Feat relabel grype1373 (#87)

Some of the relabeling necessary for grype#1373. Signed-off-by: Will Murphy <[email protected]>
anchore · Aug 3, 2023 · 0fe5615 · 0fe5615
1 parent 9b02ce0
commit 0fe5615
Show file tree

Hide file tree

Showing 89 changed files with 45 additions and 44 deletions.
diff --git a/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/38193ee3-8a83-4d55-9d21-2038110d4e5b.json b/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/38193ee3-8a83-4d55-9d21-2038110d4e5b.json
diff --git a/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/38f80134-fe4d-4a6d-a9ac-a7bbcf952cd1.json b/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/38f80134-fe4d-4a6d-a9ac-a7bbcf952cd1.json
@@ -0,0 +1 @@
+{"ID": "38f80134-fe4d-4a6d-a9ac-a7bbcf952cd1", "effective_cve": "CVE-2021-3521", "image": {"exact": "docker.io/almalinux@sha256:cd49d7250ed7bb194d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a"}, "label": "FP", "note": "The package actually present is the rpm python3-rpm, which has a patch for this CVE. See grype#1373", "package": {"name": "rpm", "version": "4.14.3"}, "timestamp": "2023-08-02T23:42:19.765049", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "CVE-2021-3521"}
diff --git a/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/541c5f28-b905-4cc4-a960-7466da073054.json b/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/541c5f28-b905-4cc4-a960-7466da073054.json
diff --git a/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/6b31c99a-080c-43ef-b7a4-592e178b631d.json b/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/6b31c99a-080c-43ef-b7a4-592e178b631d.json
@@ -0,0 +1 @@
+{"ID": "6b31c99a-080c-43ef-b7a4-592e178b631d", "effective_cve": "CVE-2021-20266", "image": {"exact": "docker.io/almalinux@sha256:cd49d7250ed7bb194d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a"}, "label": "FP", "note": "The package actually present is the RPM \"python3-rpm\", which has a patch for this CVE. See grype#1373.", "package": {"name": "rpm", "version": "4.14.3"}, "timestamp": "2023-08-02T23:42:18.559038", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "CVE-2021-20266"}
diff --git a/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/6e1646e2-d2f9-4961-b339-8513a87e9e3c.json b/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/6e1646e2-d2f9-4961-b339-8513a87e9e3c.json
@@ -0,0 +1 @@
+{"ID": "6e1646e2-d2f9-4961-b339-8513a87e9e3c", "effective_cve": "CVE-2021-3421", "image": {"exact": "docker.io/almalinux@sha256:cd49d7250ed7bb194d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a"}, "label": "FP", "note": "The package actually present is the rpm python3-rpm, which has a patch for this CVE. See grype#1373.", "package": {"name": "rpm", "version": "4.14.3"}, "timestamp": "2023-08-02T23:42:19.316859", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "CVE-2021-3421"}
diff --git a/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/8e7f14af-e15a-44d3-b5b3-72f15b930a06.json b/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/8e7f14af-e15a-44d3-b5b3-72f15b930a06.json
diff --git a/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/90901d8b-3f2e-40c5-960f-473ed4704e73.json b/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/90901d8b-3f2e-40c5-960f-473ed4704e73.json
@@ -0,0 +1 @@
+{"ID": "90901d8b-3f2e-40c5-960f-473ed4704e73", "effective_cve": "CVE-2021-35938", "image": {"exact": "docker.io/almalinux@sha256:cd49d7250ed7bb194d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a"}, "label": "FP", "note": "The package actually present is the rpm python3-rpm, against which this CVE is reported. See grype#1373.", "package": {"name": "rpm", "version": "4.14.3"}, "timestamp": "2023-08-02T23:42:21.524469", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "CVE-2021-35938"}
diff --git a/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/9ab02384-7fed-466d-951a-24084a275d06.json b/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/9ab02384-7fed-466d-951a-24084a275d06.json
@@ -0,0 +1 @@
+{"ID": "9ab02384-7fed-466d-951a-24084a275d06", "effective_cve": "CVE-2021-35939", "image": {"exact": "docker.io/almalinux@sha256:cd49d7250ed7bb194d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a"}, "label": "FP", "note": "The package actually present is the rpm python3-rpm, against which this CVE is reported. See grype#1373.", "package": {"name": "rpm", "version": "4.14.3"}, "timestamp": "2023-08-02T23:42:22.738523", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "CVE-2021-35939"}
diff --git a/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/b65426c0-e3f1-4306-b9bf-dd3c894ba914.json b/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/b65426c0-e3f1-4306-b9bf-dd3c894ba914.json
diff --git a/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/b6ff896c-e484-45dd-93c6-0b2ac24493d5.json b/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/b6ff896c-e484-45dd-93c6-0b2ac24493d5.json
diff --git a/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/b79d4030-4ac2-4f78-a2d0-abda540e2287.json b/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/b79d4030-4ac2-4f78-a2d0-abda540e2287.json
diff --git a/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/e62843bf-a697-4475-b666-13ff8dbaa43c.json b/...d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a/e62843bf-a697-4475-b666-13ff8dbaa43c.json
@@ -0,0 +1 @@
+{"ID": "e62843bf-a697-4475-b666-13ff8dbaa43c", "effective_cve": "CVE-2021-35937", "image": {"exact": "docker.io/almalinux@sha256:cd49d7250ed7bb194d502d8a3e50bd775055ca275d1d9c2785aea72b890afe6a"}, "label": "FP", "note": "The package actually present is the rpm python3-rpm, against which this CVE is reported. See grype#1373.", "package": {"name": "rpm", "version": "4.14.3"}, "timestamp": "2023-08-02T23:42:20.216933", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "CVE-2021-35937"}
diff --git a/...ec7ed82387766df386671e8b77e898d05786118d5b7880b/4d101f8b-7f17-46ca-b0dc-a8451b215926.json b/...ec7ed82387766df386671e8b77e898d05786118d5b7880b/4d101f8b-7f17-46ca-b0dc-a8451b215926.json
diff --git a/...ec7ed82387766df386671e8b77e898d05786118d5b7880b/a36fc078-4825-4762-9811-39b096fba547.json b/...ec7ed82387766df386671e8b77e898d05786118d5b7880b/a36fc078-4825-4762-9811-39b096fba547.json
diff --git a/...ec7ed82387766df386671e8b77e898d05786118d5b7880b/b7abecfe-8d73-408c-9008-4b6990b5026b.json b/...ec7ed82387766df386671e8b77e898d05786118d5b7880b/b7abecfe-8d73-408c-9008-4b6990b5026b.json
diff --git a/...ec7ed82387766df386671e8b77e898d05786118d5b7880b/d684f15b-4edc-4866-87f8-f029c8d23e47.json b/...ec7ed82387766df386671e8b77e898d05786118d5b7880b/d684f15b-4edc-4866-87f8-f029c8d23e47.json
@@ -0,0 +1 @@
+{"ID": "d684f15b-4edc-4866-87f8-f029c8d23e47", "effective_cve": "CVE-2021-35939", "image": {"exact": "docker.io/anchore/test_images@sha256:524ff8a75f21fd886ec7ed82387766df386671e8b77e898d05786118d5b7880b"}, "label": "FP", "note": "Actual package is the rpm \"python3-rpm\" which this CVE should be reported against.", "package": {"name": "rpm", "version": "4.14.3"}, "timestamp": "2023-08-02T20:50:58.158669", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "CVE-2021-35939"}
diff --git a/...ec7ed82387766df386671e8b77e898d05786118d5b7880b/e21976a4-349b-4b6e-a6ef-677c3f99334c.json b/...ec7ed82387766df386671e8b77e898d05786118d5b7880b/e21976a4-349b-4b6e-a6ef-677c3f99334c.json
@@ -0,0 +1 @@
+{"ID": "e21976a4-349b-4b6e-a6ef-677c3f99334c", "effective_cve": "CVE-2020-10663", "image": {"exact": "docker.io/anchore/test_images@sha256:524ff8a75f21fd886ec7ed82387766df386671e8b77e898d05786118d5b7880b"}, "label": "FP", "note": "Actual package is the rpm rubygem-json @ 2.1.0-110.module+el8.6.0+15956+aa803fc1, which according to https://access.redhat.com/errata/RHSA-2021:2587 was patched for CVE-2020-10663 in a previous version.", "package": {"name": "json", "version": "2.1.0"}, "timestamp": "2023-08-02T20:49:20.444643", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "GHSA-jphg-qwrw-7w9g"}
diff --git a/...ec7ed82387766df386671e8b77e898d05786118d5b7880b/e5333992-412f-4b7a-bfb4-c2289e62155f.json b/...ec7ed82387766df386671e8b77e898d05786118d5b7880b/e5333992-412f-4b7a-bfb4-c2289e62155f.json
@@ -0,0 +1 @@
+{"ID": "e5333992-412f-4b7a-bfb4-c2289e62155f", "effective_cve": "CVE-2021-35938", "image": {"exact": "docker.io/anchore/test_images@sha256:524ff8a75f21fd886ec7ed82387766df386671e8b77e898d05786118d5b7880b"}, "label": "FP", "note": "Actual package present is the rpm \"python3-rpm\", which this CVE should be reported against.", "package": {"name": "rpm", "version": "4.14.3"}, "timestamp": "2023-08-02T20:50:51.806074", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "CVE-2021-35938"}
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/016342ce-fa1d-47eb-af08-e17db4404d36.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/016342ce-fa1d-47eb-af08-e17db4404d36.json
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/07e93a1d-e8e2-4fde-9b44-9ceb5cc03d2f.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/07e93a1d-e8e2-4fde-9b44-9ceb5cc03d2f.json
@@ -0,0 +1 @@
+{"ID": "07e93a1d-e8e2-4fde-9b44-9ceb5cc03d2f", "effective_cve": "CVE-2021-37714", "image": {"exact": "docker.io/anchore/test_images@sha256:808f6cf3cf4473eb39ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9"}, "label": "FP", "note": "The jar \"jsoup @ 1.11.3\" is really part of the rpm. This vulnerability should only be reported against the RPM, where it is called CVE-2021-37714. See Grype#1373.", "package": {"name": "jsoup", "version": "1.11.3"}, "timestamp": "2023-08-01T18:14:16.595261", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "GHSA-m72m-mhq2-9p6c"}
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/2f2ab162-4e41-485d-bc76-d418f818ad59.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/2f2ab162-4e41-485d-bc76-d418f818ad59.json
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/31d28a44-d646-41da-b3d3-6021f921f5af.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/31d28a44-d646-41da-b3d3-6021f921f5af.json
@@ -0,0 +1 @@
+{"ID": "31d28a44-d646-41da-b3d3-6021f921f5af", "effective_cve": "CVE-2021-35938", "image": {"exact": "docker.io/anchore/test_images@sha256:808f6cf3cf4473eb39ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9"}, "label": "FP", "note": "The package actually present is the rpm \"python3-rpm\". See Grype#1373.", "package": {"name": "rpm", "version": "4.14.3"}, "timestamp": "2023-08-03T13:54:59.438564", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "CVE-2021-35938"}
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/4105b0e2-535d-437e-a284-4e5955ccbd59.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/4105b0e2-535d-437e-a284-4e5955ccbd59.json
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/5d6c514e-e3cb-46ca-87d9-e5c0a554570f.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/5d6c514e-e3cb-46ca-87d9-e5c0a554570f.json
@@ -0,0 +1 @@
+{"ID": "5d6c514e-e3cb-46ca-87d9-e5c0a554570f", "effective_cve": "CVE-2021-31799", "image": {"exact": "docker.io/anchore/test_images@sha256:808f6cf3cf4473eb39ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9"}, "label": "FP", "note": "The package actually present is the RPM \"rubygem-rdoc\" which according to https://access.redhat.com/errata/RHSA-2022:0672 is patched. See grype#1373.", "package": {"name": "rdoc", "version": "6.0.1.1"}, "timestamp": "2023-08-03T13:59:25.066251", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "CVE-2021-31799"}
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/77279ee0-0c2f-4991-bb2e-e5f4ebeb4c9a.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/77279ee0-0c2f-4991-bb2e-e5f4ebeb4c9a.json
@@ -0,0 +1 @@
+{"ID": "77279ee0-0c2f-4991-bb2e-e5f4ebeb4c9a", "effective_cve": "CVE-2020-8908", "image": {"exact": "docker.io/anchore/test_images@sha256:808f6cf3cf4473eb39ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9"}, "label": "FP", "note": "The package actually present is the RPM guava20. This CVE is reported against that package, and shouldn't be reported against the jar too. See grype#1373.", "package": {"name": "guava", "version": "20.0"}, "timestamp": "2023-08-03T13:18:08.264473", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "CVE-2020-8908"}
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/7d6c04b5-570c-4f4c-865e-b15688cc1a3c.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/7d6c04b5-570c-4f4c-865e-b15688cc1a3c.json
@@ -0,0 +1 @@
+{"ID": "7d6c04b5-570c-4f4c-865e-b15688cc1a3c", "effective_cve": "CVE-2021-31799", "image": {"exact": "docker.io/anchore/test_images@sha256:808f6cf3cf4473eb39ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9"}, "label": "FP", "note": "The package actually present is the RPM \"rubygem-rdoc\" which according to https://access.redhat.com/errata/RHSA-2022:0672 is patched. See grype#1373", "package": {"name": "rdoc", "version": "6.0.1.1"}, "timestamp": "2023-08-03T14:01:17.091541", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "GHSA-ggxm-pgc9-g7fp"}
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/827155db-7064-4284-bed0-9597e38723cb.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/827155db-7064-4284-bed0-9597e38723cb.json
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/97d0fab4-bd78-423d-87f7-6d5d85ee0862.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/97d0fab4-bd78-423d-87f7-6d5d85ee0862.json
@@ -0,0 +1 @@
+{"ID": "97d0fab4-bd78-423d-87f7-6d5d85ee0862", "effective_cve": "CVE-2021-37714", "image": {"exact": "docker.io/anchore/test_images@sha256:808f6cf3cf4473eb39ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9"}, "label": "FP", "note": "The jar \"jsoup @ 1.11.3\" is really part of the rpm. This vulnerability should only be reported against the RPM. See Grype#1373.", "package": {"name": "jsoup", "version": "1.11.3"}, "timestamp": "2023-08-01T18:12:42.539891", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "CVE-2021-37714"}
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/9a80baf3-cc3e-44ca-a01a-8acd13b61479.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/9a80baf3-cc3e-44ca-a01a-8acd13b61479.json
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/a046ea4e-f442-4494-bb03-98f31a810653.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/a046ea4e-f442-4494-bb03-98f31a810653.json
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/aa5e97c5-3929-4802-b7b8-2db7fe0271c1.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/aa5e97c5-3929-4802-b7b8-2db7fe0271c1.json
@@ -0,0 +1 @@
+{"ID": "aa5e97c5-3929-4802-b7b8-2db7fe0271c1", "effective_cve": "CVE-2018-10237", "image": {"exact": "docker.io/anchore/test_images@sha256:808f6cf3cf4473eb39ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9"}, "label": "FP", "note": "This package is actually the rpm guava20 from RHEL8. According to https://access.redhat.com/security/cve/CVE-2018-10237, guava20 from RHEL8 is not affected.", "package": {"name": "guava", "version": "20.0"}, "timestamp": "2023-08-01T17:08:09.615202", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "CVE-2018-10237"}
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/c083a603-8a14-42e3-9073-fd4df3e78414.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/c083a603-8a14-42e3-9073-fd4df3e78414.json
@@ -0,0 +1 @@
+{"ID": "c083a603-8a14-42e3-9073-fd4df3e78414", "effective_cve": "CVE-2018-10237", "image": {"exact": "docker.io/anchore/test_images@sha256:808f6cf3cf4473eb39ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9"}, "label": "FP", "note": "The actual package is the guava20 RPM, which https://access.redhat.com/security/cve/CVE-2018-10237 lists as not affected. See grype#1373.", "package": {"name": "guava", "version": "20.0"}, "timestamp": "2023-08-03T13:19:57.297183", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "GHSA-mvr2-9pj6-7w5j"}
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/c7b5a34e-b496-4fe6-83f2-29180a616850.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/c7b5a34e-b496-4fe6-83f2-29180a616850.json
@@ -0,0 +1 @@
+{"ID": "c7b5a34e-b496-4fe6-83f2-29180a616850", "effective_cve": "CVE-2020-8908", "image": {"exact": "docker.io/anchore/test_images@sha256:808f6cf3cf4473eb39ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9"}, "label": "FP", "note": "The actual package present is the RPM guava20, which has CVE-2020-8908 reported against it. See grype#1373.", "package": {"name": "guava", "version": "20.0"}, "timestamp": "2023-08-03T13:18:43.728962", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "GHSA-5mg8-w23w-74h3"}
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/cb6cbc57-bce7-449b-89c5-dd4ccc724e1f.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/cb6cbc57-bce7-449b-89c5-dd4ccc724e1f.json
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/cf7b6892-e1d5-4d2e-b25b-a21e841780dc.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/cf7b6892-e1d5-4d2e-b25b-a21e841780dc.json
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/d64b5ba9-8802-4849-8bb1-73672b8247d2.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/d64b5ba9-8802-4849-8bb1-73672b8247d2.json
@@ -0,0 +1 @@
+{"ID": "d64b5ba9-8802-4849-8bb1-73672b8247d2", "effective_cve": "CVE-2021-35939", "image": {"exact": "docker.io/anchore/test_images@sha256:808f6cf3cf4473eb39ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9"}, "label": "FP", "note": "The package actually present is the RPM \"python3-rpm\", which is where this CVE should be reported. See grype#1373.", "package": {"name": "rpm", "version": "4.14.3"}, "timestamp": "2023-08-03T14:11:22.959869", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "CVE-2021-35939"}
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/ea274c0e-a528-4ba1-8b81-40c47fb027ae.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/ea274c0e-a528-4ba1-8b81-40c47fb027ae.json
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/f0ae739c-7069-485c-b8e9-920fe2d86d6c.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/f0ae739c-7069-485c-b8e9-920fe2d86d6c.json
@@ -0,0 +1 @@
+{"ID": "f0ae739c-7069-485c-b8e9-920fe2d86d6c", "effective_cve": "CVE-2021-31799", "image": {"exact": "docker.io/anchore/test_images@sha256:808f6cf3cf4473eb39ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9"}, "label": "FP", "package": {"name": "rdoc", "version": "6.0.1.1"}, "timestamp": "2023-08-03T13:59:27.646262", "tool": "[email protected]", "user": "willmurphy", "vulnerability_id": "CVE-2021-31799"}
diff --git a/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/f176c279-48f5-40bc-b1b3-3d54876aa776.json b/...9ff9bb47ead639d2ed71255b75b9b140162b58c6102bcc9/f176c279-48f5-40bc-b1b3-3d54876aa776.json
diff --git a/...7eeb98ed1899c16d3b265f02ddfb41303d7a16c31e0b0f1/ddd8f7ff-d8fe-417d-a863-75050917d16e.json b/...7eeb98ed1899c16d3b265f02ddfb41303d7a16c31e0b0f1/ddd8f7ff-d8fe-417d-a863-75050917d16e.json