version`	`str`	Version is the module version, which may differ from the distribution version

`CpanUnpackedRelease`

Describes an unpacked CPAN release found on disk, read from the release's own META.json or META.yml.

Field Name	Type	Description
`modules`	`Array<CpanModule>`	Modules are the modules the release declares it provides, sorted by name

`Descriptor`

Identifies the tool that generated this SBOM document, including its name, version, and configuration used during catalog generation.

Field Name	Type	Description
`name`	`str`	Name is the name of the tool that generated this SBOM (e.g., "syft").
`version`	`str`	Version is the version of the tool that generated this SBOM.
`configuration`	`unknown`	Configuration contains the tool configuration used during SBOM generation.

`Digest`

Represents a cryptographic hash of file contents.

Field Name	Type	Description
`algorithm`	`str`	Algorithm specifies the hash algorithm used (e.g., "sha256", "md5").
`value`	`str`	Value is the hexadecimal string representation of the hash.

`ELFSecurityFeatures`

Captures security hardening and protection mechanisms in ELF binaries.

Field Name	Type	Description
`symbolTableStripped`	`bool`	SymbolTableStripped indicates whether debugging symbols have been removed.
`stackCanary`	`bool`	StackCanary indicates whether stack smashing protection is enabled.
`nx`	`bool`	NoExecutable indicates whether NX (no-execute) protection is enabled for the stack.
`relRO`	`str`	RelocationReadOnly indicates the RELRO protection level.
`pie`	`bool`	PositionIndependentExecutable indicates whether the binary is compiled as PIE.
`dso`	`bool`	DynamicSharedObject indicates whether the binary is a shared library.
`safeStack`	`bool`	LlvmSafeStack represents a compiler-based security mechanism that separates the stack into a safe stack for storing return addresses and other critical data, and an unsafe stack for everything else, to mitigate stack-based memory corruption errors see https://clang.llvm.org/docs/SafeStack.html
`cfi`	`bool`	ControlFlowIntegrity represents runtime checks to ensure a program's control flow adheres to the legal paths determined at compile time, thus protecting against various types of control-flow hijacking attacks see https://clang.llvm.org/docs/ControlFlowIntegrity.html
`fortify`	`bool`	ClangFortifySource is a broad suite of extensions to libc aimed at catching misuses of common library functions see https://android.googlesource.com/platform//bionic/+/d192dbecf0b2a371eb127c0871f77a9caf81c4d2/docs/clang_fortify_anatomy.md

`Executable`

Contains metadata about binary files and their security features.

Field Name	Type	Description
`format`	`str`	Format denotes either ELF, Mach-O, or PE
`hasExports`	`bool`	HasExports indicates whether the binary exports symbols.
`hasEntrypoint`	`bool`	HasEntrypoint indicates whether the binary has an entry point function.
`importedLibraries`	`Array<str>`	ImportedLibraries lists the shared libraries required by this executable.
`elfSecurityFeatures`	`ELFSecurityFeatures`	ELFSecurityFeatures contains ELF-specific security hardening information when Format is ELF.

`File`

Represents a file discovered during cataloging with its metadata, content digests, licenses, and relationships to packages.

Field Name	Type	Description
`id`	`str`	ID is a unique identifier for this file within the SBOM.
`location`	`Coordinates`	Location is the file path and layer information where this file was found.
`metadata`	`FileMetadataEntry`	Metadata contains filesystem metadata such as permissions, ownership, and file type.
`contents`	`str`	Contents is the file contents for small files.
`digests`	`Array<Digest>`	Digests contains cryptographic hashes of the file contents.
`licenses`	`Array<FileLicense>`	Licenses contains license information discovered within this file.
`executable`	`Executable`	Executable contains executable metadata if this file is a binary.
`unknowns`	`Array<str>`	Unknowns contains unknown fields for forward compatibility.

`FileLicense`

Represents license information discovered within a file's contents or metadata, including the matched license text and SPDX expression.

Field Name	Type	Description
`value`	`str`	Value is the raw license identifier or text as found in the file.
`spdxExpression`	`str`	SPDXExpression is the parsed SPDX license expression.
`type`	`str`	Type is the license type classification (e.g., declared, concluded, discovered).
`evidence`	`FileLicenseEvidence`	Evidence contains supporting evidence for this license detection.

`FileLicenseEvidence`

Contains supporting evidence for a license detection in a file, including the byte offset, extent, and confidence level.

Field Name	Type	Description
`confidence`	`int`	Confidence is the confidence score for this license detection (0-100).
`offset`	`int`	Offset is the byte offset where the license text starts in the file.
`extent`	`int`	Extent is the length of the license text in bytes.

`FileMetadataEntry`

Contains filesystem-level metadata attributes such as permissions, ownership, type, and size for a cataloged file.

Field Name	Type	Description
`mode`	`int`	Mode is the Unix file permission mode in octal format.
`type`	`str`	Type is the file type (e.g., "RegularFile", "Directory", "SymbolicLink").
`linkDestination`	`str`	LinkDestination is the target path for symbolic links.
`userID`	`int`	UserID is the file owner user ID.
`groupID`	`int`	GroupID is the file owner group ID.
`mimeType`	`str`	MIMEType is the MIME type of the file contents.
`size`	`int`	Size is the file size in bytes.

`KeyValue`

Represents a single key-value pair.

Field Name	Type	Description
`key`	`str`	Key is the key name
`value`	`str`	Value is the value associated with the key

`License`

Represents software license information discovered for a package, including SPDX expressions and supporting evidence locations.

Field Name	Type	Description
`value`	`str`	Value is the raw license identifier or expression as found.
`spdxExpression`	`str`	SPDXExpression is the parsed SPDX license expression.
`type`	`str`	Type is the license type classification (e.g., declared, concluded, discovered).
`urls`	`Array<str>`	URLs are URLs where license text or information can be found.
`locations`	`Array<Location>`	Locations are file locations where this license was discovered.
`contents`	`str`	Contents is the full license text content.

`LinuxKernelModuleParameter`

Represents a configurable parameter for a kernel module with its type and description.

Field Name	Type	Description
`type`	`str`	Type is parameter data type (e.g. int, string, bool, array types)
`description`	`str`	Description is a human-readable parameter description explaining what the parameter controls

`LinuxRelease`

Contains Linux distribution identification and version information extracted from /etc/os-release or similar system files.

Field Name	Type	Description
`prettyName`	`str`	PrettyName is a human-readable operating system name with version.
`name`	`str`	Name is the operating system name without version information.
`id`	`str`	ID is the lower-case operating system identifier (e.g., "ubuntu", "rhel").
`idLike`	`IDLikes`	IDLike is a list of operating system IDs this distribution is similar to or derived from.
`version`	`str`	Version is the operating system version including codename if available.
`versionID`	`str`	VersionID is the operating system version number or identifier.
`versionCodename`	`str`	VersionCodename is the operating system release codename (e.g., "jammy", "bullseye").
`buildID`	`str`	BuildID is a build identifier for the operating system.
`imageID`	`str`	ImageID is an identifier for container or cloud images.
`imageVersion`	`str`	ImageVersion is the version for container or cloud images.
`variant`	`str`	Variant is the operating system variant name (e.g., "Server", "Workstation").
`variantID`	`str`	VariantID is the lower-case operating system variant identifier.
`homeURL`	`str`	HomeURL is the homepage URL for the operating system.
`supportURL`	`str`	SupportURL is the support or help URL for the operating system.
`bugReportURL`	`str`	BugReportURL is the bug reporting URL for the operating system.
`privacyPolicyURL`	`str`	PrivacyPolicyURL is the privacy policy URL for the operating system.
`cpeName`	`str`	CPEName is the Common Platform Enumeration name for the operating system.
`supportEnd`	`str`	SupportEnd is the end of support date or version identifier.
`extendedSupport`	`bool`	ExtendedSupport indicates whether extended security or support is available.

`Location`

Represents a path relative to a particular filesystem resolved to a specific file.Reference.

Field Name	Type	Description
`path`	`str`	RealPath is the canonical absolute form of the path accessed (all symbolic links have been followed and relative path components like '.' and '..' have been removed).
`layerID`	`str`	FileSystemID is an ID representing and entire filesystem. For container images, this is a layer digest. For directories or a root filesystem, this is blank.
`accessPath`	`str`	AccessPath is the path used to retrieve file contents (which may or may not have hardlinks / symlinks in the path)
`annotations`	`obj`	Arbitrary key-value pairs that can be used to annotate a location

`Package`

Represents a pkg.Package object specialized for JSON marshaling and unmarshalling.

Field Name	Type
`id`	`str`
`name`	`str`
`version`	`str`
`type`	`str`
`foundBy`	`str`
`locations`	`Array<Location>`
`licenses`	`licenses`
`language`	`str`
`cpes`	`cpes`
`purl`	`str`
`metadataType`	`str`
`metadata`	see the Ecosystem Specific Types section

`PnpmLockResolution`

Contains package resolution metadata from pnpm lockfiles, including the integrity hash used for verification.

Field Name	Type	Description
`integrity`	`str`	Integrity is Subresource Integrity hash for verification (SRI format)

`Relationship`

Represents a directed relationship between two artifacts in the SBOM, such as package-contains-file or package-depends-on-package.

Field Name	Type	Description
`parent`	`str`	Parent is the ID of the parent artifact in this relationship.
`child`	`str`	Child is the ID of the child artifact in this relationship.
`type`	`str`	Type is the relationship type (e.g., "contains", "dependency-of", "ancestor-of").
`metadata`	`unknown`	Metadata contains additional relationship-specific metadata.

`Schema`

Specifies the JSON schema version and URL reference that defines the structure and validation rules for this document format.

Field Name	Type	Description
`version`	`str`	Version is the JSON schema version for this document format.
`url`	`str`	URL is the URL to the JSON schema definition document.

`Source`

Represents the artifact that was analyzed to generate this SBOM, such as a container image, directory, or file archive.

Field Name	Type	Description
`id`	`str`	ID is a unique identifier for the analyzed source artifact.
`name`	`str`	Name is the name of the analyzed artifact (e.g., image name, directory path).
`version`	`str`	Version is the version of the analyzed artifact (e.g., image tag).
`supplier`	`str`	Supplier is supplier information, which can be user-provided for NTIA minimum elements compliance.
`type`	`str`	Type is the source type (e.g., "image", "directory", "file").
`metadata`	`unknown`	Metadata contains additional source-specific metadata.

Ecosystem Specific Types

`AlpmDbEntry`

Is a struct that represents the package data stored in the pacman flat-file stores for arch linux.

Field Name	Type	Description
`basepackage`	`str`	BasePackage is the base package name this package was built from (source package in Arch build system)
`package`	`str`	Package is the package name as found in the desc file
`version`	`str`	Version is the package version as found in the desc file
`description`	`str`	Description is a human-readable package description
`architecture`	`str`	Architecture is the target CPU architecture as defined in Arch architecture spec (e.g. x86_64, aarch64, or "any" for arch-independent packages)
`size`	`int`	Size is the installed size in bytes
`packager`	`str`	Packager is the name and email of the person who packaged this (RFC822 format)
`url`	`str`	URL is the upstream project URL
`validation`	`str`	Validation is the validation method used for package integrity (e.g. pgp signature, sha256 checksum)
`reason`	`int`	Reason is the installation reason tracked by pacman (0=explicitly installed by user, 1=installed as dependency)
`files`	`Array<AlpmFileRecord>`	Files are the files installed by this package
`backup`	`Array<AlpmFileRecord>`	Backup is the list of configuration files that pacman backs up before upgrades
`provides`	`Array<str>`	Provides are virtual packages provided by this package (allows other packages to depend on capabilities rather than specific packages)
`depends`	`Array<str>`	Depends are the runtime dependencies required by this package

`AlpmFileRecord`

Represents a single file entry within an Arch Linux package with its associated metadata tracked by pacman.

Field Name	Type	Description
`path`	`str`	Path is the file path relative to the filesystem root
`type`	`str`	Type is the file type (e.g. regular file, directory, symlink)
`uid`	`str`	UID is the file owner user ID as recorded by pacman
`gid`	`str`	GID is the file owner group ID as recorded by pacman
`time`	`str`	Time is the file modification timestamp
`size`	`str`	Size is the file size in bytes
`link`	`str`	Link is the symlink target path if this is a symlink
`digest`	`Array<Digest>`	Digests contains file content hashes for integrity verification

`ApkDbEntry`

Represents all captured data for the alpine linux package manager flat-file store.

Field Name	Type	Description
`package`	`str`	Package is the package name as found in the installed file
`originPackage`	`str`	OriginPackage is the original source package name this binary was built from (used to track which aport/source built this)
`maintainer`	`str`	Maintainer is the package maintainer name and email
`version`	`str`	Version is the package version as found in the installed file
`architecture`	`str`	Architecture is the target CPU architecture
`url`	`str`	URL is the upstream project URL
`description`	`str`	Description is a human-readable package description
`size`	`int`	Size is the package archive size in bytes (.apk file size)
`installedSize`	`int`	InstalledSize is the total size of installed files in bytes
`pullDependencies`	`Array<str>`	Dependencies are the runtime dependencies required by this package
`provides`	`Array<str>`	Provides are virtual packages provided by this package (for capability-based dependencies)
`pullChecksum`	`str`	Checksum is the package content checksum for integrity verification
`gitCommitOfApkPort`	`str`	GitCommit is the git commit hash of the APK port definition in Alpine's aports repository
`files`	`Array<ApkFileRecord>`	Files are the files installed by this package

`ApkFileRecord`

Represents a single file listing and metadata from a APK DB entry (which may have many of these file records).

Field Name	Type	Description
`path`	`str`	Path is the file path relative to the filesystem root
`ownerUid`	`str`	OwnerUID is the file owner user ID
`ownerGid`	`str`	OwnerGID is the file owner group ID
`permissions`	`str`	Permissions is the file permission mode string (e.g. "0755", "0644")
`digest`	`Digest`	Digest is the file content hash for integrity verification

`AppleAppBundleEntry`

Represents metadata about an Apple application bundle (CFBundle) extracted from Info.plist files.

Field Name	Type	Description
`bundleIdentifier`	`str`	BundleIdentifier is the unique identifier for the bundle (e.g. "com.apple.Safari")
`name`	`str`	Name is the short name of the bundle
`displayName`	`str`	DisplayName is the user-facing name of the bundle
`executable`	`str`	Executable is the name of the executable within the bundle
`shortVersion`	`str`	ShortVersion is the release (marketing) version of the bundle
`version`	`str`	Version is the build version of the bundle, which often differs from the short version
`packageType`	`str`	PackageType is the four-letter type code (e.g. "APPL" for apps, "FMWK" for frameworks, "BNDL" for bundles)
`supportedPlatforms`	`Array<str>`	SupportedPlatforms lists the platforms the bundle targets (e.g. "MacOSX", "iPhoneOS")
`minimumSystemVersion`	`str`	MinimumSystemVersion is the minimum macOS version required to run the bundle
`minimumOSVersion`	`str`	MinimumOSVersion is the minimum OS version required for non-macOS platforms (e.g. iOS)
`copyright`	`str`	Copyright is the human-readable copyright notice for the bundle
`platformName`	`str`	PlatformName is the platform name of the SDK used to build the bundle (e.g. "macosx")
`sdkName`	`str`	SDKName is the name of the SDK used to build the bundle (e.g. "macosx14.0")

`BinarySignature`

Represents a set of matched values within a binary file.

Field Name	Type
`matches`	`Array<ClassifierMatch>`

`BitnamiSbomEntry`

Represents all captured data from Bitnami packages described in Bitnami' SPDX files.

Field Name	Type	Description
`name`	`str`	Name is the package name as found in the Bitnami SPDX file
`arch`	`str`	Architecture is the target CPU architecture (amd64 or arm64 in Bitnami images)
`distro`	`str`	Distro is the distribution name this package is for (base OS like debian, ubuntu, etc.)
`revision`	`str`	Revision is the Bitnami-specific package revision number (incremented for Bitnami rebuilds of same upstream version)
`version`	`str`	Version is the package version as found in the Bitnami SPDX file
`path`	`str`	Path is the installation path in the filesystem where the package is located
`files`	`Array<str>`	Files are the file paths owned by this package (tracked via SPDX relationships)

`CConanFileEntry`

ConanfileEntry represents a single "Requires" entry from a conanfile.txt.

Field Name	Type	Description
`ref`	`str`	Ref is the package reference string in format name/version@user/channel

`CConanInfoEntry`

ConaninfoEntry represents a single "full_requires" entry from a conaninfo.txt.

Field Name	Type	Description
`ref`	`str`	Ref is the package reference string in format name/version@user/channel
`package_id`	`str`	PackageID is a unique package variant identifier

`CConanLockEntry`

ConanV1LockEntry represents a single "node" entry from a conan.lock V1 file.

Field Name	Type	Description
`ref`	`str`	Ref is the package reference string in format name/version@user/channel
`package_id`	`str`	PackageID is a unique package variant identifier computed from settings/options (static hash in Conan 1.x, can have collisions with complex dependency graphs)
`prev`	`str`	Prev is the previous lock entry reference for versioning
`requires`	`Array<str>`	Requires are the runtime package dependencies
`build_requires`	`Array<str>`	BuildRequires are the build-time dependencies (e.g. cmake, compilers)
`py_requires`	`Array<str>`	PythonRequires are the Python dependencies needed for Conan recipes
`options`	`KeyValues`	Options are package configuration options as key-value pairs (e.g. shared=True, fPIC=True)
`path`	`str`	Path is the filesystem path to the package in Conan cache
`context`	`str`	Context is the build context information

`CConanLockV2Entry`

ConanV2LockEntry represents a single "node" entry from a conan.lock V2 file.

Field Name	Type	Description
`ref`	`str`	Ref is the package reference string in format name/version@user/channel
`packageID`	`str`	PackageID is a unique package variant identifier (dynamic in Conan 2.0, more accurate than V1)
`username`	`str`	Username is the Conan user/organization name
`channel`	`str`	Channel is the Conan channel name indicating stability/purpose (e.g. stable, testing, experimental)
`recipeRevision`	`str`	RecipeRevision is a git-like revision hash (RREV) of the recipe
`packageRevision`	`str`	PackageRevision is a git-like revision hash of the built binary package
`timestamp`	`str`	TimeStamp is when this package was built/locked

`CocoaPodfileLockEntry`

Represents a single entry from the "Pods" section of a Podfile.lock file.

Field Name	Type	Description
`checksum`	`str`	Checksum is the SHA-1 hash of the podspec file for integrity verification (generated via `pod ipc spec ... \| openssl sha1`), ensuring all team members use the same pod specification version

`CondaMetadataEntry`

CondaMetaPackage represents metadata for a Conda package extracted from the conda-meta/*.json files.

Field Name	Type	Description
`arch`	`str`	Arch is the target CPU architecture for the package (e.g., "arm64", "x86_64").
`name`	`str`	Name is the package name as found in the conda-meta JSON file.
`version`	`str`	Version is the package version as found in the conda-meta JSON file.
`build`	`str`	Build is the build string identifier (e.g., "h90dfc92_1014").
`build_number`	`int`	BuildNumber is the sequential build number for this version.
`channel`	`str`	Channel is the Conda channel URL where the package was retrieved from.
`subdir`	`str`	Subdir is the subdirectory within the channel (e.g., "osx-arm64", "linux-64").
`noarch`	`str`	Noarch indicates if the package is platform-independent (e.g., "python", "generic").
`license`	`str`	License is the package license identifier.
`license_family`	`str`	LicenseFamily is the general license category (e.g., "MIT", "Apache", "GPL").
`md5`	`str`	MD5 is the MD5 hash of the package archive.
`sha256`	`str`	SHA256 is the SHA-256 hash of the package archive.
`size`	`int`	Size is the package archive size in bytes.
`timestamp`	`int`	Timestamp is the Unix timestamp when the package was built.
`fn`	`str`	Filename is the original package archive filename (e.g., "zlib-1.2.11-h90dfc92_1014.tar.bz2").
`url`	`str`	URL is the full download URL for the package archive.
`extracted_package_dir`	`str`	ExtractedPackageDir is the local cache directory where the package was extracted.
`depends`	`Array<str>`	Depends is the list of runtime dependencies with version constraints.
`files`	`Array<str>`	Files is the list of files installed by this package.
`paths_data`	`CondaPathsData`	PathsData contains detailed file metadata from the paths.json file.
`link`	`CondaLink`	Link contains installation source metadata from the link.json file.

`CondaLink`

Represents link metadata from a Conda package's link.json file describing package installation source.

Field Name	Type	Description
`source`	`str`	Source is the original path where the package was extracted from cache.
`type`	`int`	Type indicates the link type (1 for hard link, 2 for soft link, 3 for copy).

`CondaPathData`

Represents metadata for a single file within a Conda package from the paths.json file.

Field Name	Type	Description
`_path`	`str`	Path is the file path relative to the Conda environment root.
`path_type`	`str`	PathType indicates the link type for the file (e.g., "hardlink", "softlink", "directory").
`sha256`	`str`	SHA256 is the SHA-256 hash of the file contents.
`sha256_in_prefix`	`str`	SHA256InPrefix is the SHA-256 hash of the file after prefix replacement during installation.
`size_in_bytes`	`int`	SizeInBytes is the file size in bytes.

`CondaPathsData`

Represents the paths.json file structure from a Conda package containing file metadata.

Field Name	Type	Description
`paths_version`	`int`	PathsVersion is the schema version of the paths data format.
`paths`	`Array<CondaPathData>`	Paths is the list of file metadata entries for all files in the package.

`CpanDistribution`

Describes a CPAN distribution installed on disk, as recorded by a CPAN client's install.json and by the .packlist an installer wrote.

Field Name	Type	Description
`dist`	`str`	Dist is the distvname install.json recorded (e.g. URI-5.35), the raw value the package name and version were recovered from
`mainModule`	`str`	MainModule is the module name recovered from the .packlist path (e.g. LWP for libwww-perl). Empty when the name came from install.json, which is authoritative. Set, it means the name is the installer's NAME and may not be the distribution name.
`author`	`str`	Author is the PAUSE ID of the distribution author (e.g. OALDERS), parsed out of Path
`path`	`str`	Path is the raw PAUSE path of the release archive (e.g. O/OA/OALDERS/URI-5.35.tar.gz)
`modules`	`Array<CpanModule>`	Modules are the modules this distribution provides, sorted by name
`files`	`Array<str>`	Files are the paths the .packlist recorded as installed by this distribution, kept in the packlist's own order and unfiltered: a path the packlist claims and the filesystem lacks means the file was removed or overwritten out from under the installer, which is signal rather than noise

`CpanUnpackedRelease`

Describes an unpacked CPAN release found on disk, read from the release's own META.json or META.yml.

Field Name	Type	Description
`modules`	`Array<CpanModule>`	Modules are the modules the release declares it provides, sorted by name

`DartPubspec`

Is a struct that represents a package described in a pubspec.yaml file

Field Name	Type	Description
`homepage`	`str`	Homepage is the package homepage URL
`repository`	`str`	Repository is the source code repository URL
`documentation`	`str`	Documentation is the documentation site URL
`publish_to`	`str`	PublishTo is the package repository to publish to, or "none" to prevent accidental publishing
`environment`	`DartPubspecEnvironment`	Environment is SDK version constraints for Dart and Flutter
`platforms`	`Array<str>`	Platforms are the supported platforms (Android, iOS, web, etc.)
`ignored_advisories`	`Array<str>`	IgnoredAdvisories are the security advisories to explicitly ignore for this package

`DartPubspecEnvironment`

Represents SDK version constraints from the environment section of pubspec.yaml.

Field Name	Type	Description
`sdk`	`str`	SDK is the Dart SDK version constraint (e.g. ">=2.12.0 <3.0.0")
`flutter`	`str`	Flutter is the Flutter SDK version constraint if this is a Flutter package

`DartPubspecLockEntry`

Is a struct that represents a single entry found in the "packages" section in a Dart pubspec.lock file.

Field Name	Type	Description
`name`	`str`	Name is the package name as found in the pubspec.lock file
`version`	`str`	Version is the package version as found in the pubspec.lock file
`hosted_url`	`str`	HostedURL is the URL of the package repository for hosted packages (typically pub.dev, but can be custom repository identified by hosted-url). When PUB_HOSTED_URL environment variable changes, lockfile tracks the source.
`vcs_url`	`str`	VcsURL is the URL of the VCS repository for git/path dependencies (for packages fetched from version control systems like Git)

`DenoLockEntry`

Is a struct that rep a single entry found in the "packages" section of a Deno deno.lock file

Field Name	Type	Description
`integrity`	`str`	Integrity is the crpto hash of the package content for verification
`dependencies`	`Array<str>`	Dependencies is the list of package specifiers that this package depends on

`DenoRemoteLockEntry`

Is a struct that rep a single entry found in the "remote" section of a Deno deno.lock file

Field Name	Type	Description
`url`	`str`	URL is the remote URL from which the module fetcef
`integrity`	`str`	Integrity is the crpto hash of the package content for verification

`DotnetDepsEntry`

Is a struct that represents a single entry found in the "libraries" section in a .NET [*.]deps.json file.

Field Name	Type	Description
`name`	`str`	Name is the package name as found in the deps.json file
`version`	`str`	Version is the package version as found in the deps.json file
`path`	`str`	Path is the relative path to the package within the deps structure (e.g. "app.metrics/3.0.0")
`sha512`	`str`	Sha512 is the SHA-512 hash of the NuGet package content WITHOUT the signed content for verification (won't match hash from NuGet API or manual calculation of .nupkg file)
`hashPath`	`str`	HashPath is the relative path to the .nupkg.sha512 hash file (e.g. "app.metrics.3.0.0.nupkg.sha512")
`type`	`str`	Type is type of entry could be package or project for internal refs
`executables`	`obj`	Executables are the map of .NET Portable Executable files within this package with their version resources

`DotnetPackagesLockEntry`

Is a struct that represents a single entry found in the "dependencies" section in a .NET packages.lock.json file.

Field Name	Type	Description
`name`	`str`	Name is the package name as found in the packages.lock.json file
`version`	`str`	Version is the package version as found in the packages.lock.json file
`contentHash`	`str`	ContentHash is the hash of the package content for verification
`type`	`str`	Type is the dependency type indicating how this dependency was added (Direct=explicit in project file, Transitive=pulled in by another package, Project=project reference)

`DotnetPortableExecutableEntry`

Is a struct that represents a single entry found within "VersionResources" section of a .NET Portable Executable binary file.

Field Name	Type	Description
`assemblyVersion`	`str`	AssemblyVersion is the .NET assembly version number (strong-named version)
`legalCopyright`	`str`	LegalCopyright is the copyright notice string
`comments`	`str`	Comments are additional comments or description embedded in PE resources
`internalName`	`str`	InternalName is the internal name of the file
`companyName`	`str`	CompanyName is the company that produced the file
`productName`	`str`	ProductName is the name of the product this file is part of
`productVersion`	`str`	ProductVersion is the version of the product (may differ from AssemblyVersion)

`DpkgArchiveEntry`

Represents package metadata extracted from a .deb archive file.

Field Name	Type	Description
`package`	`str`	Package is the package name as found in the status file
`source`	`str`	Source is the source package name this binary was built from (one source can produce multiple binary packages)
`version`	`str`	Version is the binary package version as found in the status file
`sourceVersion`	`str`	SourceVersion is the source package version (may differ from binary version when binNMU rebuilds occur)
`architecture`	`str`	Architecture is the target architecture per Debian spec (specific arch like amd64/arm64, wildcard like any, architecture-independent "all", or "source" for source packages)
`maintainer`	`str`	Maintainer is the package maintainer's name and email in RFC822 format (name must come first, then email in angle brackets)
`installedSize`	`int`	InstalledSize is the total size of installed files in kilobytes
`provides`	`Array<str>`	Provides are the virtual packages provided by this package (allows other packages to depend on capabilities. Can include versioned provides like "libdigest-md5-perl (= 2.55.01)")
`depends`	`Array<str>`	Depends are the packages required for this package to function (will not be installed unless these requirements are met, creates strict ordering constraint)
`preDepends`	`Array<str>`	PreDepends are the packages that must be installed and configured BEFORE even starting installation of this package (stronger than Depends, discouraged unless absolutely necessary as it adds strict constraints for apt)
`files`	`Array<DpkgFileRecord>`	Files are the files installed by this package

`DpkgFileRecord`

Represents a single file attributed to a debian package.

Field Name	Type	Description
`path`	`str`	Path is the file path relative to the filesystem root
`digest`	`Digest`	Digest is the file content hash (typically MD5 for dpkg compatibility with legacy systems)
`isConfigFile`	`bool`	IsConfigFile is whether this file is marked as a configuration file (dpkg will preserve user modifications during upgrades)

`DpkgDbEntry`

Represents all captured data for a Debian package DB entry; available fields are described at http://manpages.ubuntu.com/manpages/xenial/man1/dpkg-query.1.html in the --showformat section.

Field Name	Type	Description
`package`	`str`	Package is the package name as found in the status file
`source`	`str`	Source is the source package name this binary was built from (one source can produce multiple binary packages)
`version`	`str`	Version is the binary package version as found in the status file
`sourceVersion`	`str`	SourceVersion is the source package version (may differ from binary version when binNMU rebuilds occur)
`architecture`	`str`	Architecture is the target architecture per Debian spec (specific arch like amd64/arm64, wildcard like any, architecture-independent "all", or "source" for source packages)
`maintainer`	`str`	Maintainer is the package maintainer's name and email in RFC822 format (name must come first, then email in angle brackets)
`installedSize`	`int`	InstalledSize is the total size of installed files in kilobytes
`provides`	`Array<str>`	Provides are the virtual packages provided by this package (allows other packages to depend on capabilities. Can include versioned provides like "libdigest-md5-perl (= 2.55.01)")
`depends`	`Array<str>`	Depends are the packages required for this package to function (will not be installed unless these requirements are met, creates strict ordering constraint)
`preDepends`	`Array<str>`	PreDepends are the packages that must be installed and configured BEFORE even starting installation of this package (stronger than Depends, discouraged unless absolutely necessary as it adds strict constraints for apt)
`files`	`Array<DpkgFileRecord>`	Files are the files installed by this package

`DpkgFileRecord`

Represents a single file attributed to a debian package.

Field Name	Type	Description
`path`	`str`	Path is the file path relative to the filesystem root
`digest`	`Digest`	Digest is the file content hash (typically MD5 for dpkg compatibility with legacy systems)
`isConfigFile`	`bool`	IsConfigFile is whether this file is marked as a configuration file (dpkg will preserve user modifications during upgrades)

`ElfBinaryPackageNoteJsonPayload`

Represents metadata captured from the .note.package section of an ELF-formatted binary

Field Name	Type	Description
`type`	`str`	Type is the type of the package (e.g. "rpm", "deb", "apk", etc.)
`architecture`	`str`	Architecture of the binary package (e.g. "amd64", "arm", etc.)
`osCPE`	`str`	OSCPE is a CPE name for the OS, typically corresponding to CPE_NAME in os-release (e.g. cpe:/o:fedoraproject:fedora:33) Deprecated: in Syft 2.0 the struct tag will be corrected to `osCpe` to match the systemd spec casing.
`appCpe`	`str`	AppCpe is a CPE name for the upstream Application, as found in NVD CPE search (e.g. cpe:2.3:a:gnu:coreutils:5.0)
`os`	`str`	OS is the OS name, typically corresponding to ID in os-release (e.g. "fedora")
`osVersion`	`str`	osVersion is the version of the OS, typically corresponding to VERSION_ID in os-release (e.g. "33")
`system`	`str`	System is a context-specific name for the system that the binary package is intended to run on or a part of
`vendor`	`str`	Vendor is the individual or organization that produced the source code for the binary
`sourceRepo`	`str`	SourceRepo is the URL to the source repository for which the binary was built from
`commit`	`str`	Commit is the commit hash of the source repository for which the binary was built from

`ElixirMixLockEntry`

Is a struct that represents a single entry in a mix.lock file

Field Name	Type	Description
`name`	`str`	Name is the package name as found in the mix.lock file
`version`	`str`	Version is the package version as found in the mix.lock file
`pkgHash`	`str`	PkgHash is the outer checksum (SHA-256) of the entire Hex package tarball for integrity verification (preferred method, replaces deprecated inner checksum)
`pkgHashExt`	`str`	PkgHashExt is the extended package hash format (inner checksum is deprecated - SHA-256 of concatenated file contents excluding CHECKSUM file, now replaced by outer checksum)
`dependencies`	`Array<str>`	Dependencies are the names of the packages this entry depends on, as declared in the entry's dependency list within mix.lock. Used to derive dependency-of relationships between locked packages.

`ErlangRebarLockEntry`

Represents a single package entry from the "deps" section within an Erlang rebar.lock file.

Field Name	Type	Description
`name`	`str`	Name is the package name as found in the rebar.lock file
`version`	`str`	Version is the package version as found in the rebar.lock file
`pkgHash`	`str`	PkgHash is the outer checksum (SHA-256) of the entire Hex package tarball for integrity verification (preferred method over deprecated inner checksum)
`pkgHashExt`	`str`	PkgHashExt is the extended package hash format (inner checksum deprecated - was SHA-256 of concatenated file contents)

`GgufFileHeader`

Represents metadata extracted from a GGUF (GPT-Generated Unified Format) model file.

Field Name	Type	Description
`ggufVersion`	`int`	GGUFVersion is the GGUF format version (e.g., 3)
`fileSize`	`int`	FileSize is the size of the GGUF file in bytes (best-effort if available from resolver)
`architecture`	`str`	Architecture is the model architecture (from general.architecture, e.g., "qwen3moe", "llama")
`quantization`	`str`	Quantization is the quantization type (e.g., "IQ4_NL", "Q4_K_M")
`parameters`	`int`	Parameters is the number of model parameters (if present in header)
`tensorCount`	`int`	TensorCount is the number of tensors in the model
`header`	`obj`	RemainingKeyValues contains the remaining key-value pairs from the GGUF header that are not already represented as typed fields above. This preserves additional metadata fields for reference (namespaced with general., llama., etc.) while avoiding duplication.
`metadataHash`	`str`	MetadataKeyValuesHash is a xx64 hash of all key-value pairs from the GGUF header metadata. This hash is computed over the complete header metadata (including the fields extracted into typed fields above) and provides a stable identifier for the model configuration across different file locations or remotes. It allows matching identical models even when stored in different repositories or with different filenames.
`parts`	`Array<GgufFileHeader>`	Parts contains headers from additional GGUF files that were merged into this package during post-processing (e.g., from OCI layers without model names).

`GgufFileHeader`

Represents metadata extracted from a GGUF (GPT-Generated Unified Format) model file.

Field Name	Type	Description
`ggufVersion`	`int`	GGUFVersion is the GGUF format version (e.g., 3)
`fileSize`	`int`	FileSize is the size of the GGUF file in bytes (best-effort if available from resolver)
`architecture`	`str`	Architecture is the model architecture (from general.architecture, e.g., "qwen3moe", "llama")
`quantization`	`str`	Quantization is the quantization type (e.g., "IQ4_NL", "Q4_K_M")
`parameters`	`int`	Parameters is the number of model parameters (if present in header)
`tensorCount`	`int`	TensorCount is the number of tensors in the model
`header`	`obj`	RemainingKeyValues contains the remaining key-value pairs from the GGUF header that are not already represented as typed fields above. This preserves additional metadata fields for reference (namespaced with general., llama., etc.) while avoiding duplication.
`metadataHash`	`str`	MetadataKeyValuesHash is a xx64 hash of all key-value pairs from the GGUF header metadata. This hash is computed over the complete header metadata (including the fields extracted into typed fields above) and provides a stable identifier for the model configuration across different file locations or remotes. It allows matching identical models even when stored in different repositories or with different filenames.
`parts`	`Array<GgufFileHeader>`	Parts contains headers from additional GGUF files that were merged into this package during post-processing (e.g., from OCI layers without model names).

`GithubActionsUseStatement`

Represents a single 'uses' statement in a GitHub Actions workflow file referencing an action or reusable workflow.

Field Name	Type	Description
`value`	`str`	Value is the action reference (e.g. "actions/checkout@v3")
`comment`	`str`	Comment is the inline comment associated with this uses statement

`GoModuleBuildinfoEntry`

GolangBinaryBuildinfoEntry represents all captured data for a Golang binary

Field Name	Type	Description
`goBuildSettings`	`KeyValues`	BuildSettings contains the Go build settings and flags used to compile the binary (e.g., GOARCH, GOOS, CGO_ENABLED).
`goCompiledVersion`	`str`	GoCompiledVersion is the version of Go used to compile the binary.
`architecture`	`str`	Architecture is the target CPU architecture for the binary (extracted from GOARCH build setting).
`h1Digest`	`str`	H1Digest is the Go module hash in h1: format for the main module from go.sum.
`mainModule`	`str`	MainModule is the main module path for the binary (e.g., "github.com/anchore/syft").
`goCryptoSettings`	`Array<str>`	GoCryptoSettings contains FIPS and cryptographic configuration settings if present.
`goExperiments`	`Array<str>`	GoExperiments lists experimental Go features enabled during compilation (e.g., "arenas", "cgocheck2").
`symbols`	`obj`	Symbols are the function symbols from this module that are compiled into the binary, extracted from the binary symbol table (pclntab) and grouped by the import path of the package that owns them. Each value is the sorted, deduplicated list of symbol names local to that package, i.e. with the import path prefix stripped (e.g. import path "github.com/foo/bar" -> "(*Type).Method"). The fully qualified name is the import path, a ".", and the local name. One exception: the binary's main package appears under the key "main" (the name the linker assigns), not its original source import path, which is not recoverable from the binary. Populated only when the golang cataloger's capture-symbols scope covers this package: the "all" scope populates every module package plus the synthetic stdlib package, the "extended-stdlib" scope populates the stdlib package plus every module under golang.org/x/, and the "stdlib" scope populates only the stdlib package. The capture-symbols-modules glob patterns populate any additional modules they match.

`GoModuleEntry`

GolangModuleEntry represents all captured data for a Golang source scan with go.mod/go.sum

Field Name	Type	Description
`h1Digest`	`str`	H1Digest is the Go module hash in h1: format from go.sum for verifying module contents.

`GoSourceEntry`

GolangSourceEntry represents all captured data for a Golang package found through source analysis

Field Name	Type	Description
`h1Digest`	`str`	H1Digest is the Go module hash in h1: format from go.sum for verifying module contents.
`os`	`str`	OperatingSystem is the target OS for build constraints (e.g., "linux", "darwin", "windows").
`architecture`	`str`	Architecture is the target CPU architecture for build constraints (e.g., "amd64", "arm64").
`buildTags`	`str`	BuildTags are the build tags used to conditionally compile code (e.g., "integration,debug").
`cgoEnabled`	`bool`	CgoEnabled indicates whether CGO was enabled for this package.

`HaskellHackageStackEntry`

HackageStackYamlEntry represents a single entry from the "extra-deps" section of a stack.yaml file.

Field Name	Type	Description
`pkgHash`	`str`	PkgHash is the package content hash for verification

`HaskellHackageStackLockEntry`

HackageStackYamlLockEntry represents a single entry from the "packages" section of a stack.yaml.lock file.

Field Name	Type	Description
`pkgHash`	`str`	PkgHash is the package content hash for verification
`snapshotURL`	`str`	SnapshotURL is the URL to the Stack snapshot this package came from

`HomebrewFormula`

Represents metadata about a Homebrew formula package extracted from formula JSON files.

Field Name	Type	Description
`tap`	`str`	Tap is Homebrew tap this formula belongs to (e.g. "homebrew/core")
`homepage`	`str`	Homepage is the upstream project homepage URL
`description`	`str`	Description is a human-readable formula description

`JavaArchive`

Encapsulates all Java ecosystem metadata for a package as well as an (optional) parent relationship.

Field Name	Type	Description
`virtualPath`	`str`	VirtualPath is path within the archive hierarchy, where nested entries are delimited with ':' (for nested JARs)
`manifest`	`JavaManifest`	Manifest is parsed META-INF/MANIFEST.MF contents
`pomProperties`	`JavaPomProperties`	PomProperties is parsed pom.properties file contents
`pomProject`	`JavaPomProject`	PomProject is parsed pom.xml file contents
`digest`	`Array<Digest>`	ArchiveDigests is cryptographic hashes of the archive file

`JavaManifest`

Represents the fields of interest extracted from a Java archive's META-INF/MANIFEST.MF file.

Field Name	Type	Description
`main`	`KeyValues`	Main is main manifest attributes as key-value pairs
`sections`	`Array<KeyValues>`	Sections are the named sections from the manifest (e.g. per-entry attributes)

`JavaPomParent`

Contains the fields within the tag in a pom.xml file

Field Name	Type	Description
`groupId`	`str`	GroupID is the parent Maven group identifier
`artifactId`	`str`	ArtifactID is the parent Maven artifact identifier
`version`	`str`	Version is the parent version (child inherits configuration from this specific version of parent POM)

`JavaPomProject`

Represents fields of interest extracted from a Java archive's pom.xml file.

Field Name	Type	Description
`path`	`str`	Path is path to the pom.xml file within the archive
`parent`	`JavaPomParent`	Parent is the parent POM reference for inheritance (child POMs inherit configuration from parent)
`groupId`	`str`	GroupID is Maven group identifier (reversed domain name like org.apache.maven)
`artifactId`	`str`	ArtifactID is Maven artifact identifier (project name)
`version`	`str`	Version is project version (together with groupId and artifactId forms Maven coordinates groupId:artifactId:version)
`name`	`str`	Name is a human-readable project name (displayed in Maven-generated documentation)
`description`	`str`	Description is detailed project description
`url`	`str`	URL is the project URL (typically project website or repository)

`JavaPomProperties`

Represents the fields of interest extracted from a Java archive's pom.properties file.

Field Name	Type	Description
`path`	`str`	Path is path to the pom.properties file within the archive
`name`	`str`	Name is the project name
`groupId`	`str`	GroupID is Maven group identifier uniquely identifying the project across all projects (follows reversed domain name convention like com.company.project)
`artifactId`	`str`	ArtifactID is Maven artifact identifier, the name of the jar/artifact (unique within the groupId scope)
`version`	`str`	Version is artifact version
`scope`	`str`	Scope is dependency scope determining when dependency is available (compile=default all phases, test=test compilation/execution only, runtime=runtime and test not compile, provided=expected from JDK or container)
`extraFields`	`obj`	Extra is additional custom properties not in standard Maven coordinates

`JavaJvmInstallation`

JavaVMInstallation represents a Java Virtual Machine installation discovered on the system with its release information and file list.

Field Name	Type	Description
`release`	`JavaVMRelease`	Release is JVM release information and version details
`files`	`Array<str>`	Files are the list of files that are part of this JVM installation

`JavaVMRelease`

Represents JVM version and build information extracted from the release file in a Java installation.

Field Name	Type	Description
`implementor`	`str`	Implementor is extracted with the `java.vendor` JVM property
`implementorVersion`	`str`	ImplementorVersion is extracted with the `java.vendor.version` JVM property
`javaRuntimeVersion`	`str`	JavaRuntimeVersion is extracted from the 'java.runtime.version' JVM property
`javaVersion`	`str`	JavaVersion matches that from `java -version` command output
`javaVersionDate`	`str`	JavaVersionDate is extracted from the 'java.version.date' JVM property
`libc`	`str`	Libc can either be 'glibc' or 'musl'
`modules`	`Array<str>`	Modules is a list of JVM modules that are packaged
`osArch`	`str`	OsArch is the target CPU architecture
`osName`	`str`	OsName is the name of the target runtime operating system environment
`osVersion`	`str`	OsVersion is the version of the target runtime operating system environment
`source`	`str`	Source refers to the origin repository of OpenJDK source
`buildSource`	`str`	BuildSource Git SHA of the build repository
`buildSourceRepo`	`str`	BuildSourceRepo refers to rhe repository URL for the build source
`sourceRepo`	`str`	SourceRepo refers to the OpenJDK repository URL
`fullVersion`	`str`	FullVersion is extracted from the 'java.runtime.version' JVM property
`semanticVersion`	`str`	SemanticVersion is derived from the OpenJDK version
`buildInfo`	`str`	BuildInfo contains additional build information
`jvmVariant`	`str`	JvmVariant specifies the JVM variant (e.g., Hotspot or OpenJ9)
`jvmVersion`	`str`	JvmVersion is extracted from the 'java.vm.version' JVM property
`imageType`	`str`	ImageType can be 'JDK' or 'JRE'
`buildType`	`str`	BuildType can be 'commercial' (used in some older oracle JDK distributions)

`JavascriptBunLockEntry`

BunLockEntry represents a single entry in the "packages" section of a bun.lock file

Field Name	Type	Description
`integrity`	`str`	Integrity is Subresource Integrity hash for verification (SRI format)
`dependencies`	`obj`	Dependencies is a map of runtime dependencies and their version specifiers
`optionalDependencies`	`obj`	OptionalDependencies is a map of optional dependencies and their version specifiers
`peerDependencies`	`obj`	PeerDependencies is a map of peer dependencies and their version specifiers
`bin`	`obj`	Bin is a map of binary names to the paths they are installed to
`os`	`str`	OS is the operating system constraint for the package (e.g. "darwin")
`cpu`	`str`	CPU is the CPU architecture constraint for the package (e.g. "arm64")

`JavascriptNpmPackage`

NpmPackage represents the contents of a javascript package.json file.

Field Name	Type	Description
`name`	`str`	Name is the package name as found in package.json
`version`	`str`	Version is the package version as found in package.json
`author`	`str`	Author is package author name
`homepage`	`str`	Homepage is project homepage URL
`description`	`str`	Description is a human-readable package description
`url`	`str`	URL is repository or project URL
`private`	`bool`	Private is whether this is a private package

`JavascriptNpmPackageLockEntry`

NpmPackageLockEntry represents a single entry within the "packages" section of a package-lock.json file.

Field Name	Type	Description
`resolved`	`str`	Resolved is URL where this package was downloaded from (registry source)
`integrity`	`str`	Integrity is Subresource Integrity hash for verification using standard SRI format (sha512-... or sha1-...). npm changed from SHA-1 to SHA-512 in newer versions. For registry sources this is the integrity from registry, for remote tarballs it's SHA-512 of the file. npm verifies tarball matches this hash before unpacking, throwing EINTEGRITY error if mismatch detected.
`dependencies`	`obj`	Dependencies is a map of dependencies and their version markers, i.e. "lodash": "^1.0.0"

`JavascriptPnpmLockEntry`

PnpmLockEntry represents a single entry in the "packages" section of a pnpm-lock.yaml file.

Field Name	Type	Description
`resolution`	`PnpmLockResolution`	Resolution is the resolution information for the package
`dependencies`	`obj`	Dependencies is a map of dependencies and their versions

`JavascriptYarnLockEntry`

YarnLockEntry represents a single entry section of a yarn.lock file.

Field Name	Type	Description
`resolved`	`str`	Resolved is URL where this package was downloaded from
`integrity`	`str`	Integrity is Subresource Integrity hash for verification (SRI format)
`dependencies`	`obj`	Dependencies is a map of dependencies and their versions

`LinuxKernelArchive`

LinuxKernel represents all captured data for a Linux kernel

Field Name	Type	Description
`name`	`str`	Name is kernel name (typically "Linux")
`architecture`	`str`	Architecture is the target CPU architecture
`version`	`str`	Version is kernel version string
`extendedVersion`	`str`	ExtendedVersion is additional version information
`buildTime`	`str`	BuildTime is when the kernel was built
`author`	`str`	Author is who built the kernel
`format`	`str`	Format is kernel image format (e.g. bzImage, zImage)
`rwRootFS`	`bool`	RWRootFS is whether root filesystem is mounted read-write
`swapDevice`	`int`	SwapDevice is swap device number
`rootDevice`	`int`	RootDevice is root device number
`videoMode`	`str`	VideoMode is default video mode setting

`LinuxKernelModule`

Represents a loadable kernel module (.ko file) with its metadata, parameters, and dependencies.

Field Name	Type	Description
`name`	`str`	Name is module name
`version`	`str`	Version is module version string
`sourceVersion`	`str`	SourceVersion is the source code version identifier
`path`	`str`	Path is the filesystem path to the .ko kernel object file (absolute path)
`description`	`str`	Description is a human-readable module description
`author`	`str`	Author is module author name and email
`license`	`str`	License is module license (e.g. GPL, BSD) which must be compatible with kernel
`kernelVersion`	`str`	KernelVersion is kernel version this module was built for
`versionMagic`	`str`	VersionMagic is version magic string for compatibility checking (includes kernel version, SMP status, module loading capabilities like "3.17.4-302.fc21.x86_64 SMP mod_unload modversions"). Module will NOT load if vermagic doesn't match running kernel.
`parameters`	`obj`	Parameters are the module parameters that can be configured at load time (user-settable values like module options)

`LuarocksPackage`

Represents a Lua package managed by the LuaRocks package manager with metadata from .rockspec files.

Field Name	Type	Description
`name`	`str`	Name is the package name as found in the .rockspec file
`version`	`str`	Version is the package version as found in the .rockspec file
`license`	`str`	License is license identifier
`homepage`	`str`	Homepage is project homepage URL
`description`	`str`	Description is a human-readable package description
`url`	`str`	URL is the source download URL
`dependencies`	`obj`	Dependencies are the map of dependency names to version constraints

`NixStoreEntry`

Represents a package in the Nix store (/nix/store) with its derivation information and metadata.

Field Name	Type	Description
`path`	`str`	Path is full store path for this output (e.g. /nix/store/abc123...-package-1.0)
`output`	`str`	Output is the specific output name for multi-output packages (empty string for default "out" output, can be "bin", "dev", "doc", etc.)
`outputHash`	`str`	OutputHash is hash prefix of the store path basename (first part before the dash)
`derivation`	`NixDerivation`	Derivation is information about the .drv file that describes how this package was built
`files`	`Array<str>`	Files are the list of files under the nix/store path for this package

`NixDerivation`

Represents a Nix .drv file that describes how to build a package including inputs, outputs, and build instructions.

Field Name	Type	Description
`path`	`str`	Path is path to the .drv file in Nix store
`system`	`str`	System is target system string indicating where derivation can be built (e.g. "x86_64-linux", "aarch64-darwin"). Must match current system for local builds.
`inputDerivations`	`Array<NixDerivationReference>`	InputDerivations are the list of other derivations that were inputs to this build (dependencies)
`inputSources`	`Array<str>`	InputSources are the list of source file paths that were inputs to this build

`NixDerivationReference`

Represents a reference to another derivation used as a build input or runtime dependency.

Field Name	Type	Description
`path`	`str`	Path is path to the referenced .drv file
`outputs`	`Array<str>`	Outputs are which outputs of the referenced derivation were used (e.g. ["out"], ["bin", "dev"])

`OpamPackage`

Represents an OCaml package managed by the OPAM package manager with metadata from .opam files.

Field Name	Type	Description
`name`	`str`	Name is the package name as found in the .opam file
`version`	`str`	Version is the package version as found in the .opam file
`licenses`	`Array<str>`	Licenses are the list of applicable licenses
`url`	`str`	URL is download URL for the package source
`checksum`	`Array<str>`	Checksums are the list of checksums for verification
`homepage`	`str`	Homepage is project homepage URL
`dependencies`	`Array<str>`	Dependencies are the list of required dependencies

`PeBinary`

Represents metadata captured from a Portable Executable formatted binary (dll, exe, etc.)

Field Name	Type	Description
`VersionResources`	`KeyValues`	VersionResources contains key-value pairs extracted from the PE file's version resource section (e.g., FileVersion, ProductName, CompanyName).

`PhpComposerInstalledEntry`

Represents a single package entry from a composer v1/v2 "installed.json" files (very similar to composer.lock files).

Field Name	Type	Description
`name`	`str`	Name is package name in vendor/package format (e.g. symfony/console)
`version`	`str`	Version is the package version
`source`	`PhpComposerExternalReference`	Source is the source repository information for development (typically git repo, used when passing --prefer-source). Originates from source code repository.
`dist`	`PhpComposerExternalReference`	Dist is distribution archive information for production (typically zip/tar, default install method). Packaged version of released code.
`require`	`obj`	Require is runtime dependencies with version constraints (package will not install unless these requirements can be met)
`provide`	`obj`	Provide is virtual packages/functionality provided by this package (allows other packages to depend on capabilities)
`require-dev`	`obj`	RequireDev is development-only dependencies (not installed in production, only when developing this package or running tests)
`suggest`	`obj`	Suggest is optional but recommended dependencies (suggestions for packages that would extend functionality)
`license`	`Array<str>`	License is the list of license identifiers (SPDX format)
`type`	`str`	Type is package type indicating purpose (library=reusable code, project=application, metapackage=aggregates dependencies, etc.)
`notification-url`	`str`	NotificationURL is the URL to notify when package is installed (for tracking/statistics)
`bin`	`Array<str>`	Bin is the list of binary/executable files that should be added to PATH
`authors`	`Array<PhpComposerAuthors>`	Authors are the list of package authors with name/email/homepage
`description`	`str`	Description is a human-readable package description
`homepage`	`str`	Homepage is project homepage URL
`keywords`	`Array<str>`	Keywords are the list of keywords for package discovery/search
`time`	`str`	Time is timestamp when this package version was released

`PhpComposerAuthors`

Represents author information for a PHP Composer package from the authors field in composer.json.

Field Name	Type	Description
`name`	`str`	Name is author's full name
`email`	`str`	Email is author's email address
`homepage`	`str`	Homepage is author's personal or company website

`PhpComposerExternalReference`

Represents source or distribution information for a PHP package, indicating where the package code is retrieved from.

Field Name	Type	Description
`type`	`str`	Type is reference type (git for source VCS, zip/tar for dist archives)
`url`	`str`	URL is the URL to the resource (git repository URL or archive download URL)
`reference`	`str`	Reference is git commit hash or version tag for source, or archive version for dist
`shasum`	`str`	Shasum is SHA hash of the archive file for integrity verification (dist only)

`PhpComposerLockEntry`

Represents a single package entry found from a composer.lock file.

Field Name	Type	Description
`name`	`str`	Name is package name in vendor/package format (e.g. symfony/console)
`version`	`str`	Version is the package version
`source`	`PhpComposerExternalReference`	Source is the source repository information for development (typically git repo, used when passing --prefer-source). Originates from source code repository.
`dist`	`PhpComposerExternalReference`	Dist is distribution archive information for production (typically zip/tar, default install method). Packaged version of released code.
`require`	`obj`	Require is runtime dependencies with version constraints (package will not install unless these requirements can be met)
`provide`	`obj`	Provide is virtual packages/functionality provided by this package (allows other packages to depend on capabilities)
`require-dev`	`obj`	RequireDev is development-only dependencies (not installed in production, only when developing this package or running tests)
`suggest`	`obj`	Suggest is optional but recommended dependencies (suggestions for packages that would extend functionality)
`license`	`Array<str>`	License is the list of license identifiers (SPDX format)
`type`	`str`	Type is package type indicating purpose (library=reusable code, project=application, metapackage=aggregates dependencies, etc.)
`notification-url`	`str`	NotificationURL is the URL to notify when package is installed (for tracking/statistics)
`bin`	`Array<str>`	Bin is the list of binary/executable files that should be added to PATH
`authors`	`Array<PhpComposerAuthors>`	Authors are the list of package authors with name/email/homepage
`description`	`str`	Description is a human-readable package description
`homepage`	`str`	Homepage is project homepage URL
`keywords`	`Array<str>`	Keywords are the list of keywords for package discovery/search
`time`	`str`	Time is timestamp when this package version was released

`PhpComposerAuthors`

Represents author information for a PHP Composer package from the authors field in composer.json.

Field Name	Type	Description
`name`	`str`	Name is author's full name
`email`	`str`	Email is author's email address
`homepage`	`str`	Homepage is author's personal or company website

`PhpComposerExternalReference`

Represents source or distribution information for a PHP package, indicating where the package code is retrieved from.

Field Name	Type	Description
`type`	`str`	Type is reference type (git for source VCS, zip/tar for dist archives)
`url`	`str`	URL is the URL to the resource (git repository URL or archive download URL)
`reference`	`str`	Reference is git commit hash or version tag for source, or archive version for dist
`shasum`	`str`	Shasum is SHA hash of the archive file for integrity verification (dist only)

`PhpPearEntry`

Represents a single package entry found within php pear metadata files.

Field Name	Type	Description
`name`	`str`	Name is the package name
`channel`	`str`	Channel is PEAR channel this package is from
`version`	`str`	Version is the package version
`license`	`Array<str>`	License is the list of applicable licenses

`PhpPeclEntry`

Represents a single package entry found within php pecl metadata files.

Field Name	Type	Description
`name`	`str`	Name is the package name
`channel`	`str`	Channel is PEAR channel this package is from
`version`	`str`	Version is the package version
`license`	`Array<str>`	License is the list of applicable licenses

`PortageDbEntry`

PortageEntry represents a single package entry in the portage DB flat-file store.

Field Name	Type	Description
`installedSize`	`int`	InstalledSize is total size of installed files in bytes
`licenses`	`str`	Licenses is license string which may be an expression (e.g. "GPL-2 OR Apache-2.0")
`files`	`Array<PortageFileRecord>`	Files are the files installed by this package (tracked in CONTENTS file)

`PortageFileRecord`

Represents a single file attributed to a portage package.

Field Name	Type	Description
`path`	`str`	Path is the file path relative to the filesystem root
`digest`	`Digest`	Digest is file content hash (MD5 for regular files in CONTENTS format: "obj filename md5hash mtime")

`PythonPackage`

Represents all captured data for a python egg or wheel package (specifically as outlined in the PyPA core metadata specification https://packaging.python.org/en/latest/specifications/core-metadata/).

Field Name	Type	Description
`name`	`str`	Name is the package name from the Name field in PKG-INFO or METADATA.
`version`	`str`	Version is the package version from the Version field in PKG-INFO or METADATA.
`author`	`str`	Author is the package author name from the Author field.
`authorEmail`	`str`	AuthorEmail is the package author's email address from the Author-Email field.
`platform`	`str`	Platform indicates the target platform for the package (e.g., "any", "linux", "win32").
`files`	`Array<PythonFileRecord>`	Files are the installed files listed in the RECORD file for wheels or installed-files.txt for eggs.
`sitePackagesRootPath`	`str`	SitePackagesRootPath is the root directory path containing the package (e.g., "/usr/lib/python3.9/site-packages").
`topLevelPackages`	`Array<str>`	TopLevelPackages are the top-level Python module names from top_level.txt file.
`directUrlOrigin`	`PythonDirectURLOriginInfo`	DirectURLOrigin contains VCS or direct URL installation information from direct_url.json.
`requiresPython`	`str`	RequiresPython specifies the Python version requirement (e.g., ">=3.6").
`requiresDist`	`Array<str>`	RequiresDist lists the package dependencies with version specifiers from Requires-Dist fields.
`providesExtra`	`Array<str>`	ProvidesExtra lists optional feature names that can be installed via extras (e.g., "dev", "test").

`PythonDirectURLOriginInfo`

Represents installation source metadata from direct_url.json for packages installed from VCS or direct URLs.

Field Name	Type	Description
`url`	`str`	URL is the source URL from which the package was installed.
`commitId`	`str`	CommitID is the VCS commit hash if installed from version control.
`vcs`	`str`	VCS is the version control system type (e.g., "git", "hg").

`PythonFileDigest`

Represents the file metadata for a single file attributed to a python package.

Field Name	Type	Description
`algorithm`	`str`	Algorithm is the hash algorithm used (e.g., "sha256").
`value`	`str`	Value is the hex-encoded hash digest value.

`PythonFileRecord`

Represents a single entry within a RECORD file for a python wheel or egg package

Field Name	Type	Description
`path`	`str`	Path is the installed file path from the RECORD file.
`digest`	`PythonFileDigest`	Digest contains the hash algorithm and value for file integrity verification.
`size`	`str`	Size is the file size in bytes as a string.

`PythonPdmLockEntry`

Represents a single package entry within a pdm.lock file.

Field Name	Type	Description
`summary`	`str`	Summary provides a description of the package
`files`	`Array<PythonPdmFileEntry>`	Files are the package files with their paths and hash digests (for the base package without extras)
`marker`	`str`	Marker is the "environment" --conditional expressions that determine whether a package should be installed based on the runtime environment
`requiresPython`	`str`	RequiresPython specifies the Python version requirement (e.g., ">=3.6").
`dependencies`	`Array<str>`	Dependencies are the dependency specifications for the base package (without extras)
`extras`	`Array<PythonPdmLockExtraVariant>`	Extras contains variants for different extras combinations (PDM may have multiple entries per package)

`PythonFileDigest`

Represents the file metadata for a single file attributed to a python package.

Field Name	Type	Description
`algorithm`	`str`	Algorithm is the hash algorithm used (e.g., "sha256").
`value`	`str`	Value is the hex-encoded hash digest value.

`PythonPdmFileEntry`

Field Name	Type	Description
`url`	`str`	URL is the file download URL
`digest`	`PythonFileDigest`	Digest is the hash digest of the file hosted at the URL

`PythonPdmLockExtraVariant`

Represents a specific extras combination variant within a PDM lock file.

Field Name	Type	Description
`extras`	`Array<str>`	Extras are the optional extras enabled for this variant (e.g., ["toml"], ["dev"], or ["toml", "dev"])
`dependencies`	`Array<str>`	Dependencies are the dependencies specific to this extras variant
`files`	`Array<PythonPdmFileEntry>`	Files are the package files specific to this variant (only populated if different from base)
`marker`	`str`	Marker is the environment conditional expression for this variant (e.g., "python_version < \"3.11\"")

`PythonPipRequirementsEntry`

PythonRequirementsEntry represents a single entry within a [*-]requirements.txt file.

Field Name	Type	Description
`name`	`str`	Name is the package name from the requirements file.
`extras`	`Array<str>`	Extras are the optional features to install from the package (e.g., package[dev,test]).
`versionConstraint`	`str`	VersionConstraint specifies version requirements (e.g., ">=1.0,<2.0").
`url`	`str`	URL is the direct download URL or VCS URL if specified instead of a PyPI package.
`markers`	`str`	Markers are environment marker expressions for conditional installation (e.g., "python_version >= '3.8'").

`PythonPipfileLockEntry`

Represents a single package entry within a Pipfile.lock file.

Field Name	Type	Description
`hashes`	`Array<str>`	Hashes are the package file hash values in the format "algorithm:digest" for integrity verification.
`index`	`str`	Index is the PyPI index name where the package should be fetched from.

`PythonPoetryLockEntry`

Represents a single package entry within a Pipfile.lock file.

Field Name	Type	Description
`index`	`str`	Index is the package repository name where the package should be fetched from.
`dependencies`	`Array<PythonPoetryLockDependencyEntry>`	Dependencies are the package's runtime dependencies with version constraints.
`extras`	`Array<PythonPoetryLockExtraEntry>`	Extras are optional feature groups that include additional dependencies.

`PythonPoetryLockDependencyEntry`

Represents a single dependency entry within a Poetry lock file.

Field Name	Type	Description
`name`	`str`	Name is the dependency package name.
`version`	`str`	Version is the locked version or version constraint for the dependency.
`optional`	`bool`	Optional indicates whether this dependency is optional (only needed for certain extras).
`markers`	`str`	Markers are environment marker expressions that conditionally enable the dependency (e.g., "python_version >= '3.8'").
`extras`	`Array<str>`	Extras are the optional feature names from the dependency that should be installed.

`PythonPoetryLockExtraEntry`

Represents an optional feature group in a Poetry lock file.

Field Name	Type	Description
`name`	`str`	Name is the optional feature name (e.g., "dev", "test").
`dependencies`	`Array<str>`	Dependencies are the package names required when this extra is installed.

`PythonUvLockEntry`

Represents a single package entry within a uv.lock file.

Field Name	Type	Description
`index`	`str`	Index is the package repository name where the package should be fetched from.
`dependencies`	`Array<PythonUvLockDependencyEntry>`	Dependencies are the package's runtime dependencies with version constraints.
`extras`	`Array<PythonUvLockExtraEntry>`	Extras are optional feature groups that include additional dependencies.

`PythonUvLockDependencyEntry`

Represents a single dependency entry within a uv lock file.

Field Name	Type	Description
`name`	`str`	Name is the dependency package name.
`optional`	`bool`	Optional indicates whether this dependency is optional (only needed for certain extras).
`markers`	`str`	Markers are environment marker expressions that conditionally enable the dependency (e.g., "python_version >= '3.8'").
`extras`	`Array<str>`	Extras are the optional feature names from the dependency that should be installed.

`PythonUvLockExtraEntry`

Represents an optional feature group in a uv lock file.

Field Name	Type	Description
`name`	`str`	Name is the optional feature name (e.g., "dev", "test").
`dependencies`	`Array<str>`	Dependencies are the package names required when this extra is installed.

`RDescription`

Represents metadata from an R package DESCRIPTION file containing package information, dependencies, and author details.

Field Name	Type	Description
`title`	`str`	Title is short one-line package title
`description`	`str`	Description is detailed package description
`author`	`str`	Author is package author(s)
`maintainer`	`str`	Maintainer is current package maintainer
`url`	`Array<str>`	URL is the list of related URLs
`repository`	`str`	Repository is CRAN or other repository name
`built`	`str`	Built is R version and platform this was built with
`needsCompilation`	`bool`	NeedsCompilation is whether this package requires compilation
`imports`	`Array<str>`	Imports are the packages imported in the NAMESPACE
`depends`	`Array<str>`	Depends are the packages this package depends on
`suggests`	`Array<str>`	Suggests are the optional packages that extend functionality

`RpmArchive`

Represents package metadata extracted directly from a .rpm archive file, containing the same information as an RPM database entry.

Field Name	Type	Description
`name`	`str`	Name is the RPM package name as found in the RPM database.
`version`	`str`	Version is the upstream version of the package.
`epoch`	`int \| null`
`architecture`	`str`	Arch is the target CPU architecture (e.g., "x86_64", "aarch64", "noarch").
`release`	`str`	Release is the package release number or distribution-specific version suffix.
`sourceRpm`	`str`	SourceRpm is the source RPM filename that was used to build this package.
`signatures`	`Array<RpmSignature>`	Signatures contains GPG signature metadata for package verification.
`size`	`int`	Size is the total installed size of the package in bytes.
`vendor`	`str`	Vendor is the organization that packaged the software.
`modularityLabel`	`str`	ModularityLabel identifies the module stream for modular RPM packages (e.g., "nodejs:12:20200101").
`provides`	`Array<str>`	Provides lists the virtual packages and capabilities this package provides.
`requires`	`Array<str>`	Requires lists the dependencies required by this package.
`files`	`Array<RpmFileRecord>`	Files are the file records for all files owned by this package.

`RpmFileRecord`

Represents the file metadata for a single file attributed to a RPM package.

Field Name	Type	Description
`path`	`str`	Path is the absolute file path where the file is installed.
`mode`	`int`	Mode is the file permission mode bits following Unix stat.h conventions.
`size`	`int`	Size is the file size in bytes.
`digest`	`Digest`	Digest contains the hash algorithm and value for file integrity verification.
`userName`	`str`	UserName is the owner username for the file.
`groupName`	`str`	GroupName is the group name for the file.
`flags`	`str`	Flags indicates the file type (e.g., "%config", "%doc", "%ghost").

`RpmSignature`

Represents a GPG signature for an RPM package used for authenticity verification.

Field Name	Type	Description
`algo`	`str`	PublicKeyAlgorithm is the public key algorithm used for signing (e.g., "RSA").
`hash`	`str`	HashAlgorithm is the hash algorithm used for the signature (e.g., "SHA256").
`created`	`str`	Created is the timestamp when the signature was created.
`issuer`	`str`	IssuerKeyID is the GPG key ID that created the signature.

`RpmDbEntry`

Represents all captured data from a RPM DB package entry.

Field Name	Type	Description
`name`	`str`	Name is the RPM package name as found in the RPM database.
`version`	`str`	Version is the upstream version of the package.
`epoch`	`int \| null`
`architecture`	`str`	Arch is the target CPU architecture (e.g., "x86_64", "aarch64", "noarch").
`release`	`str`	Release is the package release number or distribution-specific version suffix.
`sourceRpm`	`str`	SourceRpm is the source RPM filename that was used to build this package.
`signatures`	`Array<RpmSignature>`	Signatures contains GPG signature metadata for package verification.
`size`	`int`	Size is the total installed size of the package in bytes.
`vendor`	`str`	Vendor is the organization that packaged the software.
`modularityLabel`	`str`	ModularityLabel identifies the module stream for modular RPM packages (e.g., "nodejs:12:20200101").
`provides`	`Array<str>`	Provides lists the virtual packages and capabilities this package provides.
`requires`	`Array<str>`	Requires lists the dependencies required by this package.
`files`	`Array<RpmFileRecord>`	Files are the file records for all files owned by this package.

`RpmFileRecord`

Represents the file metadata for a single file attributed to a RPM package.

Field Name	Type	Description
`path`	`str`	Path is the absolute file path where the file is installed.
`mode`	`int`	Mode is the file permission mode bits following Unix stat.h conventions.
`size`	`int`	Size is the file size in bytes.
`digest`	`Digest`	Digest contains the hash algorithm and value for file integrity verification.
`userName`	`str`	UserName is the owner username for the file.
`groupName`	`str`	GroupName is the group name for the file.
`flags`	`str`	Flags indicates the file type (e.g., "%config", "%doc", "%ghost").

`RpmSignature`

Represents a GPG signature for an RPM package used for authenticity verification.

Field Name	Type	Description
`algo`	`str`	PublicKeyAlgorithm is the public key algorithm used for signing (e.g., "RSA").
`hash`	`str`	HashAlgorithm is the hash algorithm used for the signature (e.g., "SHA256").
`created`	`str`	Created is the timestamp when the signature was created.
`issuer`	`str`	IssuerKeyID is the GPG key ID that created the signature.

`RubyGemspec`

Represents all metadata parsed from the *.gemspec file

Field Name	Type	Description
`name`	`str`	Name is gem name as specified in the gemspec
`version`	`str`	Version is gem version as specified in the gemspec
`files`	`Array<str>`	Files is logical list of files in the gem (NOT directly usable as filesystem paths. Example: bundler gem lists "lib/bundler/vendor/uri/lib/uri/ldap.rb" but actual path is "/usr/local/lib/ruby/3.2.0/bundler/vendor/uri/lib/uri/ldap.rb". Would need gem installation path, ruby version, and env vars like GEM_HOME to resolve actual paths.)
`authors`	`Array<str>`	Authors are the list of gem authors (stored as array regardless of using `author` or `authors` method in gemspec)
`homepage`	`str`	Homepage is project homepage URL

`RustCargoAuditEntry`

RustBinaryAuditEntry represents Rust crate metadata extracted from a compiled binary using cargo-auditable format.

Field Name	Type	Description
`name`	`str`	Name is crate name as specified in audit section of the build binary
`version`	`str`	Version is crate version as specified in audit section of the build binary
`source`	`str`	Source is the source registry or repository where this crate came from

`RustCargoLockEntry`

Represents a locked dependency from a Cargo.lock file with precise version and checksum information.

Field Name	Type	Description
`name`	`str`	Name is crate name as specified in Cargo.toml
`version`	`str`	Version is crate version as specified in Cargo.toml
`source`	`str`	Source is the source registry or repository URL in format "registry+https://github.com/rust-lang/crates.io-index" for registry packages
`checksum`	`str`	Checksum is content checksum for registry packages only (hexadecimal string). Cargo doesn't require or include checksums for git dependencies. Used to detect MITM attacks by verifying downloaded crate matches lockfile checksum.
`dependencies`	`Array<str>`	Dependencies are the list of dependencies with version constraints

`SafetensorsModelInfo`

Holds the model details extracted from SafeTensors content.

Field Name	Type	Description
`format`	`str`	Format is the source format label (always "safetensors" for this metadata type). Present because the Docker AI model config blob carries an explicit format field
`architecture`	`str`	Architecture is the model architecture (e.g., "LlamaForCausalLM", "Qwen3MoeForConditionalGeneration"). It is not present in the SafeTensors header itself; it is enriched from the companion config.json "architectures" array when one is found alongside the model.
`quantization`	`str`	Quantization describes tensor precision (e.g., "BF16", "F16", "F32", "INT8").
`parameters`	`int`	Parameters is the total number of model parameters, computed from the tensor shapes in the SafeTensors header(s). For a sharded model it is the sum across every shard.
`tensorCount`	`int`	TensorCount is the number of tensor entries in the file header.
`totalSize`	`str`	TotalSize is the total byte size of tensor data across all shards when known (from the Docker AI model config "size" field).
`shardCount`	`int`	ShardCount is the number of .safetensors shards for a sharded model (1 for a single-file model).
`userMetadata`	`KeyValues`	UserMetadata is the optional "__metadata__" map from a .safetensors file header (string-to-string key/values set by the producer).
`metadataHash`	`str`	MetadataHash is an xxhash over the on-disk SafeTensors header (sorted tensor entries + __metadata__). It is derived ONLY from the safetensors file bytes.
`parts`	`Array<SafetensorsModelInfo>`	Parts contains metadata from additional SafeTensors shards or OCI layers that were merged into this package during post-processing.

`SafetensorsModelInfo`

Holds the model details extracted from SafeTensors content.

Field Name	Type	Description
`format`	`str`	Format is the source format label (always "safetensors" for this metadata type). Present because the Docker AI model config blob carries an explicit format field
`architecture`	`str`	Architecture is the model architecture (e.g., "LlamaForCausalLM", "Qwen3MoeForConditionalGeneration"). It is not present in the SafeTensors header itself; it is enriched from the companion config.json "architectures" array when one is found alongside the model.
`quantization`	`str`	Quantization describes tensor precision (e.g., "BF16", "F16", "F32", "INT8").
`parameters`	`int`	Parameters is the total number of model parameters, computed from the tensor shapes in the SafeTensors header(s). For a sharded model it is the sum across every shard.
`tensorCount`	`int`	TensorCount is the number of tensor entries in the file header.
`totalSize`	`str`	TotalSize is the total byte size of tensor data across all shards when known (from the Docker AI model config "size" field).
`shardCount`	`int`	ShardCount is the number of .safetensors shards for a sharded model (1 for a single-file model).
`userMetadata`	`KeyValues`	UserMetadata is the optional "__metadata__" map from a .safetensors file header (string-to-string key/values set by the producer).
`metadataHash`	`str`	MetadataHash is an xxhash over the on-disk SafeTensors header (sorted tensor entries + __metadata__). It is derived ONLY from the safetensors file bytes.
`parts`	`Array<SafetensorsModelInfo>`	Parts contains metadata from additional SafeTensors shards or OCI layers that were merged into this package during post-processing.

`SnapEntry`

Represents metadata for a Snap package extracted from snap.yaml or snapcraft.yaml files.

Field Name	Type	Description
`snapType`	`str`	SnapType indicates the snap type (base, kernel, app, gadget, or snapd).
`base`	`str`	Base is the base snap name that this snap depends on (e.g., "core20", "core22").
`snapName`	`str`	SnapName is the snap package name.
`snapVersion`	`str`	SnapVersion is the snap package version.
`architecture`	`str`	Architecture is the target CPU architecture (e.g., "amd64", "arm64").

`SwiftPackageManagerLockEntry`

SwiftPackageManagerResolvedEntry represents a resolved dependency from a Package.resolved file with its locked version and source location.

Field Name	Type	Description
`revision`	`str`	Revision is git commit hash of the resolved package

`SwiplpackPackage`

SwiplPackEntry represents a SWI-Prolog package from the pack system with metadata about the package and its dependencies.

Field Name	Type	Description
`name`	`str`	Name is the package name as found in the .toml file
`version`	`str`	Version is the package version as found in the .toml file
`author`	`str`	Author is author name
`authorEmail`	`str`	AuthorEmail is author email address
`packager`	`str`	Packager is packager name (if different from author)
`packagerEmail`	`str`	PackagerEmail is packager email address
`homepage`	`str`	Homepage is project homepage URL
`dependencies`	`Array<str>`	Dependencies are the list of required dependencies

`TerraformLockProviderEntry`

Represents a single provider entry in a Terraform dependency lock file (.terraform.lock.hcl).

Field Name	Type	Description
`url`	`str`	URL is the provider source address (e.g., "registry.terraform.io/hashicorp/aws").
`constraints`	`str`	Constraints specifies the version constraints for the provider (e.g., "~> 4.0").
`version`	`str`	Version is the locked provider version selected during terraform init.
`hashes`	`Array<str>`	Hashes are cryptographic checksums for the provider plugin archives across different platforms.

`VcpkgManifest`

Summarizes the data found in a vcpkg manifest (vcpkg.json) relevant to a single vcpkg package.

Field Name	Type	Description
`description`	`Array<str>`	Description is the human-readable description of the package (may be a single string or a list of paragraphs in the manifest).
`documentation`	`str`	Documentation is the URL to the package's documentation.
`full-version`	`str`	FullVersion is the complete version string including the port-version suffix (e.g. "1.2.3#2").
`version`	`str`	Version is the upstream package version without the port-version suffix (e.g. "1.2.3").
`port-version`	`int`	PortVersion is the vcpkg-specific packaging revision for a given upstream version.
`maintainers`	`Array<str>`	Maintainers are the people responsible for maintaining the vcpkg port.
`name`	`str`	Name is the package name as declared in the manifest.
`supports`	`str`	Supports is the platform expression describing which triplets the package can be built for (e.g. "!windows").
`registry`	`VcpkgRegistryEntry`	Registry indicates where the package definition came from.
`triplet`	`str`	Triplet is the build target discovered from the build folder (e.g. "x64-linux").

`VcpkgRegistryEntry`

Matches definition of Vcpkg "Registry".

Field Name	Type
`baseline`	`str`
`kind`	`str`
`packages`	`Array<str>`
`path`	`str`
`reference`	`str`
`repository`	`str`

`WordpressPluginEntry`

Represents all metadata parsed from the wordpress plugin file

Field Name	Type	Description
`pluginInstallDirectory`	`str`	PluginInstallDirectory is directory name where the plugin is installed
`author`	`str`	Author is plugin author name
`authorUri`	`str`	AuthorURI is author's website URL

6.4 - Grype Command Line Reference

Note

This documentation was generated with Grype version 0.119.0.

A vulnerability scanner for container images, filesystems, and SBOMs.

Supports the following image sources:
    grype yourrepo/yourimage:tag             defaults to using images from a Docker daemon
    grype path/to/yourproject                a Docker tar, OCI tar, OCI directory, SIF container, or generic filesystem directory

You can also explicitly specify the scheme to use:
    grype podman:yourrepo/yourimage:tag          explicitly use the Podman daemon
    grype docker:yourrepo/yourimage:tag          explicitly use the Docker daemon
    grype docker-archive:path/to/yourimage.tar   use a tarball from disk for archives created from "docker save"
    grype oci-archive:path/to/yourimage.tar      use a tarball from disk for OCI archives (from Podman or otherwise)
    grype oci-dir:path/to/yourimage              read directly from a path on disk for OCI layout directories (from Skopeo or otherwise)
    grype singularity:path/to/yourimage.sif      read directly from a Singularity Image Format (SIF) container on disk
    grype dir:path/to/yourproject                read directly from a path on disk (any directory)
    grype file:path/to/yourfile                  read directly from a file on disk
    grype sbom:path/to/syft.json                 read Syft JSON from path on disk
    grype registry:yourrepo/yourimage:tag        pull image directly from a registry (no container runtime required)
    grype purl:path/to/purl/file                 read a newline separated file of package URLs from a path on disk
    grype PURL                                   read a single package PURL directly (e.g. pkg:apk/openssl@3.2.1?distro=alpine-3.20.3)
    grype cpes:path/to/cpes/file                 read a newline separated file of package CPEs from a path on disk
    grype CPE                                    read a single CPE directly (e.g. cpe:2.3:a:openssl:openssl:3.0.14:*:*:*:*:*:*:* or cpe:/a:openssl:openssl:3.0.14)
    grype zarf:path/to/package.tar.zst           scan all SBOMs within a Zarf package archive

You can also pipe in Syft JSON directly:
 syft yourimage:tag -o json | grype

Usage:
  grype [IMAGE] [flags]
  grype [command]

Available Commands:
  completion  Generate a shell completion for Grype (listing local docker images)
  config      show the grype configuration
  db          vulnerability database operations
  explain     Ask grype to explain a set of findings
  help        Help about any command
  version     show version information

Flags:
      --add-cpes-if-none       generate CPEs for packages with no CPE data
      --by-cve                 orient results by CVE instead of the original vulnerability ID when possible
  -c, --config stringArray     grype configuration file(s) to use
      --distro string          distro to match against in the format: <distro>[-:@]<version>
      --exclude stringArray    exclude paths from being scanned using a glob expression
  -f, --fail-on string         set the return code to 2 if a vulnerability is found with a severity >= the given severity, options=[negligible low medium high critical]
      --file string            file to write the default report output to (default is STDOUT)
      --from stringArray       specify the source behavior to use (e.g. docker, registry, podman, oci-dir, ...)
  -h, --help                   help for grype
      --ignore-states string   ignore matches for vulnerabilities with specified comma separated fix states, options=[fixed not-fixed unknown wont-fix]
      --name string            set the name of the target being analyzed
      --only-fixed             ignore matches for vulnerabilities that are not fixed
      --only-notfixed          ignore matches for vulnerabilities that are fixed
  -o, --output stringArray     report output formatter, formats=[json table cyclonedx cyclonedx-json sarif template], deprecated formats=[embedded-cyclonedx-vex-json embedded-cyclonedx-vex-xml]
      --platform string        an optional platform specifier for container image sources (e.g. 'linux/arm64', 'linux/arm64/v8', 'arm64', 'linux')
      --profile stringArray    configuration profiles to use
  -q, --quiet                  suppress all logging output
  -s, --scope string           selection of layers to analyze, options=[squashed all-layers deep-squashed] (default "squashed")
      --show-suppressed        show suppressed/ignored vulnerabilities in the output (only supported with table output format)
      --sort-by string         sort the match results with the given strategy, options=[package severity epss risk kev vulnerability] (default "risk")
  -t, --template string        specify the path to a Go template file (requires 'template' output to be selected)
  -v, --verbose count          increase verbosity (-v = info, -vv = debug)
      --version                version for grype
      --vex stringArray        a list of VEX documents to consider when producing scanning results

Use "grype [command] --help" for more information about a command.

`grype config`

Show the grype configuration.

Usage:
  grype config [flags]
  grype config [command]

Available Commands:
  locations   shows all locations and the order in which grype will look for a configuration file

Flags:
  -h, --help   help for config
      --load   load and validate the grype configuration

`grype db check`

Check to see if there is a database update available.

Usage:
  grype db check [flags]

Flags:
  -h, --help            help for check
  -o, --output string   format to display results (available=[text, json]) (default "text")

`grype db delete`

Delete the vulnerability database.

Usage:
  grype db delete [flags]

Flags:
  -h, --help   help for delete

`grype db diff`

Diff two databases, showing packages with added, removed, and modified vulnerability matches.

Usage:
  grype db diff [flags] old_db_url_or_path [new_db_url_or_path]

Flags:
  -h, --help            help for diff
  -o, --output string   format to display results (available=[text, json]) (default "text")
      --packages        only include packages
      --vulns           only include vulnerabilities

`grype db import`

Import a vulnerability database archive from a local FILE or URL.

DB archives can be obtained from “https://grype.anchore.io/databases" (or running db list). If the URL has a checksum query parameter with a fully qualified digest (e.g. ‘sha256:abc728…’) then the archive/DB will be verified against this value.

Usage:
  grype db import FILE | URL [flags]

Flags:
  -h, --help   help for import

`grype db list`

List all DBs available according to the listing URL.

Usage:
  grype db list [flags]

Flags:
  -h, --help            help for list
  -o, --output string   format to display results (available=[text, raw, json]) (default "text")

`grype db providers`

List vulnerability providers that are in the database.

Usage:
  grype db providers [flags]

Flags:
  -h, --help            help for providers
  -o, --output string   format to display results (available=[table, json]) (default "table")

`grype db search`

Search the DB for vulnerabilities or affected packages.

Usage:
  grype db search [flags]
  grype db search [command]

Examples:

  Search for affected packages by vulnerability ID:

    $ grype db search --vuln ELSA-2023-12205

  Search for affected packages by package name:

    $ grype db search --pkg log4j

  Search for affected packages by package name, filtering down to a specific vulnerability:

    $ grype db search --pkg log4j --vuln CVE-2021-44228

  Search for affected packages by PURL (note: version is not considered):

    $ grype db search --pkg 'pkg:rpm/redhat/openssl' # or: '--ecosystem rpm --pkg openssl

  Search for affected packages by CPE (note: version/update is not considered):

    $ grype db search --pkg 'cpe:2.3:a:jetty:jetty_http_server:*:*:*:*:*:*:*:*'
    $ grype db search --pkg 'cpe:/a:jetty:jetty_http_server'

Available Commands:
  vuln        Search for vulnerabilities within the DB (supports DB schema v6+ only)

Flags:
      --broad-cpe-matching        allow for specific package CPE attributes to match with '*' values on the vulnerability
      --distro stringArray        refine to results with the given operating system (format: 'name', 'name[-:@]version', 'name[-:@]maj.min', 'name[-:@]codename')
      --ecosystem string          ecosystem of the package to search within
      --fixed-state stringArray   only show vulnerabilities with the given fix state (fixed, not-fixed, unknown, wont-fix)
  -h, --help                      help for search
      --limit int                 limit the number of results returned, use 0 for no limit (default 5000)
      --modified-after string     only show vulnerabilities originally published or modified since the given date (format: YYYY-MM-DD)
  -o, --output string             format to display results (available=[table, json]) (default "table")
      --pkg stringArray           package name/CPE/PURL to search for
      --provider stringArray      only show vulnerabilities from the given provider
      --published-after string    only show vulnerabilities originally published after the given date (format: YYYY-MM-DD)
      --vuln stringArray          only show results for the given vulnerability ID

`grype db status`

Display database status and metadata.

Usage:
  grype db status [flags]

Flags:
  -h, --help            help for status
  -o, --output string   format to display results (available=[text, json]) (default "text")

`grype db update`

Download and install the latest vulnerability database.

Usage:
  grype db update [flags]

Flags:
  -h, --help   help for update

`grype explain`

Ask grype to explain a set of findings.

Usage:
  grype explain --id [VULNERABILITY ID] [flags]

Flags:
  -h, --help             help for explain
      --id stringArray   CVE IDs to explain

`grype version`

Show version information.

Usage:
  grype version [flags]

Flags:
  -h, --help            help for version
  -o, --output string   the format to show the results (allowable: [text json]) (default "text")

6.5 - Grype Configuration Reference

Note

This documentation was generated with Grype version 0.119.0.

Grype searches for configuration files in the following locations, in order:

./.grype.yaml - current working directory
./.grype/config.yaml - app subdirectory in current working directory
~/.grype.yaml - home directory
$XDG_CONFIG_HOME/grype/config.yaml - XDG config directory

The configuration file can use either .yaml or .yml extensions. The first configuration file found will be used.

For general information about how config and environment variables are handled, see the Configuration Reference section.

log:
  # suppress all logging output (env: GRYPE_LOG_QUIET)
  quiet: false

  # explicitly set the logging level (available: [error warn info debug trace]) (env: GRYPE_LOG_LEVEL)
  level: "warn"

  # file path to write logs to (env: GRYPE_LOG_FILE)
  file: ""

dev:
  # capture resource profiling data (available: [cpu, mem, ...]) (env: GRYPE_DEV_PROFILE)
  profile: ""

  db:
    # (env: GRYPE_DEV_DB_DEBUG)
    debug: false

# the output format of the vulnerability report (options: table, template, json, cyclonedx)
# when using template as the output type, you must also provide a value for 'output-template-file' (env: GRYPE_OUTPUT)
output: []

# if using template output, you must provide a path to a Go template file
# see https://github.com/anchore/grype#using-templates for more information on template output
# the default path to the template file is the current working directory
# output-template-file: .grype/html.tmpl
#
# write output report to a file (default is to write to stdout) (env: GRYPE_FILE)
file: ""

# pretty-print output (env: GRYPE_PRETTY)
pretty: false

# distro to match against in the format: <distro>[-:@]<version> (env: GRYPE_DISTRO)
distro: ""

# generate CPEs for packages with no CPE data (env: GRYPE_ADD_CPES_IF_NONE)
add-cpes-if-none: false

# specify the path to a Go template file (requires 'template' output to be selected) (env: GRYPE_OUTPUT_TEMPLATE_FILE)
output-template-file: ""

# enable/disable checking for application updates on startup (env: GRYPE_CHECK_FOR_APP_UPDATE)
check-for-app-update: true

# ignore matches for vulnerabilities that are not fixed (env: GRYPE_ONLY_FIXED)
only-fixed: false

# ignore matches for vulnerabilities that are fixed (env: GRYPE_ONLY_NOTFIXED)
only-notfixed: false

# ignore matches for vulnerabilities with specified comma separated fix states, options=[fixed not-fixed unknown wont-fix] (env: GRYPE_IGNORE_WONTFIX)
ignore-wontfix: ""

# an optional platform specifier for container image sources (e.g. 'linux/arm64', 'linux/arm64/v8', 'arm64', 'linux') (env: GRYPE_PLATFORM)
platform: ""

search:
  # selection of layers to analyze, options=[squashed all-layers deep-squashed] (env: GRYPE_SEARCH_SCOPE)
  scope: "squashed"

  # search within archives that do not contain a file index to search against (tar, tar.gz, tar.bz2, etc)
  # note: enabling this may result in a performance impact since all discovered compressed tars will be decompressed
  # note: for now this only applies to the java package cataloger (env: GRYPE_SEARCH_UNINDEXED_ARCHIVES)
  unindexed-archives: false

  # search within archives that do contain a file index to search against (zip)
  # note: for now this only applies to the java package cataloger (env: GRYPE_SEARCH_INDEXED_ARCHIVES)
  indexed-archives: true

# a list of vulnerability ignore rules; a match must meet ALL criteria specified in a rule to be ignored.
# This is the full set of supported rule fields:
#   - vulnerability: CVE-2008-4318        # match by vulnerability ID (required if no other criteria are given)
#     namespace: nvd:cpe                   # match by vulnerability namespace (e.g. nvd:cpe, github:language:go)
#     fix-state: unknown                   # match by fix state; options: fixed, not-fixed, wont-fix, unknown
#     match-type: exact-direct-match       # match by how the vulnerability was found; options: exact-direct-match, exact-indirect-match, cpe-match
#     reason: "tolerated by policy"        # optional human-readable note recorded on the ignored match (does not affect matching)
#     include-aliases: true                # also apply the vulnerability ID match to aliases/related CVEs (default: false)
#     package:
#       name: libcurl                      # match by package name (supports regular expressions)
#       version: 1.5.1                     # match by package version
#       language: python                   # match by package language (e.g. python, javascript, java, go, …)
#       type: npm                          # match by package type (e.g. rpm, deb, apk, gem, npm, go-module, …)
#       location: "/usr/local/lib/node_modules/**"  # match by package location (supports glob patterns)
#       upstream-name: curl                # match by upstream package name (supports regular expressions)
#
# VEX fields apply when Grype reads VEX data:
#   - vex-status: not_affected
#     vex-justification: vulnerable_code_not_present
ignore: []

# a list of globs to exclude from scanning, for example:
#   - '/etc/**'
#   - './out/**/*.json'
# same as --exclude (env: GRYPE_EXCLUDE)
exclude: []

external-sources:
  # enable Grype searching network source for additional information (env: GRYPE_EXTERNAL_SOURCES_ENABLE)
  enable: false

  maven:
    # search for Maven artifacts by SHA1 (env: GRYPE_EXTERNAL_SOURCES_MAVEN_SEARCH_MAVEN_UPSTREAM)
    search-maven-upstream: true

    # base URL of the Maven repository to search (env: GRYPE_EXTERNAL_SOURCES_MAVEN_BASE_URL)
    base-url: "https://search.maven.org/solrsearch/select"

    # (env: GRYPE_EXTERNAL_SOURCES_MAVEN_RATE_LIMIT)
    rate-limit: 300ms

match:
  java:
    # use CPE matching to find vulnerabilities (env: GRYPE_MATCH_JAVA_USING_CPES)
    using-cpes: false

  jvm:
    # (env: GRYPE_MATCH_JVM_USING_CPES)
    using-cpes: true

  dotnet:
    # use CPE matching to find vulnerabilities (env: GRYPE_MATCH_DOTNET_USING_CPES)
    using-cpes: false

  golang:
    # use CPE matching to find vulnerabilities (env: GRYPE_MATCH_GOLANG_USING_CPES)
    using-cpes: false

    # use CPE matching to find vulnerabilities for the Go standard library (env: GRYPE_MATCH_GOLANG_ALWAYS_USE_CPE_FOR_STDLIB)
    always-use-cpe-for-stdlib: false

    # allow comparison between main module pseudo-versions (e.g. v0.0.0-20240413-2b432cf643...) (env: GRYPE_MATCH_GOLANG_ALLOW_MAIN_MODULE_PSEUDO_VERSION_COMPARISON)
    allow-main-module-pseudo-version-comparison: false

  javascript:
    # use CPE matching to find vulnerabilities (env: GRYPE_MATCH_JAVASCRIPT_USING_CPES)
    using-cpes: false

  python:
    # use CPE matching to find vulnerabilities (env: GRYPE_MATCH_PYTHON_USING_CPES)
    using-cpes: false

  ruby:
    # use CPE matching to find vulnerabilities (env: GRYPE_MATCH_RUBY_USING_CPES)
    using-cpes: false

  rust:
    # use CPE matching to find vulnerabilities (env: GRYPE_MATCH_RUST_USING_CPES)
    using-cpes: false

  hex:
    # use CPE matching to find vulnerabilities (env: GRYPE_MATCH_HEX_USING_CPES)
    using-cpes: false

  stock:
    # use CPE matching to find vulnerabilities (env: GRYPE_MATCH_STOCK_USING_CPES)
    using-cpes: true

  dpkg:
    # (env: GRYPE_MATCH_DPKG_USING_CPES)
    using-cpes: false

    # strategy for handling missing epochs in dpkg package versions during matching (options: zero, auto) (env: GRYPE_MATCH_DPKG_MISSING_EPOCH_STRATEGY)
    missing-epoch-strategy: "zero"

    # use CPE matching for packages from end-of-life distributions (env: GRYPE_MATCH_DPKG_USE_CPES_FOR_EOL)
    use-cpes-for-eol: false

  rpm:
    # (env: GRYPE_MATCH_RPM_USING_CPES)
    using-cpes: false

    # strategy for handling missing epochs in RPM package versions during matching (options: zero, auto) (env: GRYPE_MATCH_RPM_MISSING_EPOCH_STRATEGY)
    missing-epoch-strategy: "auto"

    # use CPE matching for packages from end-of-life distributions (env: GRYPE_MATCH_RPM_USE_CPES_FOR_EOL)
    use-cpes-for-eol: false

# upon scanning, if a severity is found at or above the given severity then the return code will be 1
# default is unset which will skip this validation (options: negligible, low, medium, high, critical) (env: GRYPE_FAIL_ON_SEVERITY)
fail-on-severity: ""

registry:
  # skip TLS verification when communicating with the registry (env: GRYPE_REGISTRY_INSECURE_SKIP_TLS_VERIFY)
  insecure-skip-tls-verify: false

  # use http instead of https when connecting to the registry (env: GRYPE_REGISTRY_INSECURE_USE_HTTP)
  insecure-use-http: false

  # Authentication credentials for specific registries. Each entry describes authentication for a specific authority:
  # - authority: the registry authority URL the URL to the registry (e.g. "docker.io", "localhost:5000", etc.) (env: SYFT_REGISTRY_AUTH_AUTHORITY)
  #  username: a username if using basic credentials (env: SYFT_REGISTRY_AUTH_USERNAME)
  #  password: a corresponding password (env: SYFT_REGISTRY_AUTH_PASSWORD)
  #  token: a token if using token-based authentication, mutually exclusive with username/password (env: SYFT_REGISTRY_AUTH_TOKEN)
  #  tls-cert: filepath to the client certificate used for TLS authentication to the registry (env: SYFT_REGISTRY_AUTH_TLS_CERT)
  #  tls-key: filepath to the client key used for TLS authentication to the registry (env: SYFT_REGISTRY_AUTH_TLS_KEY)
  auth: []

  # filepath to a CA certificate (or directory containing *.crt, *.cert, *.pem) used to generate the client certificate (env: GRYPE_REGISTRY_CA_CERT)
  ca-cert: ""

# show suppressed/ignored vulnerabilities in the output (only supported with table output format) (env: GRYPE_SHOW_SUPPRESSED)
show-suppressed: false

# include matches suppressed internally by matchers (e.g. distro fixed/NAK records, the built-in false-positive list) in the ignored matches output (env: GRYPE_INCLUDE_MATCHER_SUPPRESSIONS)
include-matcher-suppressions: false

# orient results by CVE instead of the original vulnerability ID when possible (env: GRYPE_BY_CVE)
by-cve: false

# sort the match results with the given strategy, options=[package severity epss risk kev vulnerability] (env: GRYPE_SORT_BY)
sort-by: "risk"

# same as --name; set the name of the target being analyzed (env: GRYPE_NAME)
name: ""

# allows users to specify which image source should be used to generate the sbom
# valid values are: registry, docker, podman (env: GRYPE_DEFAULT_IMAGE_PULL_SOURCE)
default-image-pull-source: ""

# specify the source behavior to use (e.g. docker, registry, podman, oci-dir, ...) (env: GRYPE_FROM)
from: []

# a list of VEX documents to consider when producing scanning results (env: GRYPE_VEX_DOCUMENTS)
vex-documents: []

# VEX statuses to consider as ignored rules (env: GRYPE_VEX_ADD)
vex-add: []

# match kernel-header packages with upstream kernel as kernel vulnerabilities (env: GRYPE_MATCH_UPSTREAM_KERNEL_HEADERS)
match-upstream-kernel-headers: false

fix-channel:
  redhat-eus:
    # whether fixes from this channel should be considered, options are "never", "always", or "auto" (conditionally applied based on SBOM data) (env: GRYPE_FIX_CHANNEL_REDHAT_EUS_APPLY)
    apply: "auto"

    # (env: GRYPE_FIX_CHANNEL_REDHAT_EUS_VERSIONS)
    versions: ">= 8.0"

  ubuntu-esm:
    # whether fixes from this channel should be considered, options are "never", "always", or "auto" (conditionally applied based on SBOM data) (env: GRYPE_FIX_CHANNEL_UBUNTU_ESM_APPLY)
    apply: "auto"

    # (env: GRYPE_FIX_CHANNEL_UBUNTU_ESM_VERSIONS)
    versions: ""

# (env: GRYPE_TIMESTAMP)
timestamp: true

alerts:
  # enable/disable warnings about packages from end-of-life (EOL) distros. When enabled, grype will track and report packages that come from distros that have reached their end-of-life date. (env: GRYPE_ALERTS_ENABLE_EOL_DISTRO_WARNINGS)
  enable-eol-distro-warnings: true

db:
  # location to write the vulnerability database cache (env: GRYPE_DB_CACHE_DIR)
  cache-dir: "~/.cache/grype/db"

  # URL of the vulnerability database (env: GRYPE_DB_UPDATE_URL)
  update-url: "https://grype.anchore.io/databases"

  # certificate to trust download the database and listing file (env: GRYPE_DB_CA_CERT)
  ca-cert: ""

  # check for database updates on execution (env: GRYPE_DB_AUTO_UPDATE)
  auto-update: true

  # validate the database matches the known hash each execution (env: GRYPE_DB_VALIDATE_BY_HASH_ON_START)
  validate-by-hash-on-start: true

  # ensure db build is no older than the max-allowed-built-age (env: GRYPE_DB_VALIDATE_AGE)
  validate-age: true

  # Max allowed age for vulnerability database,
  # age being the time since it was built
  # Default max age is 120h (or five days) (env: GRYPE_DB_MAX_ALLOWED_BUILT_AGE)
  max-allowed-built-age: 120h0m0s

  # fail the scan if unable to check for database updates (env: GRYPE_DB_REQUIRE_UPDATE_CHECK)
  require-update-check: false

  # Timeout for downloading GRYPE_DB_UPDATE_URL to see if the database needs to be downloaded
  # This file is ~156KiB as of 2024-04-17 so the download should be quick; adjust as needed (env: GRYPE_DB_UPDATE_AVAILABLE_TIMEOUT)
  update-available-timeout: 30s

  # Timeout for downloading actual vulnerability DB
  # The DB is ~156MB as of 2024-04-17 so slower connections may exceed the default timeout; adjust as needed (env: GRYPE_DB_UPDATE_DOWNLOAD_TIMEOUT)
  update-download-timeout: 5m0s

  # Maximum frequency to check for vulnerability database updates (env: GRYPE_DB_MAX_UPDATE_CHECK_FREQUENCY)
  max-update-check-frequency: 2h0m0s

exp:

6.6 - Grant Command Line Reference

Note

This documentation was generated with Grant version 0.6.8.

Grant helps you view licenses for container images, SBOM documents, and filesystems. Apply filters and views that can help you build a picture of licenses in your SBOM.

Usage:
  grant [command]

Available Commands:
  check       Check license compliance for one or more targets
  completion  Generate the autocompletion script for the specified shell
  config      Generate a comprehensive configuration file
  help        Help about any command
  list        List licenses found in one or more targets
  version     Show the version information for grant

Flags:
  -c, --config string        path to configuration file
  -h, --help                 help for grant
      --no-output            suppress terminal output when writing to file
  -o, --output string        output format (table, json) (default "table")
  -f, --output-file string   write JSON output to file (sets output format to json)
  -q, --quiet                suppress all non-essential output
  -v, --verbose              enable verbose output
      --version              version for grant

Use "grant [command] --help" for more information about a command.

`grant check`

Check evaluates license compliance for container images, SBOMs, filesystems, and files.

Targets can be:

Container images: alpine:latest, ubuntu:22.04
SBOM files: path/to/sbom.json, path/to/sbom.json
Directories: dir:./project, ./my-app
Archive files: project.tar.gz, source.zip
License files: LICENSE, COPYING
Stdin: - (reads SBOM from stdin)

Exit codes:

0: All targets are compliant
1: One or more targets are non-compliant or an error occurred.

Usage:
  grant check [TARGET...] [flags]

Flags:
      --disable-file-search   disable filesystem license file search
      --dry-run               run check without returning non-zero exit code on violations
  -h, --help                  help for check
      --summary               show only summary information
      --unlicensed            show only packages without licenses

`grant config`

Generate a complete YAML configuration file with all available Grant options.

This command outputs a comprehensive configuration file that includes:

License policy options (allow lists, ignore patterns)
Command-line options with defaults
Detailed comments explaining each option

The generated configuration can be saved to a file and customized as needed.

Usage:
  grant config [flags]

Flags:
  -h, --help            help for config
  -o, --output string   output file path (default: stdout)

`grant list`

List shows all licenses found in container images, SBOMs, filesystems, and files

without applying policy evaluation.

Targets can be:

Container images: alpine:latest, ubuntu:22.04
SBOM files: path/to/sbom.json, path/to/sbom.xml
Directories: dir:./project, ./my-app
Archive files: project.tar.gz, source.zip
License files: LICENSE, COPYING
Stdin: - (reads SBOM from stdin)

When no target is specified and stdin is available (piped input), grant will

automatically read from stdin. This allows usage like:

syft -o json dir:. | grant list Apache-2.0

License filtering:

If license names are provided as additional arguments, only packages with those

specific licenses will be shown. For example:

grant list dir:. “MIT” “Apache-2.0”

syft -o json dir:. | grant list “MIT” “Apache-2.0”

This command always returns exit code 0 unless there are processing errors.

Usage:
  grant list [TARGET] [LICENSE...] [flags]

Flags:
      --disable-file-search   disable filesystem license file search
      --group-by string       group results by specified field (risk)
  -h, --help                  help for list
      --pkg string            show detailed information for a specific package (requires license filter)
      --unlicensed            show only packages without licenses

`grant version`

Show the version information for grant.

Usage:
  grant version [flags]

Flags:
  -h, --help   help for version

6.7 - Data sources

Complete list of data sources used by Grype for vulnerability scanning

The following are a list of data sources used to directly match packages to vulnerabilities in Grype:

Data Source	Vunnel Provider	Ecosystems
AlmaLinux OSV Database	`alma`	RPM
Alpine SecDB	`alpine`	APK
Amazon Linux Security Center	`amazon`	RPM
Microsoft AzureLinux OVAL	`mariner`	RPM
Bitnami Vulnerability Database	`bitnami`	Bitnami
Chainguard Security	`chainguard`	APK
Chainguard Libraries (OpenVEX)	`chainguard_libraries`
Debian Security Tracker	`debian`	DPKG
ECHO Security	`echo`	DPKG
GitHub Security Advisories	`github`	.NET, GitHub Actions, Go, Java, JavaScript, Python, Ruby, Rust
Microsoft CBL-Mariner OVAL	`mariner`	RPM
MINIMOS Security	`minimos`	APK
National Vulnerability Database (NVD)	`nvd`	.NET, APK, Go, Java, JavaScript, Python, Ruby, Rust
Oracle Linux Security	`oracle`	RPM
Red Hat Security Data API	`rhel`	RPM
SUSE Security OVAL	`sles`	RPM
Ubuntu CVE Tracker	`ubuntu`	DPKG
Wolfi Security	`wolfi`	APK

Capabilities

Here are the capabilities of each data source as Grype uses them:

What do these columns mean?

For a detailed explanation of the columns in the table, please see the Capabilities overview.

Data Source	Advisories	Disclosures		Fixes		Track by Source Package
Data Source	Advisories	Affected	Date	Versions	Date	Track by Source Package
AlmaLinux OSV Database	ALSA
Alpine SecDB
Amazon Linux Security Center	ALAS
Microsoft AzureLinux OVAL
Bitnami Vulnerability Database
Chainguard Security	CGA
Chainguard Libraries (OpenVEX)	CGA
Debian Security Tracker	DSA
ECHO Security	ECHO
GitHub Security Advisories	GHSA
Microsoft CBL-Mariner OVAL
MINIMOS Security
National Vulnerability Database (NVD)	CVE
Oracle Linux Security	ELSA
Red Hat Security Data API	RHSA
SUSE Security OVAL	SUSE-SU
Ubuntu CVE Tracker	USN
Wolfi Security	CGA

Auxiliary data

We additionally have auxiliary data sources that are used to enhance vulnerability matching in Grype:

Data Source	Vunnel Provider	Description
Exploit Prediction Scoring System	`epss`	Data-driven effort by FIRST to predict the likelihood that a software vulnerability will be exploited. Provides daily-updated probability scores (0-1) and percentile rankings for CVE prioritization.
CISA Known Exploited Vulnerabilities	`kev`	CISA's authoritative catalog of vulnerabilities known to be actively exploited in the wild. Provides exploitation status, required remediation actions, due dates, and ransomware campaign associations.

These sources are cross-cutting in nature and are not tied to a specific distribution or ecosystem (though, primarily enriching information about CVEs specifically).

6.8 - Grant Configuration Reference

Note

This documentation was generated with Grant version 0.6.8.

Grant searches for configuration files in the following locations, in order:

./.grant.yaml - current working directory
./.grant/config.yaml - app subdirectory in current working directory
~/.grant.yaml - home directory
$XDG_CONFIG_HOME/grant/config.yaml - XDG config directory

The configuration file can use either .yaml or .yml extensions. The first configuration file found will be used.

For general information about how config and environment variables are handled, see the Configuration Reference section.

# Grant License Compliance Configuration
# Complete configuration file with all available options
# See: https://github.com/anchore/grant

format: table # Output format: "table" or "json" (default: "table")
quiet: false # Suppress all non-essential output (default: false)
verbose: false # Enable verbose output (default: false)
# List of allowed license patterns (supports glob matching)
# Default behavior: DENY all licenses except those explicitly permitted
allow:
  - MIT
  - Apache-2.0
  - BSD-3-Clause
# List of package patterns to ignore from license checking
# Supports glob patterns for flexible matching
ignore-packages: []
  # Add package patterns to ignore here
  # Examples:
  # - "github.com/mycompany/*"
  # - "internal/*"
# Policy enforcement options
require-license: true # When true, deny packages with no detected licenses
require-known-license: false # When true, deny non-SPDX / unparsable licenses

# ============================================================================
# COMMAND-SPECIFIC OPTIONS
# ============================================================================
disable-file-search: false # Disable filesystem license file search
summary: false # Show only summary information for check command
# Show only packages without licenses (default: false)
only-unlicensed: false # maps to grant check --unlicensed || grant list --unlicensed

6.9 - Configuration Rules

Configuration patterns and options used across all Anchore OSS tools

All Anchore open source tools (Syft, Grype, Grant) share the same configuration system. This guide explains how to configure these tools using command-line flags, environment variables, and configuration files.

Configuration precedence

When you configure a tool, settings are applied in a specific order. If the same setting is specified in multiple places, the tool uses the value from the highest-priority source:

Command-line arguments (highest priority)
Environment variables
Explicit config file (-c PATH or --config PATH)
Auto-discovered configuration file
Default values (lowest priority)

For example, if you set the log level using all three methods, the command-line flag overrides the environment variable, which overrides the config file value.

Tip

Running a tool with -vv log level prints the entire active configuration at startup, showing you exactly which values are being used.

Viewing your configuration

To see available configuration options and current settings:

syft --help — shows all command-line flags
syft config — prints a complete sample configuration file
syft config --load — displays your current active configuration

Replace syft with the tool you’re using (grype, grant, etc.).

Specifying a configuration file

You can explicitly specify a configuration file using the -c or --config flag, which overrides the auto-discovery behavior.

syft alpine:latest -c /path/to/config.yaml
grype alpine:latest --config ~/.grype-custom.yaml
grant check . -c ./grant-config.yaml

Syft and Grype support multiple configuration files by specifying the flag multiple times:

syft alpine:latest -c base.yaml -c overrides.yaml

When multiple files are specified, individual settings from later files override earlier ones.

Using environment variables

Every configuration option can be set via environment variable. The variable name follows the path to the setting in the configuration file.

Example: To enable pretty-printed JSON output, the config file setting is:

format:
  json:
    pretty: true

The path from root to this value is format → json → pretty, so the environment variable is:

export SYFT_FORMAT_JSON_PRETTY=true

The pattern is: <TOOL>_<PATH>_<TO>_<SETTING> where:

<TOOL> is the uppercase tool name (SYFT, GRYPE, GRANT)
Path segments are joined with underscores
All letters are uppercase

More examples:

# Set log level to debug
export SYFT_LOG_LEVEL=debug

# Configure output format
export GRYPE_OUTPUT=json

# Set registry credentials
export SYFT_REGISTRY_AUTH_USERNAME=myuser

Configuration file auto-discovery

When you don’t specify a configuration file with -c, the tool automatically searches for one. Configuration files use YAML format. The tool searches these locations in order and uses the first file it finds:

.syft.yaml (in current directory)
.syft/config.yaml (in current directory)
~/.syft.yaml (in home directory)
<XDG_CONFIG_HOME>/syft/config.yaml (typically ~/.config/syft/config.yaml)

Replace syft with your tool name (grype, grant, etc.).

Note

Only the first config file found is used — configuration files are not merged together.

7 - Architecture

How all the projects and datasets fit together

Anchore’s open source security tooling consists of several interconnected tools that work together to detect vulnerabilities and ensure license compliance in software packages. This page explains how these tools interact and how data flows through the system.

The Anchore OSS ecosystem includes five main tools that, at the 30,000 ft view, work together as follows:

---
config:
  layout: dagre
  look: handDrawn
  theme: default
  flowchart:
    curve: linear
---
flowchart TD
    vunnel["***Vunnel***<br><small>Downloads and normalizes<br>security feeds</small>"]:::Ash
    grypedb["***Grype DB***<br><small>Converts feeds to<br>SQLite database</small>"]:::Ash
    grype["***Grype***<br><small>Matches vulnerabilities<br>from SBOM + database</small>"]:::Ash
    syft["***Syft***<br><small>Generates SBOMs from<br>scan targets</small>"]:::Ash
    grant["***Grant***<br><small>Analyzes licenses<br>from SBOM</small>"]:::Ash

    vunnel --> grypedb --> grype
    syft --> grype & grant

    vunnel@{ shape: event}
    grypedb@{ shape: event}
    grype@{ shape: event}
    syft@{ shape: event}
    grant@{ shape: event}

    classDef Ash stroke-width:1px, stroke-dasharray:none, stroke:#424242, fill:#e1ffe1, color:#000000

Zooming in to the 20,000 ft view, here’s how data flows through the same system:

---
config:
  layout: dagre
  look: handDrawn
  theme: default
  flowchart:
    curve: linear
---
flowchart TB

  feed1["NVD Feed"]
  feed2["Alpine Feed"]
  feed3["... (20+ feeds)"]

  subgraph anchore["<b>Anchore Infrastructure</b>"]
    vunnel["Vunnel"]
    grypedb["Grype DB"]
    cache["Daily DB"]
    vunnel --> grypedb --> cache
  end


  subgraph user["<b>User Environment</b>"]
    targets["Image, filesystem,<br>PURLs, directory, ..."]
    local["DB Cache"]

    syft["Syft"]
    sbom["SBOM"]

    targets --> syft --> sbom

    grype["Grype"]
    vulns["Vulnerability+Package<br>Matches"]
    grant["Grant"]
    licenses["License Compliance<br>Report"]

    grype --> vulns
    grant --> licenses

    sbom --> grype
    sbom --> grant
    local --> grype
  end

  feed1 --> vunnel
  feed2 --> vunnel
  feed3 -.-> vunnel

  cache -. "<i>download</i>" .-> local

  feed1:::ExternalSource@{ shape: cloud}
  feed2:::ExternalSource@{ shape: cloud}
  feed3:::ExternalSource@{ shape: cloud}
  vunnel:::Application@{ shape: event}
  grypedb:::Application@{ shape: event}
  grype:::Application@{ shape: event}
  syft:::Application@{ shape: event}
  grant:::Application@{ shape: event}

  targets:::AnalysisInput
  cache:::Database@{ shape: db}
  local:::Database@{ shape: db}
  sbom:::Document@{ shape: doc}
  vulns:::Document@{ shape: doc}
  licenses:::Document@{ shape: doc}

  style anchore fill:none, stroke:#333333, stroke-width:2px, stroke-dasharray:5 5
  style user fill:none, stroke:#333333, stroke-width:2px, stroke-dasharray:5 5

  classDef AnalysisInput stroke-width:1px, stroke-dasharray:none, stroke:#424242, fill:#f0f8ff, color:#000000
  classDef ExternalSource stroke-width:1px, stroke-dasharray:none, stroke:#424242, fill:#f0f8ff, color:#000000
  classDef Application stroke-width:1px, stroke-dasharray:none, stroke:#424242, fill:#e1ffe1, color:#000000
  classDef Document stroke-width:1px, stroke-dasharray:none, stroke:#424242, fill:#fff9c4, color:#000000
  classDef Database stroke-width:1px, stroke-dasharray:none, stroke:#424242, fill:#fff9c4, color:#000000

7.1 - Go CLI patterms

All of the common patterns used in our go-based CLIs

TL;DR

We use…

Clio to orchestrate cobra and viper, covering CLI arg parsing and config file + env var loading.
An event bus to enabling visibility deep in your execution stack, driving the UI experience.
A logger interface, allowing you to swap out for any concrete logger you’d like (including built in redaction support).
bubbletea as the TUI framework with the bubbly component library.
binny for managing specific versions of developer binary tools for local development.
goreleaser for building and publishing releases.
chronicle for automatically generating release notes based on github issues and PR titles/labels.
quill for signing and notarizing release binaries for Mac.

This document explains how all of the golang-base Anchore OSS tools are organized, covering the package structure, common core architectural concepts, and where key functionality is implemented.

Use this as a reference when trying to familiarize yourself with the overall structure of Syft, Grype, or other applications.

CLI

The cmd package uses the Clio framework (built on top of the spf13/cobra and spf13/viper) to manage flag/argument parsing, configuration, and command execution.

All flags, arguments, and config arguments are represented in the application as a struct. Each command tends to get it’s own struct with all options the command needs to function. Common options or sets of options can be defined independently and reused across commands, being composed within each command struct that needs the option.

Select options that represent flags are registered with the AddFlags method defined on the command struct (or on each option struct used within the command struct). If any additional processing is needed to be done to elements in command structs or option structs before being used in the application then you can define a PostLoad method on the struct to mutate the elements you need.

In terms of what is executed when: all processing is done within the selected cobra command’s PreRun hook, wrapping any potential user-provided hook. This means that all of this fits nicely into the existing cobra command lifecycle.

See the sign command in Quill for a small example of all of this together.

The reason for this approach is to smooth over the rough edges between cobra and viper, which have multiple ways to configure and use functionality, and provide a single way to specify any input into the application. Being prescriptive about these approaches has allowed us to take many shared concerns that used to be a lot of boilerplate when creating an application and put it into one framework –Clio.

Execution flow

The following diagrams show the execution of a typical Anchore application at different levels of detail, using the scan command in Syft as a representative example:

sequenceDiagram
    actor user as User
    participant syft as Syft Application
    participant cmd as Command Handler (Cobra)
    participant lib as Library

    user->>syft: syft scan alpine:latest
    syft->>cmd: Execute
    cmd->>cmd: Initialize & Load Configuration
    cmd->>lib: Execute Scan Logic
    lib->>cmd: SBOM
    cmd-->>user: Display/Write SBOM

sequenceDiagram
    actor user as User

    box rgba(0,0,0,.1) Syft Application
      participant main as main.go
      participant cliApp as cli.Application()
      participant clio as Clio Framework
    end

    box rgba(0,0,0,.1) Command Handler
      participant cobra as Command PreRunE
      participant opts as Command Options
      participant runE as Command RunE
    end

    participant lib as Library

    user->>main: syft scan alpine:latest

    Note over main,clio: Syft Application (initialization)
    main->>cliApp: Create app with ID
    cliApp->>clio: clio.New(config)
    clio-->>cliApp: app instance

    Note over cliApp,cobra: Build Command Tree
    cliApp->>cliApp: commands.Scan(app)
    cliApp->>clio: app.SetupCommand(&cobra.Command, opts)
    Note over clio: Bind config sources to options struct
    clio-->>cliApp: configured scanCmd

    cliApp->>cliApp: commands.Root(app, scanCmd)
    cliApp->>clio: app.SetupRootCommand(&cobra.Command, opts)
    clio-->>cliApp: rootCmd with scanCmd attached

    main->>clio: app.Run()
    clio->>cobra: rootCmd.Execute()

    Note over cobra,runE: Command Handler (execution)
    cobra->>cobra: Parse args → "scan alpine:latest"
    cobra->>opts: Load config (files/env/flags)
    cobra->>opts: opts.PostLoad() validation
    cobra->>runE: RunE(cmd, args)

    runE->>lib: Execute Scan Logic
    lib-->>runE: SBOM

    Note over runE: Result Output
    runE-->>user: SBOM output

Package structure

Many of the Anchore OSS tools have the following setup (or very similar):

/cmd/NAME/ - CLI application layer. This is the entry point for the command-line tool and wires up much of the functionality from the public API.

./cmd/NAME/
│   ├── cli/
│   │   ├── cli.go          // where all commands are wired up
│   │   ├── commands/       // all command implementations
│   │   ├── options/        // all command flags and configuration options
│   │   └── ui/             // all handlers for events that are shown on the UI
│   └── main.go             // entrypoint for the application
...

/NAME/ - Public library API. This is how API users interact with the underlying capabilities without coupling to the application configuration, specific presentation on the terminal, or high-level workflows.

The internalization philosophy

Applications extensively use internal/ packages at multiple levels to minimize the public API surface area. The codebase follows the guiding principle “internalize anything you can” - expose only what library consumers truly need.

Take for example the various internal packages within Syft

/internal/               # Project-wide internals (bus, log, etc...)
/syft/internal/          # Syft library-specific internals (relationships, evidence)
/cmd/syft/internal/      # CLI-specific internals (options, UI handlers)
/syft/source/internal/   # Package-specific internals (source resolution details)
/syft/pkg/cataloger/<ecosystem>/internal/  # Cataloger-specific internals

This multi-level approach allows Syft to expose a minimal, stable public API while keeping implementation details flexible and changeable. Go’s module system prevents importing internal/ packages from outside their parent directory, which enforces clean separation of concerns.

Core facilities

The bus system

The bus system, under /internal/bus/ within the target application, is an event publishing mechanism that enables progress reporting and UI updates without coupling the library to any specific user interface implementation.

The bus follows a strict one-way communication pattern: the library publishes events but never subscribes to them. The intention is that functionality is NOT fulfilled by listening to events on the bus and taking action. Only the application layer (CLI) subscribes to events for display. This keeps the library completely decoupled from UI concerns.

You can think of the bus as a structured extension of the logger, allowing for publishing not just strings or maps of strings, but enabling publishing objects that can yield additional telemetry on-demand, fueling richer interactions.

This enables library consumers to implement any UI they want (terminal UI, web UI, no UI) by subscribing to events and handling them appropriately. The library has zero knowledge of how events are used, maintaining a clean separation between business logic and presentation.

The bus is implemented as a singleton with a global publisher that can be set by library consumers:

var publisher partybus.Publisher

func Set(p partybus.Publisher) {
    publisher = p
}

func Publish(e partybus.Event) {
    if publisher != nil {
        publisher.Publish(e)
    }
}

The library calls bus.Publish() throughout cataloging operations. If no publisher is set, events are silently discarded. This makes events truly optional.

Event streams

Picking the right “level” for events is key. Libraries tend to not assume that events can be read “quickly” off the bus. At the same time, to remain lively and useful, we want to be able to have consumers of the bus to get information at a rate they choose. A common pattern used is to publish a “start” event (for example, “cataloging started”) and publish with that event a read-only, thread-safe object that can be polled by the caller to get progress or status-based information out.

sequenceDiagram
    participant CMD as cmd/<br/>(CLI Layer)
    participant Bus as internal/bus/<br/>(Event Bus)
    participant Lib as lib/<br/>(Library Layer)
    participant Progress as Progress Object

    CMD->>Bus: Subscribe()
    CMD->>+Lib: PerformOperation()
    Lib->>Progress: Create progress object
    Lib->>Bus: Publish(StartEvent, progress)
    Bus->>CMD: StartEvent

    loop Poll until complete
        CMD->>Progress: Size(), Current(), Stage(), Error()
        Progress-->>CMD: status (Error: nil)
    end

    Lib-->>-CMD: Return result
    CMD->>Progress: Error()
    Progress-->>CMD: ErrCompleted

This prevents against the library accidentally being a “firehose” and overwhelming subscribers who are trying to convey timely information. When subscribers cannot keep up with the amount of events emitted from the library then the very information being displayed tends to get stale and useless anyway. At the same time, the there is a lot of value in responding to events instead of polling for all information.

This pattern helps to balance the best of both worlds, getting an event driven system with a consumer-driven update cadence.

The logging system

The logging system, under /internal/log/ within the target application, provides structured logging throughout Anchore’s applications with an injectable logger interface. This allows library consumers to integrate the application’s logging into their own logging infrastructure. There is an adapter for logrus to this interface implemented, and we’re happy to take additional contributions for other concrete logger adapters.

The logging system is implemented as a singleton with global functions (log.Info, log.Debug, etc.). Library consumers inject their logger by calling the public API function syft.SetLogger(yourLoggerHere).

By default, Syft uses a discard logger (no-op) that silently ignores all log messages. This ensures the library produces no output unless a logger is explicitly provided.

All loggers are automatically wrapped with a redaction layer when you call SetLogger(). The wrapping is applied internally by the logging system, which removes sensitive information (like authentication tokens) from log output. This happens transparently within the application CLI, however, API users will need to explicitly register secrets to be redacted.

Releasing

Each application uses goreleaser to build and publish releases, as orchestrated by a release workflow.

The release workflow can be triggered with make release from a local checkout of the repository. Chronicle is used to automatically generate release notes based on GitHub issues and PR titles/labels, using the same information to determine the next version for the release.

With each repo, we tend to publish (but some details may vary slightly between repos):

a tag with the version (e.g., v0.50.0)
binaries for Linux, Mac, and Windows, uploaded as GitHub release assets (note, we sign and notarize Mac binaries with Quill)
Docker images, pushed to Docker Hub and ghcr.io registries
Update homebrew taps

We ensure the same tool versions are used locally and in CI by using Binny, orchestrated with make and task.

7.2 - Syft

Architecture and design of the Syft SBOM tool

Note

See the Golang CLI Patterns for common structures and frameworks used in Syft and across other Anchore open source projects.

For detailed API examples, see the Syft repository on GitHub.

Code organization

At a high level, this is the package structure of Syft:

./cmd/syft/                 // main entrypoint
│   └── ...
└── syft/                   // the "core" syft library
    ├── format/             // contains code to encode or decode to and from SBOM formats
    ├── pkg/                // contains code to catalog packages from a source
    ├── sbom/               // contains the definition of an SBOM
    └── source/             // contains code to create a source object for some input type (e.g. container image, directory, etc)

Syft’s core library is implemented in the syft package and subpackages. The major packages work together in a pipeline:

The syft/source package produces a source.Source object that can be used to catalog a directory, container, and other source types.
The syft package knows how to take a source.Source object and catalog it to produce an sbom.SBOM object.
The syft/format package contains the ability to encode an sbom.SBOM object to and from different SBOM formats (such as SPDX and CycloneDX).

This design creates a clear flow: source → catalog → format:

sequenceDiagram
    actor User
    participant CLI
    participant Resolve as Source Resolution
    participant Catalog as SBOM Creation
    participant Format as Format Output

    User->>CLI: syft scan <target>
    CLI->>CLI: Parse configuration

    CLI->>Resolve: Resolve input (image/dir/file)
    Note over Resolve: Tries: File→Directory→OCI→Docker→Podman→Containerd→Registry
    Resolve-->>CLI: source.Source

    CLI->>Catalog: Create SBOM from source
    Note over Catalog: Task-based cataloging engine
    Catalog-->>CLI: sbom.SBOM struct

    CLI->>Format: Write to format(s)
    Note over Format: Parallel: SPDX, CycloneDX, Syft JSON, etc.
    Format-->>User: SBOM file(s)

Shows the task-based architecture and execution phases. Tasks are selected by tags (image/directory/installed) and organized into serial phases, with parallel execution within each phase.

sequenceDiagram
    participant CLI as scan.go
    participant GetSource as Source Providers
    participant CreateSBOM as syft.CreateSBOM
    participant Config as CreateSBOMConfig
    participant Executor as Task Executor
    participant Builder as sbomsync.Builder
    participant Resolver as file.Resolver

    Note over CLI,GetSource: Source Resolution
    CLI->>GetSource: GetSource(userInput, cfg)
    GetSource->>GetSource: Try providers until success
    GetSource-->>CLI: source.Source + file.Resolver

    Note over CLI,Builder: SBOM Creation (task-based architecture)
    CLI->>CreateSBOM: CreateSBOM(ctx, source, cfg)
    CreateSBOM->>Config: makeTaskGroups(srcMetadata)

    Note over Config: Task Selection & Organization
    Config->>Config: Select catalogers by tags<br/>(image/directory/installed)
    Config->>Config: Organize into execution phases
    Config-->>CreateSBOM: [][]Task (grouped by phase)

    CreateSBOM->>Builder: Initialize thread-safe builder

    Note over CreateSBOM,Executor: Phase 1: Environment Detection
    CreateSBOM->>Executor: Execute environment tasks
    Executor->>Resolver: Read OS release files
    Executor->>Builder: SetLinuxDistribution()

    Note over CreateSBOM,Executor: Phase 2: Package + File Cataloging
    CreateSBOM->>Executor: Execute package & file tasks
    par Parallel Task Execution
        Executor->>Resolver: Read package manifests
        Executor->>Builder: AddPackages()
    and
        Executor->>Resolver: Read file metadata
        Executor->>Builder: Add file artifacts
    end

    Note over CreateSBOM,Executor: Phase 3: Post-Processing
    CreateSBOM->>Executor: Execute relationship tasks
    Executor->>Builder: AddRelationships()
    CreateSBOM->>Executor: Execute cleanup tasks

    CreateSBOM-->>CLI: *sbom.SBOM

    Note over CLI: Format Output
    CLI->>CLI: Write multi-format output

The `Package` object

The pkg.Package object is a core data structure that represents a software package.

Key fields include:

FoundBy: the name of the cataloger that discovered this package (e.g. python-pip-cataloger).
Locations: the set of paths and layer IDs that were parsed to discover this package.
Language: the language of the package (e.g. python).
Type: a high-level categorization of the ecosystem the package resides in. For instance, even if the package is an egg, wheel, or requirements.txt reference, it is still logically a “python” package. Not all package types align with a language (e.g. rpm) but it is common.
Metadata: specialized data for specific location(s) parsed. This should contain as much raw information as seems useful, kept as flat as possible using the raw names and values from the underlying source material.

Additional package `Metadata`

Packages can have specialized metadata that is specific to the package type and source of information. This metadata is stored in the Metadata field of the pkg.Package struct as an any type, allowing for flexibility in the data stored.

When pkg.Package is serialized, an additional MetadataType field is shown to help consumers understand the datashape of the Metadata field.

By convention the MetadataType value follows these rules:

Only use lowercase letters, numbers, and hyphens. Use hyphens to separate words.
Anchor the name in the ecosystem, language, or packaging tooling. For language ecosystems, prefix with the language/framework/runtime. For instance dart-pubspec-lock is better than pubspec-lock. For OS package managers this is not necessary (e.g. apk-db-entry is good, but alpine-apk-db-entry is redundant).
Be as specific as possible to what the data represents. For instance ruby-gem is NOT a good MetadataType value, but ruby-gemspec is, since Ruby gem information can come from a gemspec file or a Gemfile.lock, which are very different.
Describe WHAT the data is, NOT HOW it’s used. For instance r-description-installed-file is not good since it’s trying to convey how we use the DESCRIPTION file. Instead simply describe what the DESCRIPTION file is: r-description.
Use the lock suffix to distinguish between manifest files that loosely describe package version requirements vs files that strongly specify one and only one version of a package (“lock” files). These should only be used with respect to package managers that have the guide and lock distinction, but would not be appropriate otherwise (e.g. rpm does not have a guide vs lock, so lock should NOT be used to describe a db entry).
Use the archive suffix to indicate a package archive (e.g. rpm file, apk file) that describes the contents of the package. For example an RPM file would have a rpm-archive metadata type (not to be confused with an RPM DB record entry which would be rpm-db-entry).
Use the entry suffix to indicate information about a package found as a single entry within a file that has multiple package entries. If found within a DB or flat-file store for an OS package manager, use db-entry.
Should NOT contain the phrase package, though exceptions are allowed if the canonical name literally has the phrase package in it.
Should NOT have a file suffix unless the canonical name has the term “file”, such as a pipfile or gemfile.
Should NOT contain the exact filename+extensions. For instance pipfile.lock shouldn’t be in the name; instead describe what the file is: python-pipfile-lock.
Should NOT contain the phrase metadata, unless the canonical name has this term.
Should represent a single use case. For example, trying to describe Hackage metadata with a single HackageMetadata struct is not allowed since it represents 3 mutually exclusive use cases: stack.yaml, stack.lock, or cabal.project. Each should have its own struct and MetadataType.

The goal is to provide a consistent naming scheme that is easy to understand. If the rules don’t apply in your situation, use your best judgement.

When the underlying parsed data represents multiple files, there are two approaches:

Use the primary file to represent all the data. For instance, though the dpkg-cataloger looks at multiple files, it’s the status file that gets represented.
Nest each individual file’s data under the Metadata field. For instance, the java-archive-cataloger may find information from pom.xml, pom.properties, and MANIFEST.MF. The metadata is java-metadata with each possibility as a nested optional field.

Package Catalogers

Catalogers are the mechanism by which Syft identifies and constructs packages given a targeted list of files.

For example, a cataloger can ask Syft for all package-lock.json files in order to parse and raise up JavaScript packages (see file globs and file parser functions for examples).

There is a generic cataloger implementation that can be leveraged to quickly create new catalogers by specifying file globs and parser functions (browse the source code for syft catalogers for example usage).

Design principles

From a high level, catalogers have the following properties:

They are independent of one another. The Java cataloger has no idea of the processes, assumptions, or results of the Python cataloger, for example.
They do not know what source is being analyzed. Are we analyzing a local directory? An image? If so, the squashed representation or all layers? The catalogers do not know the answers to these questions. Only that there is an interface to query for file paths and contents from an underlying “source” being scanned.
Packages created by the cataloger should not be mutated after they are created. There is one exception made for adding CPEs to a package after the cataloging phase, but that will most likely be moved back into the cataloger in the future.

Naming conventions

Cataloger names should be unique and named with these rules in mind:

Must end with -cataloger
Use lowercase letters, numbers, and hyphens only
Use hyphens to separate words
Catalogers for language ecosystems should start with the language name (e.g. python-)
Distinguish between when the cataloger is searching for evidence of installed packages vs declared packages. For example, there are two different gemspec-based catalogers: ruby-gemspec-cataloger and ruby-installed-gemspec-cataloger, where the latter requires that the gemspec is found within a specifications directory (meaning it was installed, not just at the root of a source repo).

File search and selection

All catalogers are provided an instance of the file.Resolver to interface with the image and search for files. The implementations for these abstractions leverage stereoscope to perform searching. Here is a rough outline how that works:

A stereoscope file.Index is searched based on the input given (a path, glob, or MIME type). The index is relatively fast to search, but requires results to be filtered down to the files that exist in the specific layer(s) of interest. This is done automatically by the filetree.Searcher abstraction. This abstraction will fallback to searching directly against the raw filetree.FileTree if the index does not contain the file(s) of interest. Note: the filetree.Searcher is used by the file.Resolver abstraction.
Once the set of files are returned from the filetree.Searcher the results are filtered down further to return the most unique file results. For example, you may have requested files by a glob that returns multiple results. These results are filtered down to deduplicate by real files, so if a result contains two references to the same file (one accessed via symlink and one accessed via the real path), then the real path reference is returned and the symlink reference is filtered out. If both were accessed by symlink then the first (by lexical order) is returned. This is done automatically by the file.Resolver abstraction.
By the time results reach the pkg.Cataloger you are guaranteed to have a set of unique files that exist in the layer(s) of interest (relative to what the resolver supports).

CLI and core API

The CLI (in the cmd/syft/ package) and the core library API (in the syft/ package) are separate layers with a clear boundary. Application level concerns always reside with the CLI, while the core library focuses on SBOM generation logic. That means that there is an application configuration (e.g. cmd/syft/cli) and a separate library configuration, and when the CLI uses the library API, it must adapt its configuration to the library’s configuration types. In that adapter, the CLI layer defers to API-level defaults as much as possible so there is a single source of truth for default behavior.

See the Syft reponitory on GitHub for detailed API example usage.

7.3 - Grype

Architecture and design of the Grype vulnerability scanner

Note

See the Golang CLI Patterns for common structures and frameworks used in Grype and across other Anchore open source projects.

Code organization

At a high level, this is the package structure of Grype:

./cmd/grype/                // main entrypoint
│   └── ...
└── grype/                  // the "core" grype library
    ├── db/                 // vulnerability database management, schemas, readers, writers, and build utilities
    │   ├── data/           // common build abstractions: processors, transformers, entries, writers
    │   ├── processors/     // all data processors (nvd, osv, github, msrc, os, openvex, epss, kev, eol, etc.)
    │   ├── provider/       // provider file/state/workspace management for build inputs
    │   ├── v5/             // v5 database schema
    │   │   └── build/      // v5 build utilities (transformers, processors, writer)
    │   └── v6/             // v6 database schema
    │       └── build/      // v6 build utilities (transformers, processors, writer)
    ├── match/              // core types for matches and result processing
    ├── matcher/            // vulnerability matching strategies
    │   ├── stock/          // default matcher (ecosystem + CPE)
    │   └── <ecosystem>/    // ecosystem-specific matchers (java, dpkg, rpm, etc.)
    ├── pkg/                // types for package representation (wraps Syft packages)
    ├── search/             // search criteria and strategies
    ├── version/            // version comparison across formats
    ├── vulnerability/      // core types for vulnerabilities and provider interface
    └── presenter/          // output formatters (JSON, table, etc.)

The grype package and subpackages implement Grype’s core library. The major packages work together in a pipeline:

The grype/pkg package wraps Syft packages and prepares them as match candidates, augmenting them with upstream package information and CPEs.
The grype/matcher package contains matching strategies that search for vulnerabilities matching specific package types.
The grype/db package manages the vulnerability database and provides query interfaces for matchers.
The grype/vulnerability package defines vulnerability data structures and the Provider interface for database queries.
The grype/search package implements search strategies (ecosystem, distro, CPE) and criteria composition.
The grype/presenter package formats match results into various output formats.

This design creates a clear flow: SBOM → package preparation → matching → results:

sequenceDiagram
    actor User
    participant CLI
    participant DB as Database
    participant Prep as Package Prep
    participant Match as Matching Engine
    participant Post as Post-Processing
    participant Format as Presenter

    User->>CLI: grype <target>
    CLI->>CLI: Parse configuration

    Note over CLI: Input Phase
    alt SBOM provided
        CLI->>CLI: Load SBOM from file
    else Scan target
        CLI->>CLI: Generate SBOM with Syft
    end

    Note over CLI,Prep: Preparation Phase
    CLI->>DB: Load vulnerability database
    DB-->>CLI: Database provider

    CLI->>Prep: Prepare packages for matching
    Note over Prep: Wrap Syft packages<br/>Add upstream packages<br/>Generate CPEs<br/>Filter overlaps
    Prep-->>CLI: Match candidates

    Note over CLI,Match: Matching Phase
    CLI->>Match: FindMatches(match candidates, provider)
    Note over Match: Group by package type<br/>Select matchers<br/>Execute in parallel
    Match-->>CLI: Raw matches + ignore filters

    Note over CLI,Post: Post-Processing Phase
    CLI->>Post: Process matches
    Note over Post: Apply ignore filters<br/>Apply user ignore rules<br/>Apply VEX statements<br/>Deduplicate results
    Post-->>CLI: Final matches

    Note over CLI,Format: Output Phase
    CLI->>Format: Format results
    Format-->>User: Vulnerability report

This diagram zooms into the Matching Phase from the high-level diagram, showing how the matching engine executes parallel matcher searches against the database. Components are grouped in boxes to show how they map to the high-level participants.

sequenceDiagram
    participant CLI as grype/main

    box rgba(200, 220, 240, 0.3) Matching Engine
        participant Matcher as VulnerabilityMatcher
        participant M as Matcher<br/>(Stock, Java, Dpkg, etc.)
    end

    participant Search as Search Strategies

    box rgba(220, 240, 200, 0.3) Database
        participant Provider as DB Provider
        participant DB as SQLite
    end

    Note over CLI,DB: Matching Phase (expanded from high-level view)
    CLI->>Matcher: FindMatches(match candidates, provider)

    Matcher->>Matcher: Group candidates by package type

    Note over Matcher,M: Each matcher runs in parallel with ecosystem-specific logic

    loop For each package type (stock, java, dpkg, etc.)
        Matcher->>M: Match(packages for this type)
        M->>Search: Build search criteria<br/>(ecosystem, distro, or CPE-based)
        Search->>Provider: SearchForVulnerabilities(criteria)
        Provider->>DB: Query vulnerability_handles
        DB-->>Provider: Matching handles
        Provider->>Provider: Compare versions against constraints
        Provider->>DB: Check unaffected_package_handles
        DB-->>Provider: Unaffected records
        Provider->>DB: Load blobs for confirmed matches
        DB-->>Provider: Vulnerability details
        Provider-->>Search: Confirmed matches
        Search-->>M: Filtered matches
        M-->>Matcher: Matches + ignore filters
    end

    Matcher->>Matcher: Collect matches from all matchers
    Matcher-->>CLI: Raw matches + ignore filters

    Note over CLI: Continues to Post-Processing Phase (see high-level view)

Relationship to Syft

Grype uses Syft’s SBOM generation capabilities rather than reimplementing package cataloging. The integration happens at two levels:

External SBOMs: You can provide an SBOM file generated by Syft (or any SPDX/CycloneDX SBOM), and Grype consumes it directly.
Inline scanning: When you provide a scan target (like a container image or directory), Grype invokes Syft internally to generate an SBOM, then immediately matches it against vulnerabilities.

The grype/pkg package wraps syft/pkg.Package objects and augments them with matching-specific data:

Upstream packages: For packages built from source (like Debian or RPM packages), Grype adds references to the source package so it can search both the binary package name and source package name.
CPE generation: Grype generates Common Platform Enumeration (CPE) identifiers for packages based on their metadata, enabling CPE-based matching as a fallback strategy.
Distro context: Grype preserves the Linux distribution information from Syft to enable distro-specific vulnerability matching.

This wrapping pattern maintains a clear architectural boundary. Syft focuses on finding packages, while Grype focuses on finding vulnerabilities in those packages.

Package representation

The grype/pkg package converts Syft packages into Grype match candidates. The pkg.FromCollection() function performs this conversion:

Wraps each Syft package in a grype.Package that preserves the original package data.
Adds upstream packages for packages that have source package relationships (e.g., a Debian binary package has a source package).
Generates CPEs based on package metadata (name, version, vendor, product).
Filters overlapping packages for comprehensive distros (like Debian or RPM-based distros) where you might have both installed packages and package files, preferring the installed packages.

The grype.Package type maintains a reference to the original syft.Package while augmenting it with:

Upstreams []UpstreamPackage: Source packages to search in addition to the binary package.
CPEs []syftPkg.CPE: Generated CPE identifiers for fallback matching.

This design preserves the complete SBOM information while preparing packages for the matching process. Matchers receive these enhanced packages and decide which attributes to use for searching.

Data flow

The data flow through Grype follows these steps:

SBOM ingestion: Load an SBOM from a file or generate one by scanning a target.
Package conversion: Convert Syft packages into grype.Package match candidates, adding upstream packages, CPEs, and filtering overlapping packages.
Matcher selection: Group packages by type (e.g., Java, dpkg, npm) and select appropriate matchers.
Parallel matching: Execute matchers in parallel, each querying the database with search criteria specific to their package types.
Result aggregation: Collect matches from all matchers and apply deduplication using ignore filters.
Post-processing: Apply user-configured ignore rules, VEX (Vulnerability Exploitability eXchange) statements, and optional CVE normalization.
Output formatting: Format the final matches using the selected presenter (JSON, table, SARIF, etc.).

The database sits at the center of this flow. All matchers query the same database provider, but they use different search strategies based on their package types.

Vulnerability database

Grype uses a SQLite database to store vulnerability data. The database design prioritizes query performance and storage efficiency.

In order to interoperate any DB schema with the high-level Grype engine, each schema must implement a Provider interface. This allows for DB specific schemas to be adapted to the core Grype types.

`v6` Schema design

The overall design of the v6 database schema is heavily influenced by the OSV schema, so if you are familiar with OSV, many of the entities / concepts will feel similar.

The database uses a blob + handle pattern:

Handles: Small, indexed records containing anything you might want to search by (package name, vulnerability id, provider name, etc.). Grype stores these in tables optimized for fast lookups. These tables point to blobs for full details. See the Grype DB SQL schemas for more details on handle table structures.
Blobs: Full JSON documents containing complete vulnerability details. Grype stores these separately and loads them only when a match is made. See the Grype DB blob schemas for more details on blob structures.

This separation allows Grype to quickly query millions of vulnerability records without loading full vulnerability details until necessary.

Key tables include:

vulnerability_handles: Searchable for vulnerability records by name (CVE/advisory ID), status (active, withdrawn, etc), published/modified/withdrawn dates, and provider ID. References a blob containing full vulnerability details (description, references, aliases, severities).
affected_package_handles: Links vulnerabilities, packages, and (optionally) operating systems. The referenced blob contains version constraints (for example, “vulnerable in 1.0.0 to 1.2.5”) and fix information. Used when the package ecosystem is known (npm, python, gem, etc.).
unaffected_package_handles: Explicitly marks package versions that are NOT vulnerable. Same structure as affected_package_handles but represents exemptions. These are applied on top of any discovered affected records to remove matches (thus reduce false positives).
affected_cpe_handles: Links vulnerabilities and explicit CPEs, useful when a CPE cannot be resolved to a clear package ecosystem.
packages: Stores unique ecosystem + name combinations (for example, ecosystem=‘npm’, name=‘lodash’).
operating_systems: Stores OS release information with name, major/minor version, codename, and channel (for example, RHEL EUS versus mainline). Provides context for distro-specific package matching.
cpes: Stores parsed CPE 2.3 components (part, vendor, product, edition, etc.). Version constraints are stored in blobs, not in this table.
blobs: Complete vulnerability, package, and decorator details as compressed JSON. There are 3 blob types:
- VulnerabilityBlob (full vulnerability data)
- PackageBlob (version ranges and fixes)
- KnownExploitedVulnerabilityBlob (KEV catalog data).

Additional decorator tables enhance vulnerability information:

known_exploited_vulnerability_handles: Links CVE identifiers to blob containing CISA KEV catalog data (date added, vendor, product, required action, ransomware campaign use).
epss_handles: Stores EPSS (Exploit Prediction Scoring System) data with CVE identifier, EPSS score (0-1 probability), and percentile ranking.
cwe_handles: Maps CVE identifiers to CWE (Common Weakness Enumeration) IDs with source and type information.

The schema also includes a package_cpes junction table creating many-to-many relationships between packages and CPEs. When a CPE can be resolved to a package (via this table), vulnerabilities use affected_package_handles. When a CPE cannot be resolved, vulnerabilities use affected_cpe_handles instead.

Grype versions the database schema (currently v6). When the schema changes, users download a new database file that Grype automatically detects and uses.

Data organization

Relationships between tables enable efficient querying:

Matchers create search criteria (package name, version, distro, etc.).
The database provider queries the appropriate handle tables with these criteria.
The grype/version package filters handles by version constraints.
The provider loads the corresponding vulnerability blob for confirmed matches.
The complete vulnerability record returns to the matcher.

Version constraints in the database use multi-version constraint syntax, allowing a single record to express complex version ranges like “affected in 1.0.0 to 1.2.5 and 2.0.0 to 2.1.3”.

Matching engine

The matching engine orchestrates vulnerability matching across different package types. The core component is the VulnerabilityMatcher, which:

Groups packages by type: Java packages go to the Java matcher, dpkg packages to the dpkg matcher, etc.
Selects matchers: Each matcher declares which package types it handles.
Executes matching: Matchers run in parallel, querying the database with their specific search strategies.
Collects results: Matches from all matchers are aggregated.
Applies ignore filters: Matchers can mark certain matches to be ignored by other matchers, preventing duplicate reporting.

The ignore filter mechanism is important. For example, the dpkg matcher searches both the binary package name and the source package name. When it finds a match via the source package, it creates an ignore filter so the stock matcher doesn’t report the same vulnerability using a CPE match. This prevents duplicate matches for the same vulnerability.

Matchers

Each matcher implements the Matcher interface. This allows Grype to support multiple matching strategies for different package ecosystems.

The process of making a match involves several steps:

Candidate creation: Matchers create match candidates when database records meet search criteria.
Version comparison: The grype/version package compares the package version against the vulnerability’s version constraints.
Unaffected check: If the database has an explicit “not affected” record for this version, the match is rejected.
Match creation: Confirmed matches become Match objects with confidence scores (the scores are currently unused).
Ignore filter check: Matches are checked against ignore filters from other matchers.
User ignore rules: Matches are checked against user-configured ignore rules.

Search strategies

Matchers determine what to search for based on package type and available metadata. Grype supports three main search strategies:

Ecosystem search: Queries vulnerabilities by package name and version within a specific package ecosystem (npm, pypi, gem, etc.). Search fields include ecosystem, package name, and version. The database returns handles where the package name matches and version constraints include the specified version.
Distro search: Queries vulnerabilities by Linux distribution, package name, and version for OS packages managed by apt, yum, or apk. Search fields include distro name and version (for example, debian:10), package name, and version. Also understands distro channels like RHEL EUS versus mainline.
CPE matching: Fallback strategy when ecosystem or distro matching isn’t applicable, using CPE identifiers in the format cpe:2.3:a:vendor:product:version:.... Search fields include CPE components (part, vendor, product). Broader and less precise than ecosystem matching, used primarily when ecosystem data isn’t available.

Search criteria system

The grype/search package provides a criteria system that matchers use to express search requirements. Criteria can be combined with AND and OR operators:

AND(ecosystem("npm"), packageName("lodash"), version("4.17.20"))
OR(distro("debian:10"), distro("debian:11"))

The database provider translates these criteria into SQL queries against the handle tables. This abstraction allows matchers to express complex search requirements without writing SQL directly.

Ideally, matchers orchestrate search criteria at a high level, letting each specific criteria type handle its own needs. It’s the vulnerability provider that ultimately translates criteria into efficient database queries.

Version comparison

Grype supports multiple version formats because different ecosystems have different versioning schemes. The grype/version package provides format-specific version comparers, falling back to a “catch all” fuzzy comparer when the format cannot be determined.

Each format has its own constraint parser that understands ecosystem-specific constraint syntax. The version comparison system detects the appropriate format based on the package type, then uses the correct comparer to evaluate version constraints from the database.

The records from the Grype DB specify which version format to use on one side of the comparison, and the package type determines the format on the other side. If no specific format is found, or the formats are incompatible (essentially do not match), the fuzzy comparer is used as a last resort.

DB build utilities

The grype/db package holds both the read-side logic (schema definitions, readers, and the vulnerability provider used during scanning) and the write-side logic (the build utilities that transforms raw vulnerability data into a Grype database). The Grype DB CLI orchestrates the build utilities, but all transformation and writing logic lives here in the grype library.

Core abstractions

The build utilities uses the following abstractions, defined in the grype/db/data package:

Processor - Unmarshals entries from a given provider, passes them into Transformers, and returns resulting entries. The object definition is schema-agnostic, but instances are schema-specific since Transformers are dependency-injected.
Transformer (v5, v6) - Takes raw data entries of a specific vunnel-defined schema and transforms them into schema-specific entries for database writing.
Entry - Encapsulates schema-specific database records produced by Processors/Transformers and accepted by Writers.
Writer (v5, v6) - Takes Entry objects and writes them to a backing store (a SQLite database).

Data flow

These abstractions work together in the following flow:

%%{ init: { 'flowchart': { 'curve': 'linear' } } }%%
flowchart LR
    A["Provider"]

    subgraph processor["Processor"]
        direction LR
        B["unmarshaller"]
        C["v# Transformer"]
        B --> C
    end

    D["Writer"]
    E["grype/db/v#/build/writer.Write"]

    A -->|"cache file"| processor
    processor -->|"[]Entry"| D --> E

    style processor fill:none

Where there is:

A Provider for each upstream data source (e.g. canonical, redhat, github, NIST, etc.)
A Processor for every vunnel-defined data shape (github, os, msrc, nvd, etc., defined in the vunnel repo)
A Transformer for every processor and DB schema version pairing
A Writer for every DB schema version

Build code organization

grype/db/
├── data/                    # common abstractions: entry.go, processor.go, transformers.go, writer.go
├── processors/              # all processors (nvd, osv, github, msrc, os, openvex, epss, kev, eol, etc.)
├── provider/                # provider file/state/workspace management
│   └── entry/
├── internal/                # gormadapter, sqlite
├── v5/
│   └── build/               # v5 build utilities
│       ├── transformers/    # v5-specific transformers
│       ├── processors.go    # wires processors to v5 transformers
│       └── writer.go
├── v6/
│   └── build/               # v6 build utilities
│       ├── transformers/    # v6-specific transformers
│       ├── processors.go    # wires processors to v6 transformers
│       └── writer.go
├── build.go
├── generate.go
└── package.go / package_legacy.go

Note that the Provider abstraction (responsible for pulling and caching raw vulnerability data) remains in the grype-db repo. See the Grype DB architecture page for details on orchestration and the daily publishing workflow.

Golang CLI Patterns - Common structures and frameworks used across Anchore OSS projects
Syft Architecture - SBOM generation architecture that Grype builds upon
Grype DB Architecture - Orchestration layer for building and publishing the vulnerability database

7.4 - Grype DB

Architecture and design of the Grype vulnerability database build system

Overview

grype-db is an orchestration layer that coordinates pulling upstream vulnerability data, delegating transformation and database writing to grype’s build library, and packaging the resulting database for distribution.

flowchart LR
    subgraph pull["Pull"]
        A[Pull vuln data<br/>from upstream]
    end

    subgraph build["Build (delegates to grype)"]
        B[Transform entries]
        C[Load entries<br/>into new DB]
    end

    subgraph package["Package"]
        D[Package DB]
    end

    A --> B --> C --> D

    style pull stroke-dasharray: 5 5, fill:none
    style build stroke-dasharray: 5 5, fill:none
    style package stroke-dasharray: 5 5, fill:none

Multi-Schema Support Architecture

What makes grype-db unique compared to a typical ETL job is the extra responsibility of needing to transform the most recent vulnerability data shape (defined in the vunnel repo) to all supported DB schema versions.

From the perspective of the Daily DB Publisher workflow, (abridged) execution looks something like this:

%%{ init: { 'flowchart': { 'curve': 'linear' } } }%%
flowchart LR
    A[Pull vulnerability data]

    B5[Build v5 DB]
    C5[Package v5 DB]
    D5[Publish v5]

    B6[Build v6 DB]
    C6[Package v6 DB]
    D6[Publish v6]

    A --- B5 --> C5 --> D5
    A --- B6 --> C6 --> D6

Core Abstractions

The grype-db CLI retains the Provider abstraction, which is responsible for pulling and caching raw vulnerability data files locally for later processing.

The build-side abstractions (Processor, Transformer, Entry, Writer) now live in the grype repo. See the Grype DB build utilities section for details on these abstractions and the data flow through the build process.

Code Organization

After the migration of build logic to grype, grype-db retains orchestration and provider management:

grype-db/
├── cmd/                          # CLI entrypoints (pull, build, package commands)
├── pkg/
│   └── provider/                 # provider file/state/workspace management (pulling and caching upstream data)
├── manager/                      # Python scripts driving the daily DB publisher workflow
├── data/                         # local vulnerability data cache (populated by grype-db pull)
└── .grype-db.yaml                # configuration for providers and build settings

Build logic (processors, transformers, writers) has moved to the grype repo under grype/db/. See the Grype DB build utilities for the current code organization of those components.

Note: Historical schema versions (v1-v4) have been removed from the codebase.

DB Structure and Definitions

The definitions of what goes into the database and how to access it (both reads and writes) live in the public grype repo under the grype/db package. Responsibilities of grype (not grype-db) include (but are not limited to):

What tables are in the database
What columns are in each table
How each record should be serialized for writing into the database
How records should be read/written from/to the database
Providing rich objects for dealing with schema-specific data structures
The name of the SQLite DB file within an archive
The definition of a listing file and listing file entries

The purpose of grype-db is to orchestrate and invoke the build utilities from grype/db with upstream vulnerability data to create DB archives and make them publicly available for consumption via Grype.

DB Distribution Files

Grype DB currently supports two active schema versions, each with a different distribution mechanism:

Schema v5 (legacy): Supports Grype v0.87.0+
Schema v6 (current): Supports Grype main branch

Historical schemas (v1-v4) are no longer supported and their code has been removed from the codebase.

Schema v5: listing.json

The listing.json file is a legacy distribution mechanism used for schema v5 (and historically v1-v4):

Location: databases/listing.json
Structure: Contains URLs to DB archives organized by schema version, ordered by latest-date-first
Format: { "available": { "1": [...], "2": [...], "5": [...] } }
Update Process: Re-generated daily by the grype-db publisher workflow through a separate listing update step

Schema v6+: latest.json

The latest.json file is the modern distribution mechanism used for schema v6 and future versions:

Location: databases/v{major}/latest.json (e.g., v6/latest.json, v7/latest.json)
Structure: Contains metadata and URL for the single latest DB archive for that major schema version
Format: { "url": "...", "built": "...", "checksum": "...", "schemaVersion": 6 }
Update Process: Generated and uploaded atomically with each DB build (no separate update step)

This dual-distribution approach allows Grype to maintain backward compatibility with v5 while providing a more efficient distribution mechanism for v6 and future versions.

Implementation Notes:

Distribution file definitions reside in the grype repo, while the grype-db repo is responsible for generating DBs and creating/updating these distribution files
As long as Grype has been configured to point to the correct distribution file URL, the DBs can be stored separately, replaced with a service returning the distribution file contents, or mirrored for systems behind an air gap

Daily Workflows

There are two workflows that drive getting a new Grype DB out to OSS users:

The daily data sync workflow, which uses vunnel to pull upstream vulnerability data.
The daily DB publisher workflow, which builds and publishes a Grype DB from the data obtained in the daily data sync workflow.

Daily Data Sync Workflow

This workflow takes the upstream vulnerability data (from canonical, redhat, debian, NVD, etc), processes it, and writes the results to OCI repos.

%%{ init: { 'flowchart': { 'curve': 'linear' } } }%%
flowchart LR
    A1["Pull alpine"] --> B1["Publish to ghcr.io/anchore/grype-db/data/alpine:&lt;date&gt;"]
    A2["Pull amazon"] --> B2["Publish to ghcr.io/anchore/grype-db/data/amazon:&lt;date&gt;"]
    A3["Pull debian"] --> B3["Publish to ghcr.io/anchore/grype-db/data/debian:&lt;date&gt;"]
    A4["Pull github"] --> B4["Publish to ghcr.io/anchore/grype-db/data/github:&lt;date&gt;"]
    A5["Pull nvd"] --> B5["Publish to ghcr.io/anchore/grype-db/data/nvd:&lt;date&gt;"]
    A6["..."] --> B6["... repeat for all upstream providers ..."]

    style A6 fill:none,stroke:none
    style B6 fill:none,stroke:none

Once all providers have been updated, a single vulnerability cache OCI repo is updated with all of the latest vulnerability data at ghcr.io/anchore/grype-db/data:<date>. This repo is what is used downstream by the DB publisher workflow to create Grype DBs.

The in-repo .grype-db.yaml and .vunnel.yaml configurations are used to define the upstream data sources, how to obtain them, and where to put the results locally.

Daily DB Publishing Workflow

This workflow takes the latest vulnerability data cache, builds a Grype DB, and publishes it for general consumption:

%%{ init: { 'flowchart': { 'curve': 'linear' } } }%%
flowchart LR
    subgraph pull["1. Pull"]
        A["Pull vuln data<br/>(from the daily<br/>sync workflow<br/>output)"]
    end

    subgraph generate["2. Generate Databases"]
        B5["Build v5 DB"]
        C5["Package v5 DB"]
        D5["Upload Archive"]

        B6["Build v6 DB"]
        C6["Package v6 DB<br/>(includes latest.json)"]
        D6["Upload Archive<br/>+ latest.json"]

        B5 --> C5 --> D5
        B6 --> C6 --> D6
    end

    subgraph listing["3. Update Listing (v5 only)"]
        F["Update listing.json"]
    end

    A --- B5
    A --- B6

    D5 --- F
    D6 -.->|"No listing update<br/>needed for v6"| G[Done]

    style pull stroke-dasharray: 5 5, fill:none
    style generate stroke-dasharray: 5 5, fill:none
    style listing stroke-dasharray: 5 5, fill:none
    style G fill:none,stroke:none

The manager/ directory contains all code responsible for driving the Daily DB Publisher workflow, generating DBs for all supported schema versions (currently v5 and v6) and making them available to the public.

1. Pull

Download the latest vulnerability data from various upstream data sources into a local directory. The destination for the provider data is in the data/vunnel directory.

2. Generate

Build databases for all supported schema versions (using grype’s build library) based on the latest vulnerability data and upload them to Cloudflare R2 (S3-compatible storage).

Supported Schemas (see schema-info.json):

Schema v5 (legacy)
Schema v6 (current)

Build and Upload Process:

Each DB undergoes the following steps:

Build: Transform vulnerability data into the schema-specific format
Package: Create a compressed archive (.tar.zst)
Validate: Smoke test with Grype by comparing against the previous release using vulnerability-match-labels
Upload: Only DBs that pass validation are uploaded

Storage Location:

Distribution base URL: https://grype.anchore.io/databases/...
Schema-specific paths:
- v5: databases/<archive-name>.tar.zst
- v6: databases/v6/<archive-name>.tar.zst + databases/v6/latest.json

Key Difference:

v5: Only the DB archive is uploaded; discoverability happens in the next step
v6: Both the DB archive AND latest.json are uploaded atomically, making the DB immediately discoverable

3. Update Listing (v5 Only)

This step only applies to schema v5.

Generate and upload a new listing.json file to Cloudflare R2 based on the existing listing file and newly discovered DB archives.

The listing file is tested against installations of Grype to ensure scans can successfully discover and download the DB. The scan must have a non-zero count of matches to pass validation.

Once the listing file has been uploaded to databases/listing.json, user-facing Grype v5 installations can discover and download the new DB.

Note: Schema v6 does not require this step because the latest.json file is generated and uploaded atomically with the DB archive in step 2, with a 5-minute cache TTL for fast updates.

For more details on:

How the DB build utilities (processors, transformers, writers) works, see the Grype DB build utilities section
How Vunnel processes vulnerability data, see the Vunnel Architecture page
How quality gates validate database builds, see the Quality Gates section

7.5 - Vunnel

Architecture and design of the Vunnel vulnerability data processing tool

Overview

Vunnel is a CLI tool that downloads and processes vulnerability data from various sources (in the codebase, these are called “providers”).

flowchart LR
    subgraph input[ ]
        alpine_data(((<b>Alpine Sec DB</b><br/><small>secdb.alpinelinux.org</small>)))
        rhel_data(((<b>RedHat CSAF</b><br/><small>redhat.com/security</small>)))
        nvd_data(((<b>NVD Data</b><br/><small>services.nvd.nist</small>)))
        other_data((("...")))
    end

    subgraph vunnel["<b>Vunnel</b>"]
        alpine_provider[Alpine Provider]
        rhel_provider[RHEL Provider]
        nvd_provider[NVD Provider]
        other_provider[(...)]
    end

    subgraph output[ ]
        alpine_out[./data/alpine/]
        rhel_out[./data/rhel/]
        nvd_out[./data/nvd/]
        other_out[...]
    end

    alpine_data -->|download| alpine_provider
    rhel_data -->|download| rhel_provider
    nvd_data -->|download| nvd_provider

    alpine_provider -->|write| alpine_out
    rhel_provider -->|write| rhel_out
    nvd_provider -->|write| nvd_out


    vunnel:::Application

    style other_data fill:none,stroke:none
    style other_provider fill:none,stroke:none
    style other_out fill:none,stroke:none
    style output fill:none,stroke:none
    style input fill:none,stroke:none

    alpine_data:::ExternalSource@{ shape: cloud }
    rhel_data:::ExternalSource@{ shape: cloud }
    nvd_data:::ExternalSource@{ shape: cloud }

    alpine_provider:::Provider
    rhel_provider:::Provider
    nvd_provider:::Provider

    alpine_out:::Database@{ shape: db }
    rhel_out:::Database@{ shape: db }
    nvd_out:::Database@{ shape: db }

    classDef ExternalSource stroke-width:1px, stroke-dasharray:none, stroke:#424242, fill:#f0f8ff, color:#000000
    classDef Application fill:#e1ffe1,stroke:#424242,stroke-width:1px
    classDef Provider fill:#none,stroke:#424242,stroke-width:1px
    classDef Database stroke-width:1px, stroke-dasharray:none, stroke:#424242, fill:#fff9c4, color:#000000

Conceptually, one or more invocations of Vunnel will produce a single data directory which Grype DB uses to create a Grype database:

flowchart LR
    subgraph vunnel_runs[ ]
        vunnel_alpine[<b>vunnel run alpine</b>]
        vunnel_rhel[<b>vunnel run rhel</b>]
        vunnel_nvd[<b>vunnel run nvd</b>]
        vunnel_other[(...)]
    end

    subgraph data[ ]
        alpine_data[./data/alpine/]
        rhel_data[./data/rhel/]
        nvd_data[./data/nvd/]
        other_data[...]
    end

    db_processor[Grype-DB]

    subgraph db_out[ ]
        sqlite_db[vulnerability.db<br/><small>sqlite</small>]
    end

    vunnel_alpine -->|write| alpine_data
    vunnel_rhel -->|write| rhel_data
    vunnel_nvd -->|write| nvd_data

    alpine_data -->|read| db_processor
    rhel_data -->|read| db_processor
    nvd_data -->|read| db_processor

    db_processor -->|write| sqlite_db

    db_processor:::Application
    vunnel_alpine:::Application
    vunnel_rhel:::Application
    vunnel_nvd:::Application
    sqlite_db:::Database@{ shape: db }

    alpine_data:::Database@{ shape: db }
    rhel_data:::Database@{ shape: db }
    nvd_data:::Database@{ shape: db }

    style vunnel_other fill:none,stroke:none
    style other_data fill:none,stroke:none
    style vunnel_runs fill:none,stroke:none
    style data fill:none,stroke:none
    style db_out fill:none,stroke:none

    classDef Application fill:#e1ffe1,stroke:#424242,stroke-width:1px
    classDef Database stroke-width:1px, stroke-dasharray:none, stroke:#424242, fill:#fff9c4, color:#000000

Integration with Grype DB

The Vunnel CLI tool is optimized to run a single provider at a time, not orchestrating multiple providers at once. Grype DB is the tool that collates output from multiple providers and produces a single database, and is ultimately responsible for orchestrating multiple Vunnel calls to prepare the input data:

grype-db pull

flowchart LR
    config["<code><b># .grype-db.yaml</b></code><br><code>providers:</code><br><code>  - alpine</code><br><code>  - rhel</code><br><code>  - nvd</code><br><code>  - ...</code>"]
    pull[grype-db pull]

    subgraph vunnel_runs[ ]
        vunnel_alpine[<b>vunnel run alpine</b>]
        vunnel_rhel[<b>vunnel run rhel</b>]
        vunnel_nvd[<b>vunnel run nvd</b>]
        vunnel_other[<b>vunnel run ...</b>]
    end

    subgraph data[ ]
        data_out[(./data/)]
    end

    config -->|read| pull
    pull -->|execute| vunnel_alpine
    pull -->|execute| vunnel_rhel
    pull -->|execute| vunnel_nvd
    pull -.->|execute| vunnel_other

    vunnel_alpine -->|write| data_out
    vunnel_rhel -->|write| data_out
    vunnel_nvd -->|write| data_out
    vunnel_other -.->|write| data_out

    pull:::Application
    vunnel_alpine:::Application
    vunnel_rhel:::Application
    vunnel_nvd:::Application
    vunnel_other:::Application

    config:::AnalysisInput@{ shape: document }
    data_out:::Database@{ shape: db }

    style vunnel_runs fill:none,stroke:none
    style data fill:none,stroke:none

    classDef AnalysisInput stroke-width:1px, stroke-dasharray:none, stroke:#424242, fill:#f0f8ff, color:#000000
    classDef Application fill:#e1ffe1,stroke:#424242,stroke-width:1px
    classDef Database stroke-width:1px, stroke-dasharray:none, stroke:#424242, fill:#fff9c4, color:#000000

grype-db build

flowchart LR
    subgraph data[ ]
        data_in[(./data/)]
    end

    build[grype-db build]

    subgraph db_out[ ]
        db[(vulnerability.db<br/><small>sqlite</small>)]
    end

    data_in -->|read| build
    build -->|write| db

    build:::Application
    data_in:::Database@{ shape: db }
    db:::Database@{ shape: db }

    style data fill:none,stroke:none
    style db_out fill:none,stroke:none

    classDef Application fill:#e1ffe1,stroke:#424242,stroke-width:1px
    classDef Database stroke-width:1px, stroke-dasharray:none, stroke:#424242, fill:#fff9c4, color:#000000

Note: grype-db build delegates the actual transformation and database writing to the grype build library.

grype-db package

flowchart LR
    subgraph db_in[ ]
        db[vulnerability.db<br/><small>sqlite</small>]
    end

    package[grype-db package]

    subgraph archive_out[ ]
        archive[[vulnerability-db-DATE.tar.gz]]
    end

    db -->|read| package
    package -->|write| archive

    package:::Application
    db:::Database@{ shape: db }
    archive:::Database@{ shape: document }

    style db_in fill:none,stroke:none
    style archive_out fill:none,stroke:none

    classDef Application fill:#e1ffe1,stroke:#424242,stroke-width:1px
    classDef Database stroke-width:1px, stroke-dasharray:none, stroke:#424242, fill:#fff9c4, color:#000000

For more information about how Grype DB uses Vunnel see the Grype DB Architecture page.

Provider Architecture

A “Provider” is the core abstraction for Vunnel and represents a single source of vulnerability data. Vunnel is a CLI wrapper around multiple vulnerability data providers.

Provider Requirements

All provider implementations should:

Live under src/vunnel/providers in their own directory (e.g. the NVD provider code is under src/vunnel/providers/nvd/...)
Have a class that implements the Provider interface
Be centrally registered with a unique name under src/vunnel/providers/__init__.py
Be independent from other vulnerability providers data — that is, the debian provider CANNOT reach into the NVD data provider directory to look up information (such as severity)
Follow the workspace conventions for downloaded provider inputs, produced results, and tracking of metadata

Workspace Conventions

Each provider has a “workspace” directory within the “vunnel root” directory (defaults to ./data) named after the provider.

data/                       # the "vunnel root" directory
└── alpine/                 # the provider workspace directory
    ├── input/              # any file that needs to be downloaded and referenced should be stored here
    ├── results/            # schema-compliant vulnerability results (1 record per file)
    ├── checksums           # listing of result file checksums (xxh64 algorithm)
    └── metadata.json       # metadata about the input and result files

The metadata.json and checksums are written out after all results are written to results/. An example metadata.json:

{
  "provider": "amazon",
  "urls": ["https://alas.aws.amazon.com/AL2022/alas.rss"],
  "listing": {
    "digest": "dd3bb0f6c21f3936",
    "path": "checksums",
    "algorithm": "xxh64"
  },
  "timestamp": "2023-01-01T21:20:57.504194+00:00",
  "schema": {
    "version": "1.0.0",
    "url": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/provider-workspace-state/schema-1.0.0.json"
  }
}

Where:

provider: the name of the provider that generated the results
urls: the URLs that were referenced to generate the results
listing: the path to the checksums listing file that lists all of the results, the checksum of that file, and the algorithm used to checksum the file (and the same algorithm used for all contained checksums)
timestamp: the point in time when the results were generated or last updated
schema: the data shape that the current file conforms to

Result Format

All results from a provider are handled by a common base class helper (provider.Provider.results_writer()) and is driven by the application configuration (e.g. JSON flat files or SQLite database). The data shape of the results are self-describing via an envelope with a schema reference.

For example:

{
  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json",
  "identifier": "3.3/cve-2015-8366",
  "item": {
    "Vulnerability": {
      "Severity": "Unknown",
      "NamespaceName": "alpine:3.3",
      "FixedIn": [
        {
          "VersionFormat": "apk",
          "NamespaceName": "alpine:3.3",
          "Name": "libraw",
          "Version": "0.17.1-r0"
        }
      ],
      "Link": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8366",
      "Description": "",
      "Metadata": {},
      "Name": "CVE-2015-8366",
      "CVSS": []
    }
  }
}

Where:

The schema field is a URL to the schema that describes the data shape of the item field
The identifier field should have a unique identifier within the context of the provider results
The item field is the actual vulnerability data, and the shape of this field is defined by the schema

Note that the identifier is 3.3/cve-2015-8366 and not just cve-2015-8366 in order to uniquely identify cve-2015-8366 as applied to the alpine 3.3 distro version among other records in the results directory.

Currently only JSON payloads are supported.

Vulnerability Schemas

Possible vulnerability schemas supported within the vunnel repo are:

Generic OS Vulnerability - for OS distro vulnerabilities
GitHub Security Advisories - for GitHub advisory data
NVD Vulnerability - for NVD-specific data
Open Source Vulnerability (OSV) - for OSV format data

If at any point a breaking change needs to be made to a provider (and say the schema remains the same), then you can set the __version__ attribute on the provider class to a new integer value (incrementing from 1 onwards). This is a way to indicate that the cached input/results are not compatible with the output of the current version of the provider, in which case the next invocation of the provider will delete the previous input and results before running.

Provider Configuration

Each provider has a configuration object defined next to the provider class. This object is used in the vunnel application configuration and is passed as input to the provider class. Take the debian provider configuration for example:

from dataclasses import dataclass, field

from vunnel import provider, result

@dataclass
class Config:
    runtime: provider.RuntimeConfig = field(
        default_factory=lambda: provider.RuntimeConfig(
            result_store=result.StoreStrategy.SQLITE,
            existing_results=provider.ResultStatePolicy.DELETE_BEFORE_WRITE,
        ),
    )
    request_timeout: int = 125

Configuration Requirements

Every provider configuration must:

Be a dataclass
Have a runtime field that is a provider.RuntimeConfig field

The runtime field is used to configure common behaviors of the provider that are enforced within the vunnel.provider.Provider subclass.

Runtime Configuration Options

on_error: what to do when the provider fails
- action: choose to fail, skip, or retry when the failure occurs
- retry_count: the number of times to retry the provider before failing (only applicable when action is retry)
- retry_delay: the number of seconds to wait between retries (only applicable when action is retry)
- input: what to do about the input data directory on failure (such as keep or delete)
- results: what to do about the results data directory on failure (such as keep or delete)
existing_results: what to do when the provider is run again and the results directory already exists
- delete-before-write: delete the existing results just before writing the first processed (new) result
- delete: delete existing results before running the provider
- keep: keep the existing results
existing_input: what to do when the provider is run again and the input directory already exists
- delete: delete the existing input before running the provider
- keep: keep the existing input
result_store: where to store the results
- sqlite: store results as key-value form in a SQLite database, where keys are the record identifiers values are the json vulnerability records
- flat-file: store results in JSON files named after the record identifiers

Any provider-specific config options can be added to the configuration object as needed (such as request_timeout, which is a common field).

For more details on how Grype DB uses Vunnel output, see the Grype DB Architecture page.

Next Steps

Vunnel Contributing Guide - Learn how to build providers, run tests, and contribute code
Grype DB Architecture - Understand how Grype DB processes Vunnel output
Grype Architecture - See how vulnerability data is used during scanning

8 - Announcements

Important updates about Anchore open source tools, including new capabilities, breaking changes, and upcoming deadlines.

This section contains operational notices that may require action on your part, such as end-of-life dates, breaking changes, and migration deadlines.

8.1 - Grype DB v5 schema EOL

Users running Grype versions older than v0.88.0 will stop receiving vulnerability database updates on March 6, 2026.

On March 6, 2026, Grype will stop publishing vulnerability database updates for DB schema v5. After this date, older Grype versions that depend on schema v5 will no longer receive new vulnerability data.

Who is affected

You are affected if you are running Grype older than v0.88.0. These versions use DB schema v5 and will stop getting database updates after the EOL date.

To check your version, run:

grype version

If the output shows a version lower than v0.88.0, you need to upgrade.

What to do

Upgrade to Grype v0.88.0 or later, which uses DB schema v6. This is the only action required.

You can upgrade using the install script:

curl -sSfL https://get.anchore.io/grype | sudo sh -s -- -b /usr/local/bin

Or see the Grype installation page for other installation methods.

Why this is happening

Maintaining multiple database schemas in parallel has significant operational overhead. Retiring schema v5 allows the team to focus on improving the current schema and delivering better vulnerability data.

Questions or issues

If you run into problems or have questions, reach out through:

9 - About

About Anchore OSS and its community

9.1 - Events

Anchore OSS Community Events and Meetings

Open Source Live Streams

Almost every Thursday the OSS team holds a “Gardening” live stream on the Anchore YouTube channel. Each week, we announce what time the live stream is happening in the Announcements on Discourse.

The streams are recorded and archived in our Live stream playlist.

Community Meetings

We hold open meetings with the community, on alternate Thursdays. These are on Zoom, and are not recorded or streamed. Everyone is welcome. A webcam is not required.

Find the next scheduled meeting on the community calendar.

There is an optional agenda where you can add discussion topics. To get write access to the agenda, join the Anchore OSS Community group.

Anchore Events

Anchore has a separate Events page, for announcing industry & corporate events, and webinars.

9.2 - Adopters

Adopters of Anchore Open Source Tools

Our tools are used by organisations and developer teams of all sizes. Below is a small sample of users of our tools, in public GitHub repositories.

Docker

SAP

Grafana

OpenTelemetry

Wolfi

Kubescape

More organisations below are all adopters of our tools, in public GitHub repositories.

Syft

Repository	Stars
derailed / k9s	31025
kubescape / kubescape	10979
anchore / grype	10629
deepfence / ThreatMapper	5142
zarf-dev / zarf	1651
vdaas / vald	1636
helm / chart-testing	1561
lunasec-io / lunasec	1456
openclarity / openclarity	1427
guacsec / guac	1406
SAP / jenkins-library	800
helm / chart-releaser	760
safedep / vet	729
in-toto / witness	494
xeol-io / xeol	409
project-stacker / stacker	289
slsa-framework / slsa-verifier	282
ckotzbauer / sbom-operator	206
gitpod-io / leeway	169
go-sigma / sigma	167
docker / sbom-cli-plugin	156
vulncheck-oss / cli	139
agntcy / dir	108
anchore / grant	104
ckotzbauer / vulnerability-operator	85
wolfi-dev / wolfictl	67
agntcy / workflow-srv-mgr	60
Checkmarx / ast-cli	57
bottlerocket-os / bottlerocket-sdk	56
sammcj / mcp-devtools	55
anchore / grype-db	54

Grype

Repository	Stars
derailed / k9s	31025
kubescape / kubescape	10979
deepfence / ThreatMapper	5142
zarf-dev / zarf	1651
vdaas / vald	1636
lunasec-io / lunasec	1456
openclarity / openclarity	1427
xeol-io / xeol	409
slsa-framework / slsa-verifier	282
gitpod-io / leeway	169
ckotzbauer / vulnerability-operator	85
wolfi-dev / wolfictl	67
sammcj / mcp-devtools	55
anchore / grype-db	54

SBOM Action

Repository	Stars
n8n-io / n8n	136966
caddyserver / caddy	66730
ultralytics / ultralytics	45473
grafana / k6	28717
grafana / loki	26408
SigNoz / signoz	23479
cilium / cilium	22428
jaegertracing / jaeger	21847
getsops / sops	19369
nats-io / nats-server	18185
stackblitz-labs / bolt.diy	17813
goreleaser / goreleaser	15102
App-vNext / Polly	13956
kubescape / kubescape	10979
orhun / git-cliff	10777
anchore / grype	10629
loft-sh / vcluster	10585
dexidp / dex	10175
fission / fission	8737
Workiva / go-datastructures	7837
anchore / syft	7598
fluxcd / flux2	7409
k8sgpt-ai / k8sgpt	6938
kubevela / kubevela	6834
gopasspw / gopass	6462
podman-desktop / podman-desktop	6450
external-secrets / external-secrets	5817
open-telemetry / opentelemetry-collector	5773
inventree / InvenTree	5721
apache / nifi	5660
domaindrivendev / Swashbuckle.AspNetCore	5407
fluxcd / flagger	5152
nginx / kubernetes-ingress	4817
grafana / tempo	4738
jenkins-x / jx	4664
openbao / openbao	4482
openfga / openfga	4087
cerbos / cerbos	4039
modelcontextprotocol / registry	3589
version-fox / vfox	3529
orhun / binsider	3403
mpromonet / webrtc-streamer	3389
orhun / kmon	2782
dragonflyoss / dragonfly	2772
akuity / kargo	2694
kube-vip / kube-vip	2531
IBM / mcp-context-forge	2412
goreleaser / nfpm	2395
ory / polis	2137
badtuxx / girus-cli	2103
mpromonet / v4l2rtspserver	1969
projectcapsule / capsule	1925
artifacthub / hub	1905
ublue-os / bluefin	1887
nginx / nginx-prometheus-exporter	1855
stefanprodan / timoni	1852
keptn / keptn	1789
regclient / regclient	1632
kubewall / kubewall	1573
helm / chart-testing	1561
kubeshop / testkube	1494
flux-iac / tofu-controller	1486
project-copacetic / copacetic	1424
guacsec / guac	1406
OWASP / SecurityShepherd	1402
orhun / systeroid	1384
charmbracelet / wishlist	1371
trueforge-org / truecharts	1270
dimonomid / nerdlog	1261
aserto-dev / topaz	1257
containerd / runwasi	1208
abhimanyu003 / sttr	1182
kitops-ml / kitops	1180
stacklok / toolhive	1164
k8gb-io / k8gb	1074
minicli / minicli	1063
lensesio / stream-reactor	1038
sigstore / gitsign	1020
jonrau1 / ElectricEye	1010
gnolang / gno	989
orhun / rustypaste	971
open-cluster-management-io / ocm	957
controlplaneio / simulator	956
cBioPortal / cbioportal	853
percona / pmm	838
intigriti / misconfig-mapper	816
updatecli / updatecli	792
kluctl / kluctl	788
helm / chart-releaser	760
open-feature / flagd	758
orhun / halp	750
poweradmin / poweradmin	729
flux-subsystem-argo / flamingo	706
caarlos0 / svu	697
getprobo / probo	686
opea-project / GenAIExamples	682
nuxeo / nuxeo	673
nginx / nginx-gateway-fabric	668
glasskube / distr	647
falcosecurity / falcosidekick	619
orhun / linuxwave	601
devops-kung-fu / bomber	576
epinio / epinio	559
editorconfig-checker / editorconfig-checker	548
microsoft / call-center-ai	531
clemlesne / scrape-it-now	525
in-toto / witness	494
caioricciuti / ch-ui	463
kubestellar / kubestellar	463
fluxcd / helm-controller	457
anchore / quill	455
kyverno / chainsaw	437
retracedhq / retraced	412
keptn / lifecycle-toolkit	400
open-telemetry / opentelemetry-collector-releases	388
k8sgpt-ai / k8sgpt-operator	387
pcasteran / terraform-graph-beautifier	387
controlplaneio / netassert	377
justeattakeaway / httpclient-interception	376
tbckr / sgpt	370
NLeSC / mcfly	365
controlplaneio-fluxcd / flux-operator	355
mindersec / minder	349
ublue-os / aurora	341
wanghaisheng / tiktoka-studio-uploader	331
jkroepke / openvpn-auth-oauth2	329
ahmetb / gen-crd-api-reference-docs	325
rad-security / kbom	318
Lissy93 / domain-locker	313
caarlos0 / domain_exporter	313
stefanprodan / kustomizer	296
martincostello / xunit-logging	293
avisi-cloud / structurizr-site-generatr	293
home-operations / containers	292
kexa-io / Kexa	290
compozy / compozy	290
ahoy-cli / ahoy	281
notaryproject / ratify	278
udx / wp-stateless	268
gatewayd-io / gatewayd	266
spr-networks / super	266
sgl-project / ome	265
fluxcd / kustomize-controller	265
fluxcd / source-controller	257
nicholas-fedor / watchtower	251
martincostello / sqllocaldb	251
open-feature / open-feature-operator	251
digitalghost-dev / premier-league	246
KWasm / kwasm-operator	237
au2001 / icloud-passwords-firefox	236
mitre / heimdall2	235
FDio / govpp	232
micro-lc / micro-lc	221
Hyperledger-TWGC / tape	220
hazcod / ransomwhere	212
SchwarzIT / go-template	200
mostafa / xk6-kafka	193
snyk / parlay	191
fluxcd / image-automation-controller	187
muhlba91 / pulumi-proxmoxve	184
defenseunicorns / pepr	181
dirien / minectl	178
plgd-dev / hub	173
opea-project / GenAIComps	172
cerberauth / vulnapi	172
roots / trellis-cli	169
rond-authz / rond	162
mitre / saf	162
fluxcd / notification-controller	162
docker / sbom-cli-plugin	156
chainguard-dev / incert	156
soraro / kurt	154
jauderho / dockerfiles	154
elastic / harp	152
stacklok / frizbee	150
jkroepke / access-log-exporter	147
sigstore / policy-controller	142
kaansk / shomon	131
laoshanxi / app-mesh	128
philips-software / amp-devcontainer	125
openimsdk / chat	125
falcosecurity / falcosidekick-ui	124
Workiva / built_redux	123
OpenUnison / openunison-k8s	123
Hive-Academy / Anubis-MCP	122
hemilabs / heminetwork	122
asymmetric-research / solana-exporter	119
holos-run / holos	116
fluxcd / image-reflector-controller	116
dirien / minecraft-prometheus-exporter	116
bomctl / bomctl	115
homeall / caddy-reverse-proxy-cloudflare	109
civiform / civiform	109
html2rss / html2rss-web	108
SAP / terraform-provider-btp	106
descope / descopecli	103
raffis / gitops-zombies	103
sigstore / timestamp-authority	102
IAreKyleW00t / docker-caddy-cloudflare	101
ossf / sbom-everywhere	101
autobrr / mkbrr	101
raffis / mongodb-query-exporter	101
shopware / shopware-cli	98
salrashid123 / gce_metadata_server	98
caarlos0 / twitter-cleaner	97
pteich / elastic-query-export	96
dwisiswant0 / unch	94
martincostello / openapi-extensions	92
actinia-org / actinia-core	92
caddyserver / gateway	92
OpenZeppelin / openzeppelin-relayer	89
AlbrechtL / openwrt-docker	89
OpenZeppelin / openzeppelin-monitor	88
caarlos0 / jsonfmt	88
kyverno / kyverno-json	86
cardinalhq / lakerunner	85
microsoft / terraform-provider-fabric	85
intelops / compage	85
openfga / cli	82
schednex-ai / schednex	81
0x61nas / aarty	81
erfianugrah / revista-3	80
some-natalie / kubernoodles	80
Workiva / opentelemetry-dart	79
mitre / vulcan	78
devops-kung-fu / hookz	78
sigstore / cosign-gatekeeper-provider	78
certonid / certonid	77
PurpleBooth / git-mit	76
wimpysworld / stream-sprout	76
cpanato / github_actions_exporter	76
fystack / mpcium	74
Workiva / dart_dev	74
gearnode / privatebin	74
crashappsec / github-analyzer	72
shini4i / argo-watcher	69
alegrey91 / fwdctl	69
phoban01 / cue-flux-controller	69
stackabletech / spark-k8s-operator	66
Workiva / state_machine	65
tektronix / tm_devices	65
mchmarny / vimp	65
sigstore / helm-sigstore	65
saas-factory-labs / Saas-Factory	64
Workiva / dart_codemod	64
SigNoz / signoz-otel-collector	64
ICTU / quality-time	63
anchore / chronicle	63
peak-scale / sops-operator	63
gembaadvantage / uplift	63
yurishkuro / microsim	62
tuannvm / mcp-trino	60
opensearch-project / opensearch-migrations	60
redhat-certification / chart-verifier	59
muhlba91 / external-dns-provider-adguard	59
ilijamt / vault-plugin-secrets-gitlab	59
gopasspw / git-credential-gopass	58
stackabletech / trino-operator	58
goreleaser / example-supply-chain	58
metal-stack / firewall-controller	57
grafana / grafana-opentelemetry-dotnet	57
apigee / apigeecli	57
theparanoids / crypki	57
go-faster / oteldb	57
nginx / nginx-asg-sync	57
ultralytics / thop	56
ublue-os / bluefin-lts	55
theopenlane / core	55
JSchmie / ScrAIbe	54
akuity / kargo-render	54
sapcc / ntp_exporter	54
engity-com / bifroest	54
spinframework / runtime-class-manager	54
dirien / pulumi-fly	53
FalcoSuessgott / vault-kubernetes-kms	52
justeattakeaway / JustSaying	51
teler-sh / teler-proxy	51
xmlking / grpc-starter-kit	50
philips-labs / slsa-provenance-action	50

Scan Action

Repository	Stars
ClickHouse / ClickHouse	42822
airbytehq / airbyte	19470
bitwarden / server	17139
docker-mailserver / docker-mailserver	17053
ory / hydra	16505
goreleaser / goreleaser	15102
elastic / logstash	14628
wazuh / wazuh	13461
Unstructured-IO / unstructured	12634
ory / kratos	12294
bitwarden / clients	11220
cookieY / Yearning	8763
flowable / flowable-engine	8706
gopasspw / gopass	6462
photoview / photoview	6128
fastrepl / hyprnote	6082
apache / nifi	5660
0xERR0R / blocky	5601
nuclio / nuclio	5572
ory / keto	5111
freedomofpress / dangerzone	4239
ory / oathkeeper	3426
chaskiq / chaskiq	3400
determined-ai / determined	3187
deepseek-ai / DreamCraft3D	2969
buildpacks / pack	2799
akuity / kargo	2694
sakai135 / wsl-vpnkit	2639
submariner-io / submariner	2568
Checkmarx / kics	2469
onekey-sec / unblob	2354
11notes / docker-kms	2010
nginx / nginx-prometheus-exporter	1855
cloudfoundry / cli	1844
GIScience / openrouteservice	1711
mlrun / mlrun	1588
openremote / openremote	1510
TheresAFewConors / Sooty	1425
py-pdf / fpdf2	1363
wahyd4 / aria2-ariang-docker	1093
jonrau1 / ElectricEye	1010
mixcore / mix.core	873
kanisterio / kanister	840
Unstructured-IO / unstructured-api	808
mendhak / docker-http-https-echo	727
voxpupuli / puppetboard	726
kool-dev / kool	708
Threagile / threagile	692
getprobo / probo	686
hipages / php-fpm_exporter	681
nuxeo / nuxeo	673
nginx / nginx-gateway-fabric	668
estahn / k8s-image-swapper	611
ThomasVitale / cloud-native-spring-in-action	538
shenxn / protonmail-bridge-docker	534
opentracing-contrib / nginx-opentracing	507
bitwarden / self-host	506
grafana / grafana-image-renderer	437
BallAerospace / COSMOS	372
bitwarden / sdk-sm	336
wanghaisheng / tiktoka-studio-uploader	331
rad-security / kbom	318
interledger / rafiki	315
adrianbrad / queue	314
home-operations / containers	292
RAJANAGORI / Nightingale	288
banzaicloud / thanos-operator	281
cnoe-io / idpbuilder	275
udx / wp-stateless	268
waldo-vision / waldo	254
Secure-Compliance-Solutions-LLC / GVM-Docker	251
tarampampam / mikrotik-hosts-parser	248
digitalghost-dev / premier-league	246
sstarcher / helm-exporter	246
istio-ecosystem / authservice	236
signalfx / splunk-otel-collector	223
buildpacks / lifecycle	198
defenseunicorns / pepr	181
righettod / toolbox-pentest-web	166
MustacheCase / zanadir	165
11notes / docker-socket-proxy	164
ilteoood / docker-surfshark	161
OpenC3 / cosmos	156
jauderho / dockerfiles	154
jedisct1 / dnscrypt-server-docker	145
artefactory / NLPretext	140
michelin / kstreamplify	132
submariner-io / lighthouse	130
11notes / docker-adguard	122
11notes / docker-kms-gui	119
submariner-io / submariner-operator	119
11notes / docker-traefik	115
Soneji / docker-chromium	115
alex1989hu / kubelet-serving-cert-approver	113
banzaicloud / jwt-to-rbac	113
DataDog / datadog-lambda-extension	109
azinchen / nordvpn	108
anweiss / cddl	106
cfpb / hmda-platform	104
madereddy / noisy	104
WeblateOrg / docker	103
michelin / ns4kafka	94
Chr157i4n / PyTmcStepper	92
HHS / simpler-grants-gov	91
OpenZeppelin / openzeppelin-relayer	89
tarampampam / tinifier	89
OpenZeppelin / openzeppelin-monitor	88
bitwarden / mcp-server	86
UKHomeOffice / kd	85
HariSekhon / GitHub-Actions	81
some-natalie / kubernoodles	80
ThomasVitale / spring-cloud-gateway-resilience-security-observability	77
wimpysworld / stream-sprout	76
astrolabsoftware / fink-broker	72
werbot / lime	72
Ortus-Solutions / docker-commandbox	66
tektronix / tm_devices	65
ortus-boxlang / BoxLang	65
mchmarny / vimp	65
XGovFormBuilder / digital-form-builder	64
analysys / ans-android-sdk	64
pegasystems / docker-pega-web-ready	61
gopasspw / gopass-jsonapi	59
redhat-certification / chart-verifier	59
Altinity / ClickHouse	59
datagrok-ai / public	58
theparanoids / crypki	57
submariner-io / shipyard	56
kube-tarian / tarian	56
cogini / phoenix_container_example	55
cogini / phoenix_container_example_old	55
singlestore-labs / singlestoredb-dev-image	55
JSchmie / ScrAIbe	54
ryaneorth / k8s-scheduled-volume-snapshotter	54
michelin / suricate	52
SmartTokenLabs / attestation	51
adlnet / CATAPULT	50

Generated using github-dependents-info, by Nicolas Vuillamy"

9.3 - Discussion

Official Anchore OSS online discussion

Official platforms

Below are platforms maintained and monitored by Anchore OSS Team staff.

Discourse

We have an official community Discourse for discussion of the Anchore OSS tools.

Anchore Community Discourse

Video

We post OSS and Anchore Enterprise related content on our YouTube channel.

Anchore YouTube Channel

Find and engage with us on various social media platforms.

	Mastodon	BlueSky	X
Syft	@syft@fosstodon.org	@syftproject.bsky.social	@syftproject
Grype	@grype@fosstodon.org	@grypeproject.bsky.social	@grypeproject
Anchore	@anchore@mstdn.business	@anchore.com	@anchore

9.4 - Glossary

Definitions of terms used in software security, SBOM generation, and vulnerability scanning

A

Artifact

In Syft’s JSON output format, “artifacts” refers to the array of software packages discovered during scanning. Each artifact represents a single package (library, application, OS package, etc.) with its metadata, version, licenses, locations, and identifiers like CPE and PURL. This is distinct from general software artifacts like binaries or container images.

Related documentation: Working with Syft JSON

Attestation

A cryptographically signed statement about a software artifact that provides verifiable claims about its properties, such as provenance, build process, or security scan results. Attestations establish trust in the software supply chain by allowing you to verify that an SBOM truly represents a specific artifact or that vulnerability scan results are authentic.

Why it matters: Attestations enable you to verify the authenticity and integrity of SBOMs generated by Syft and vulnerability reports from Grype, ensuring they haven’t been tampered with.

C

Cataloger

A cataloger is a component within Syft that specializes in discovering and extracting package information from specific ecosystems or file formats. Each cataloger knows how to find and parse packages for a particular type (e.g., apk-cataloger for Alpine packages, npm-cataloger for Node.js packages). When Syft scans a target, it runs multiple catalogers to comprehensively discover all software components.

Why it matters: The foundBy field in Syft’s JSON output tells you which cataloger discovered each package, which can help debug why certain packages appear in your SBOM or troubleshoot scanning issues.

Related documentation: Working with Syft JSON

Container image

A lightweight, standalone, executable package that includes everything needed to run a piece of software, including the code, runtime, system tools, libraries, and settings. Container images are built from layers and typically run using container runtimes like Docker or containerd. See also OCI.

Why it matters: Both Syft and Grype can scan container images directly without requiring them to be running. Syft generates SBOMs from container images, and Grype scans them for vulnerabilities.

Related documentation: SBOM Generation, Vulnerability Scanning

CPE

Common Platform Enumeration (CPE) is a standardized method for describing and identifying software applications, operating systems, and hardware devices. CPEs are used in vulnerability databases to match software components with known vulnerabilities.

Formats:

URI binding: cpe:/{part}:{vendor}:{product}:{version}:{update}:{edition}:{language}
Formatted string: cpe:2.3:{part}:{vendor}:{product}:{version}:{update}:{edition}:{language}:{sw_edition}:{target_sw}:{target_hw}:{other}
Well-Formed Name (WFN): cpe:2.3:wfn:[attributes]

Examples:

cpe:/a:mozilla:firefox:68.0::~~~en-us~~
cpe:2.3:a:microsoft:internet_explorer:8.0.6001:beta:*:*:*:*:*:*
wfn:[part="a", vendor="microsoft", product="internet_explorer",version="8\.0\.6001", update="beta", edition=ANY, language=ANY]

Why it matters: Syft generates CPEs for discovered packages (from the NVD dictionary or synthetic generation), which Grype then uses to match packages against vulnerability data. Understanding CPEs helps you troubleshoot why certain vulnerabilities are or aren’t being detected relative to vulnerabilities from NVD.

External resources:

NIST CPE Dictionary

Related documentation: Working with Syft JSON

CVE

Common Vulnerabilities and Exposures (CVE) is a standardized identifier for publicly known security vulnerabilities. Each CVE ID uniquely identifies a specific vulnerability and provides a common reference point for discussing and tracking security issues.

Format example: CVE-2024-12345

Why it matters: Grype reports vulnerabilities by their CVE IDs, making it easy to research specific issues, understand their impact, and find remediation guidance. Each match in a Grype scan references one or more CVE IDs.

External resources:

Related documentation: Vulnerability Scanning

CVSS

Common Vulnerability Scoring System (CVSS) is an open framework for communicating the characteristics and severity of software vulnerabilities. CVSS (base) scores range from 0.0 to 10.0, with higher scores indicating more severe vulnerabilities.

Severity ranges:

None: 0.0
Low: 0.1-3.9
Medium: 4.0-6.9
High: 7.0-8.9
Critical: 9.0-10.0

There are more dimensions to CVSS, including Temporal and Environmental scores, but the Base score is the most commonly used as a way to quickly assess severity.

Why it matters: Grype uses CVSS scores to categorize vulnerability severity, helping you prioritize which issues to fix first. You can filter Grype results by severity level to focus on the most critical vulnerabilities.

External resources:

CVSS Specification

Related documentation: Vulnerability Scanning

CycloneDX

CycloneDX is an open-source standard for creating Software Bill of Materials (SBOMs), supporting JSON and XML representations.

Why it matters: Syft can generate SBOMs in CycloneDX format (-o cyclonedx-json or -o cyclonedx-xml), which is widely supported by security tools and compliance platforms. Grype can also scan CycloneDX SBOMs for vulnerabilities.

External resources:

CycloneDX Specification

Related documentation: SBOM Generation

D

Dependency

A software component that another piece of software relies on to function. Dependencies can be direct (explicitly required by your code) or transitive (required by your dependencies). Understanding and tracking dependencies is crucial for security and license compliance.

Why it matters: Syft catalogs both direct and transitive dependencies in your software, creating a complete inventory. Grype then scans all dependencies for vulnerabilities, not just your direct dependencies—important because transitive dependencies often contain hidden security risks.

Distro

Short for “distribution”, referring to a specific Linux distribution like Alpine, Ubuntu, Debian, or Red Hat. The distro information includes the distribution name and version (e.g., “alpine 3.18”).

Why it matters: Grype uses distro information to match OS packages against the correct vulnerability database. Syft automatically detects the distro from files like /etc/os-release and includes it in the SBOM, ensuring accurate vulnerability matching.

Related documentation: Working with Syft JSON

Docker

Docker is a platform for developing, shipping, and running applications in containers. While Docker is a specific implementation, the term is often used colloquially to refer to container technology in general. See Container image and OCI.

Why it matters: Syft and Grype can pull and scan images directly from Docker registries or analyze images in your local Docker daemon without needing Docker to be installed.

External resources:

Docker Documentation

E

Ecosystem

In software, an ecosystem refers to a package management system and its associated community, tools, and conventions. Examples include npm (JavaScript), PyPI (Python), Maven Central (Java), and RubyGems (Ruby). Different ecosystems have different package formats, naming conventions, and vulnerability data sources.

Why it matters: Syft supports dozens of package ecosystems, and each uses a different cataloger. The ecosystem determines how packages are identified (PURL type), which metadata is captured, and which vulnerability data sources Grype uses for matching.

Related documentation: SBOM Generation

EPSS

Exploit Prediction Scoring System (EPSS) is a data-driven framework that estimates the probability that a software vulnerability will be exploited in the wild within the next 30 days.

EPSS provides two complementary metrics:

Score: A probability value from 0.0 to 1.0 (0% to 100%) indicating the likelihood of exploitation. For example, a score of 0.00034 means a 0.034% probability of exploitation.
Percentile: A ranking showing what percentage of all CVEs have a lower EPSS score. For example, a percentile of 0.09274 means this CVE scores higher than 9.274% of all tracked vulnerabilities.

Unlike CVSS which measures theoretical severity, EPSS predicts actual exploitation probability by analyzing factors like available exploits, social media activity, and observed attacks (among other signals).

Why it matters: EPSS helps you prioritize vulnerabilities more effectively than severity alone. A critical CVSS vulnerability with a low EPSS score might be less urgent than a medium severity issue with a high EPSS score. Grype can display EPSS scores alongside CVSS to help you focus remediation efforts on vulnerabilities that are both severe and likely to be exploited.

External resources:

Related documentation: Vulnerability Scanning

F

False positive

In the context of scanning for vulnerabilities, a false positive is a vulnerability-package match reported by a scanner that doesn’t actually affect the software package in question. False positives can occur due to incorrect CPE matching, version misidentification, or when a vulnerability applies to one variant of a package but not another.

Why it matters: When Grype reports a false positive, you can use VEX documents or Grype’s ignore rules to suppress it, preventing alert fatigue and focusing on real security issues. If you believe a match is incorrect, you can report it on GitHub to help improve Grype for everyone.

False negative

In the context of scanning for vulnerabilities, a false negative occurs when a scanner fails to detect a vulnerability that actually affects a software package. False negatives can happen when vulnerability data is incomplete, when a package uses non-standard naming or versioning, when CPE or PURL identifiers don’t match correctly, or when the vulnerability database hasn’t been updated yet.

Why it matters: False negatives are more dangerous than false positives because they create a false sense of security. To minimize false negatives, keep Grype’s vulnerability database updated regularly and understand that no scanner catches 100% of vulnerabilities—defense in depth and multiple security controls are essential.

K

KEV

Known Exploited Vulnerability (KEV) is a designation for vulnerabilities that have been confirmed as actively exploited in real-world attacks. CISA (Cybersecurity and Infrastructure Security Agency) maintains the authoritative KEV catalog, which lists CVEs with evidence of active exploitation and provides binding operational directives for federal agencies.

The CISA KEV catalog includes:

CVE identifiers for exploited vulnerabilities
The product and vendor affected
A brief description of the vulnerability
Required remediation actions
Due dates for federal agencies to patch

Vulnerabilities are added to the KEV catalog based on reliable evidence of active exploitation, such as public reporting, threat intelligence, or incident response data.

Why it matters: KEV status is a strong signal for prioritization—these vulnerabilities are being actively exploited right now. When Grype identifies a vulnerability that’s on the CISA KEV list, you should treat it as urgent regardless of CVSS score. A medium-severity KEV vulnerability poses more immediate risk than a critical-severity vulnerability that’s never been exploited. Some organizations make KEV remediation mandatory within tight timeframes (e.g., 15 days for critical KEVs).

External resources:

Related documentation: Vulnerability Scanning

L

Layer

Container images are built as a series of filesystem layers, where each layer represents changes from a Dockerfile instruction. Layers are stacked together to create the final filesystem.

Why it matters: By default, Syft scans only the “squashed” view of an image (what you’d see if the container were running). Use --scope all-layers to scan all layers, which can reveal packages that were installed then deleted, potentially exposing vulnerabilities in build-time dependencies.

Related documentation: SBOM Generation

License

A legal instrument governing the use and distribution of software. Software licenses range from permissive (MIT, Apache) to copyleft (GPL) to proprietary.

Why it matters: Syft extracts license information from packages and includes it in SBOMs, helping you ensure compliance with open source licenses and identify packages with incompatible or restricted licenses.

Related documentation: License Compliance

M

Match

A match is a vulnerability finding in Grype’s output, representing a single package-vulnerability pair. Each match indicates that a specific package version is affected by a particular CVE.

Related documentation: Vulnerability Scanning

Matcher

A matcher is a component within Grype that compares package information against vulnerability data using specific matching strategies. Different matchers handle different package types or ecosystems (e.g., distro matcher for OS packages, language matcher for application dependencies).

Why it matters: Grype uses multiple matchers to ensure comprehensive vulnerability coverage. The matcher used for each finding is included in detailed output, helping you understand how the match was made.

N

NVD

National Vulnerability Database (NVD) is the U.S. government repository known software vulnerabilities. It provides comprehensive vulnerability information including CVE IDs, CVSS scores, and affected software configurations. The NVD is maintained by NIST.

Why it matters: The NVD is one of the primary vulnerability data sources used by Grype. Syft also uses the NVD’s CPE dictionary to generate CPEs for packages, enabling accurate vulnerability matching.

External resources:

NVD Website

Related documentation: Vulnerability Scanning

O

OCI

Open Container Initiative (OCI) is an open governance structure for creating industry standards around container formats and runtimes. The OCI Image Specification defines the standard format for container images, ensuring interoperability across different container tools and platforms.

Why it matters: Syft and Grype work with OCI-compliant images from any registry (Docker Hub, GitHub Container Registry, Amazon ECR, etc.), not just Docker images. They can read images in OCI layout format directly from disk.

External resources:

OCI Specifications

P

Package

A bundle of software that can be installed and managed by a package manager. Packages typically include the software itself, metadata (like version and dependencies), and installation instructions. Packages are the fundamental units tracked in an SBOM.

Why it matters: Every entry in a Syft-generated SBOM represents a package. Grype matches packages against vulnerability data to find security issues. Understanding what constitutes a “package” in different ecosystems helps you interpret SBOM contents.

Package manager

A tool that automates the process of installing, upgrading, configuring, and removing software packages. Examples include npm, pip, apt, yum, and Maven. Package managers maintain repositories of available packages and handle dependency resolution.

Why it matters: Syft discovers packages by reading package manager metadata files (like package.json, requirements.txt, or /var/lib/dpkg/status). Each package manager stores information differently, which is why Syft needs ecosystem-specific catalogers.

Provenance

Information about the origin and build process of a software artifact, including who built it, when, from what source code, and using what tools. Build provenance helps verify that software was built as expected and hasn’t been tampered with.

Why it matters: SBOMs generated by Syft during builds can be combined with provenance information to create comprehensive supply chain attestations, enabling you to verify both what’s in your software and how it was built.

External resources:

SLSA Provenance

PURL

Package URL (PURL) is a standardized way to identify and locate software packages across different package managers and ecosystems. PURLs provide a uniform identifier that works across different systems.

Format: pkg:type/namespace/name@version?qualifiers#subpath

Example: pkg:npm/lodash@4.17.21

Why it matters: Syft generates PURLs for all discovered packages, and Grype uses PURLs as one of the primary identifiers for vulnerability matching. PURLs provide a consistent way to refer to packages across different SBOM formats.

External resources:

PURL Specification

Related documentation: Working with Syft JSON

R

Relationship

In Syft’s JSON output, relationships describe connections between artifacts (packages), files, and sources (what was scanned). For example, a relationship might indicate that a file is “contained-by” a package, or that one package “depends-on” another.

Why it matters: Relationships provide the graph structure of your software, showing not just what packages exist but how they’re connected. This is essential for understanding dependency chains and reachability analysis.

Related documentation: Working with Syft JSON

S

SBOM

Software Bill of Materials (SBOM) is a comprehensive inventory of all components, libraries, and modules that make up a piece of software. Like a list of ingredients on food packaging, an SBOM provides transparency into what’s included in your software, enabling security analysis, license compliance, and supply chain risk management.

Why it matters: Syft generates SBOMs that you can use with Grype for vulnerability scanning, share with customers for transparency, or use for license compliance. SBOMs are becoming required by regulations and standards like Executive Order 14028.

External resources:

Related documentation: SBOM Generation

Severity

A classification of how serious a vulnerability is, typically based on CVSS scores. Common severity levels are Critical, High, Medium, Low, and Negligible (or None).

Why it matters: Grype reports vulnerability severity to help you prioritize remediation efforts. You can filter Grype output by severity (e.g., --fail-on high to fail CI builds for high or critical vulnerabilities).

Related documentation: Vulnerability Scanning

Software supply chain

The software supply chain encompasses all the components, processes, and steps involved in creating, building, and delivering software. This includes source code, dependencies, build tools, CI/CD pipelines, and distribution mechanisms. Securing the software supply chain helps prevent attacks that target the development and delivery process.

Why it matters: Syft and Grype are key tools in supply chain security. Syft provides visibility into what’s in your software (SBOM), and Grype identifies known vulnerabilities, helping you secure each link in the chain.

Source

In Syft’s JSON output, the “source” object describes what was scanned—whether it was a container image, directory, file archive, or other input. It includes details like image name, digest, and tags.

Why it matters: The source information helps you correlate SBOMs with specific artifacts, especially important when tracking multiple image versions or builds.

Related documentation: Working with Syft JSON

SPDX

Software Package Data Exchange (SPDX) is an open standard for communicating software bill of materials information, including components, licenses, copyrights, and security references. SPDX is an ISO/IEC standard (ISO/IEC 5962:2021) and supports multiple formats including JSON, YAML, XML, and tag-value.

Why it matters: Syft can generate SBOMs in SPDX format (-o spdx-json or -o spdx-tag-value), which is widely supported by compliance tools and required by many organizations and regulations. Grype can also scan SPDX SBOMs for vulnerabilities.

External resources:

SPDX Specification

Related documentation: SBOM Generation

Squash

The “squashed” view of a container image represents the final filesystem that would be visible if you ran the container. It’s the result of applying all image layers in sequence, where later layers can override or delete files from earlier layers.

Why it matters: Syft scans the squashed view by default (what you actually run), but you can use --scope all-layers to also see packages that existed in intermediate layers but were deleted before the final image.

Related documentation: SBOM Generation

V

VEX

Vulnerability Exploitability eXchange (VEX) is a series of formats for communicating information about the exploitability status of vulnerabilities in software products. VEX documents allow software vendors to provide context about whether identified vulnerabilities actually affect their product, helping users prioritize remediation efforts.

Why it matters: Grype can consume VEX documents to suppress false positives or provide additional context about vulnerabilities. When Grype reports a vulnerability that doesn’t actually affect your application, you can create a VEX document explaining why it’s not exploitable.

External resources:

Related documentation: Vulnerability Scanning

Vulnerability

A security weakness, flaw, or defect in software that can be exploited by an attacker to perform unauthorized actions, compromise systems, steal data, or cause harm. Vulnerabilities can arise from coding errors, design flaws, misconfigurations, or outdated dependencies with known security issues.

Not all vulnerabilities affect all users of a package. Whether a vulnerability impacts you depends on:

The specific version you’re using
Which features or code paths you actually invoke
Your deployment configuration and environment
Whether compensating security controls are in place

Why it matters: Grype identifies vulnerabilities in the packages discovered by Syft, enabling you to find and fix security issues before they can be exploited. Not all vulnerabilities are equally serious—use severity ratings (CVSS) and exploitation probability (EPSS) to prioritize fixes. Understanding the context of a vulnerability helps you assess real risk rather than just responding to every CVE.

External resources:

Related documentation: Vulnerability Scanning

Vulnerability database

A repository of known security vulnerabilities, their affected software versions, severity scores, and remediation information. Vulnerability databases aggregate data from multiple sources like NVD, security advisories, and vendor bulletins.

Why it matters: Grype downloads and maintains a local vulnerability database that’s updated daily. The database quality directly impacts scan accuracy—Grype uses curated, high-quality data from multiple providers to minimize false positives and false negatives.

Related documentation: Vulnerability Database

Vulnerability scanner

A tool that identifies known security vulnerabilities in software by comparing components against vulnerability databases. Vulnerability scanners like Grype analyze software artifacts (container images, filesystems, or SBOMs) and report potential security issues that should be addressed.

Why it matters: Grype is a vulnerability scanner that works seamlessly with Syft-generated SBOMs. You can scan images directly with Grype, or generate an SBOM with Syft first and scan it separately, enabling workflows where SBOMs are generated once and scanned multiple times as new vulnerabilities are discovered.

Related documentation: Vulnerability Scanning