{"id":379135,"date":"2024-06-18T15:01:26","date_gmt":"2024-06-18T15:01:26","guid":{"rendered":"http:\/\/savepearlharbor.com\/?p=379135"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T21:00:00","slug":"","status":"publish","type":"post","link":"https:\/\/savepearlharbor.com\/?p=379135","title":{"rendered":"<span>Trivy: \u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u0441\u043e\u0432\u0435\u0442\u044b \u043f\u043e \u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439<\/span>"},"content":{"rendered":"<div><!--[--><!--]--><\/div>\n<div id=\"post-content-body\">\n<div>\n<div class=\"article-formatted-body article-formatted-body article-formatted-body_version-2\">\n<div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\">\n<p>\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440!\u00a0<\/p>\n<p>\u042d\u0442\u043e \u0447\u0442\u043e, \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u0441\u0442\u0430\u0442\u044c\u044f \u043e Trivy? \u041a\u0430\u0436\u0435\u0442\u0441\u044f, \u0431\u0443\u0434\u0442\u043e \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u043e\u0432\u043e\u0433\u043e \u0443\u0436\u0435 \u043e\u0431 \u044d\u0442\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043d\u0435\u043b\u044c\u0437\u044f, \u0430 \u0441\u0430\u043c \u0441\u043a\u0430\u043d\u0435\u0440 \u0432\u043d\u0435\u0434\u0440\u0435\u043d \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u0434\u0430\u0436\u0435 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0437\u0440\u0435\u043b\u043e\u0441\u0442\u0438 \u0418\u0411. \u041d\u043e \u043c\u044b \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0441\u0442\u0430\u0442\u0435\u0439 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e. \u0410 \u0432\u043e\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043b\u043e\u0433\u0438\u043a\u0438 \u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0430\u043c \u043d\u0430\u0439\u0442\u0438 \u0442\u0430\u043a \u0438 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c.<\/p>\n<p>\u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044b \u043c\u043e\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435 \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0430 <a href=\"https:\/\/aquasecurity.github.io\/trivy\/v0.51\/docs\/coverage\/\">\u201cCoverage\u201d<\/a> \u0438\u0437 <a href=\"https:\/\/aquasecurity.github.io\/trivy\/v0.51\/\">\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0441\u043a\u0430\u043d\u0435\u0440\u0430<\/a>. \u042d\u0442\u043e \u043d\u0430\u0432\u043e\u0434\u0438\u0442 \u043d\u0430 \u043c\u044b\u0441\u043b\u044c: \u201c\u041e\u0447\u0435\u0432\u0438\u0434\u043d\u043e, \u0447\u0442\u043e Trivy \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u0445 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u043e\u0432\u201d. \u041d\u043e, \u043a\u0430\u043a \u0447\u0430\u0441\u0442\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0435 \u0431\u044b\u0432\u0430\u0435\u0442 \u0432 \u043c\u0430\u0442\u0435\u043c\u0430\u0442\u0438\u043a\u0435, \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u043e\u0435 \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u043e \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432. \u0418\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443, \u043a\u0430\u043a \u0432\u044b\u0440\u0430\u0437\u0438\u043b\u0441\u044f \u043e\u0434\u0438\u043d \u0438\u0437 \u043d\u0430\u0448\u0438\u0445 \u043a\u043e\u043b\u043b\u0435\u0433, \u043c\u044b \u00ab\u0437\u0430\u0440\u0435\u0432\u0435\u0440\u0441\u0438\u043c \u043e\u043f\u0435\u043d\u0441\u0443\u0440\u0441\u00bb \u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u0435\u043c\u0441\u044f \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f, \u043a\u0430\u043a \u0432 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043a\u0430\u043d\u0435\u0440 Trivy. \u041c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0430 \u0410\u043d\u0430\u0441\u0442\u0430\u0441\u0438\u044f \u0411\u0435\u0440\u0435\u0437\u043e\u0432\u0441\u043a\u0430\u044f, \u0438\u043d\u0436\u0435\u043d\u0435\u0440 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 Swordfish Security.\u00a0<\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/887\/1c6\/c3b\/8871c6c3bd9e61605842da6833a64c60.jpg\" width=\"1200\" height=\"409\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/887\/1c6\/c3b\/8871c6c3bd9e61605842da6833a64c60.jpg\" data-blurred=\"true\"\/><\/figure>\n<h3>\u0412\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u044b<\/h3>\n<p>\u0421\u043a\u0430\u043d\u0435\u0440 Trivy \u043e\u0431\u044b\u0447\u043d\u043e \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 \u0441\u0432\u043e\u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u043f\u043e \u043f\u0443\u0442\u0438 <strong>~\/.cache\/trivy<\/strong>. \u0412 \u043d\u0435\u0439 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0434\u0432\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u0430\u043f\u043a\u0438: <strong>fanal<\/strong> \u0438 <strong>db<\/strong>. \u0412 <strong>db<\/strong> \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0431\u0430\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0435\u0435 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0432\u0435\u0440\u0441\u0438\u044f \u0411\u0414 \u0438 \u0432\u0440\u0435\u043c\u044f \u0435\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u041f\u0430\u043f\u043a\u0430 <strong>fanal<\/strong> \u0445\u0440\u0430\u043d\u0438\u0442 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u0438 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.<\/p>\n<p>\u041e\u0431\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 <a href=\"https:\/\/github.com\/boltdb\/bolt\">boltDB<\/a> \u2014 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u00ab\u043a\u043b\u044e\u0447-\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u00bb. \u0414\u043b\u044f \u0443\u0434\u043e\u0431\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0443\u0442\u0438\u043b\u0438\u0442\u0443 <a href=\"https:\/\/github.com\/br0xen\/boltbrowser\">boltbrowser<\/a>. \u042d\u0442\u043e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0431\u044b\u0441\u0442\u0440\u043e \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435\u0441\u044f \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u0430 boltDB, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u043e\u043b\u0435\u0435 \u0443\u0434\u043e\u0431\u043d\u043e\u0439 \u0438 \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e\u0439.<\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/d8b\/17e\/af8\/d8b17eaf8f0429887a2ee2a74ead8ecb.png\" alt=\"\u0420\u0438\u0441\u0443\u043d\u043e\u043a 1. \u041f\u0440\u0438\u043c\u0435\u0440 \u0445\u0440\u0430\u043d\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 fanal.db\" title=\"\u0420\u0438\u0441\u0443\u043d\u043e\u043a 1. \u041f\u0440\u0438\u043c\u0435\u0440 \u0445\u0440\u0430\u043d\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 fanal.db\" width=\"1844\" height=\"675\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/d8b\/17e\/af8\/d8b17eaf8f0429887a2ee2a74ead8ecb.png\"\/><\/p>\n<div><figcaption>\u0420\u0438\u0441\u0443\u043d\u043e\u043a 1. \u041f\u0440\u0438\u043c\u0435\u0440 \u0445\u0440\u0430\u043d\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 fanal.db<\/figcaption><\/div>\n<\/figure>\n<p>\u0412 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 <strong>fanal.db<\/strong> \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0434\u0435\u0442\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u043b\u043e\u044f\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0437\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 \u0438 \u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u041d\u0430 \u0440\u0438\u0441\u0443\u043d\u043a\u0435 1 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u043c \u0441\u043b\u043e\u0435: \u043a\u043e\u043c\u0430\u043d\u0434\u0430, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u043d \u0431\u044b\u043b \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d, \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u043d\u0435\u0439 \u043f\u0430\u043a\u0435\u0442\u0430\u0445. \u0412\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u0438\u0435 \u0443\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044b \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u043c\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442. \u041d\u043e \u043d\u0435 \u0431\u0443\u0434\u0435\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043f\u0435\u0440\u0435\u0439\u0434\u0435\u043c \u043a \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044e \u0435\u0433\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.<\/p>\n<h3>\u041f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f<\/h3>\n<p>\u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u2014 \u043b\u0438\u0448\u044c \u043e\u0434\u043d\u0430 \u0438\u0437 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 Trivy, \u043c\u044b \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0438\u043c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0438\u043c\u0435\u043d\u043d\u043e \u043d\u0430 \u043d\u0435\u0439. \u0417\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u0442\u043b\u0430\u0434\u043a\u0438 \u043d\u0430 \u043f\u0440\u043e\u0441\u0442\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u0435 Alpine, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u043c \u0431\u0440\u0435\u0439\u043a\u043f\u043e\u0438\u043d\u0442\u044b \u0432 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 \u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434. \u0414\u0430\u0436\u0435 \u0431\u0435\u0437 \u0443\u0433\u043b\u0443\u0431\u043b\u0435\u043d\u0438\u044f \u0432 \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u044d\u0442\u0430\u043f\u043e\u0432 \u0440\u0430\u0431\u043e\u0442\u044b.<\/p>\n<p>\u041d\u0430 <a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/commands\/app.go#L307\">\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435<\/a> \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u043e\u043a\u043e\u0432\u044b\u0445 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0448\u0430\u0433\u043e\u0432 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.<\/p>\n<p>\u041d\u0430 <a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/commands\/artifact\/run.go#L394\">\u0432\u0442\u043e\u0440\u043e\u043c \u044d\u0442\u0430\u043f\u0435<\/a> \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0442\u0430\u0439\u043c\u0430\u0443\u0442 \u043d\u0430 \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0430\u044f \u0431\u0430\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 <strong>fanal<\/strong>, \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0431\u0430\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 <strong>db<\/strong>\u00a0\u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u044e\u0442\u0441\u044f WASL-\u043c\u043e\u0434\u0443\u043b\u0438. \u0417\u0430\u0442\u0435\u043c \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f, \u0432 \u043d\u0430\u0448\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u2014 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0431\u0440\u0430\u0437\u0430.<\/p>\n<p>\u041d\u0430 <a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/commands\/artifact\/run.go#L164\">\u0442\u0440\u0435\u0442\u044c\u0435\u043c \u044d\u0442\u0430\u043f\u0435<\/a> \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u044e\u0442\u0441\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b lock-\u0444\u0430\u0439\u043b\u043e\u0432 \u0441\u0431\u043e\u0440\u0449\u0438\u043a\u043e\u0432), \u0438 \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u043c\u0435\u0442\u043e\u0434 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u043e\u0431\u0440\u0430\u0437\u0435 (\u0438\u0437 \u0430\u0440\u0445\u0438\u0432\u0430 \u0438\u043b\u0438 \u043e\u0431\u0440\u0430\u0437\u0430, \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e). \u0417\u0430\u0442\u0435\u043c \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043a \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 (\u0442\u0430\u043a\u043e\u0439 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u044b\u0439 \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043c\u0435\u0436\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432).<\/p>\n<p>\u041d\u0430 <a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/commands\/artifact\/run.go#L679\">\u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u043c \u044d\u0442\u0430\u043f\u0435<\/a> \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441\u043a\u0430\u043d\u0435\u0440. \u041f\u0435\u0440\u0435\u0434\u0430\u044e\u0442\u0441\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0446\u0435\u043b\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (\u0438\u043c\u044f \u043e\u0431\u0440\u0430\u0437\u0430), \u0444\u043b\u0430\u0433\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u0442\u0430\u043f\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u041d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0442\u0438\u043f\u044b \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a (\u043f\u0430\u043a\u0435\u0442\u044b \u041e\u0421, \u044f\u0437\u044b\u043a\u043e\u0432\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b) \u0438 \u0441\u043a\u0430\u043d\u0435\u0440\u044b (\u043f\u043e\u0438\u0441\u043a \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0430\u043c\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 Rekor, AWS \u0438 Docker Host. \u0421\u044e\u0434\u0430 \u0436\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0432\u0442\u043e\u0440\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b (lock-\u0444\u0430\u0439\u043b\u044b \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b).<\/p>\n<p>\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e Trivy \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0443 \u0447\u0435\u0440\u0435\u0437 CRI (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 containerd, podman, docker) \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435: \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 (overlay, overlay2 \u2014 \u0438\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u043b\u044f \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043d\u0430\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u0440\u0443\u0433 \u043d\u0430 \u0434\u0440\u0443\u0433\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043b\u0435\u0433\u043a\u0438\u0435 \u0438 \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u044b\u0435 \u043e\u0431\u0440\u0430\u0437\u044b \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432). \u0422\u0430\u043a\u0436\u0435 \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0445 \u0432 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 Rekor \u043a\u043b\u0438\u0435\u043d\u0442.<\/p>\n<p>\u0418\u043c\u0435\u043d\u043d\u043e \u0437\u0434\u0435\u0441\u044c \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u044f\u044e\u0442\u0441\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u0438 \u043f\u043e\u0441\u0442-\u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b (\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u0431\u0443\u0434\u0435\u0442 \u0441\u043a\u0430\u0437\u0430\u043d\u043e \u0434\u0430\u043b\u044c\u0448\u0435). \u0410\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 (\u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0445 \u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0445 \u2014 \u043a\u0430\u043a, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u043e\u043c example). \u041d\u0430 \u044d\u0442\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0443 \u043d\u0430\u0441 \u0435\u0441\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043f\u043e\u043b\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u043e\u0431\u0440\u0430\u0437\u0435 \u0438 \u0435\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u043c, \u0433\u043e\u0442\u043e\u0432\u044b\u0439 \u043a \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u043e\u043d\u043d\u044b\u043c \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c.<\/p>\n<p>\u041c\u044b \u043f\u043e\u0442\u0438\u0445\u043e\u043d\u044c\u043a\u0443 \u043f\u0440\u0438\u0431\u043b\u0438\u0436\u0430\u0435\u043c\u0441\u044f \u043a \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043b\u043e\u0433\u0438\u043a\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041d\u043e \u043f\u0440\u0435\u0436\u0434\u0435 \u043f\u0435\u0440\u0435\u0439\u0434\u0435\u043c \u043a <a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/fanal\/artifact\/image\/image.go#L201\">\u043f\u044f\u0442\u043e\u043c\u0443 \u044d\u0442\u0430\u043f\u0443<\/a>, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 Trivy \u0431\u044b\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u0441\u043a\u0430\u043d\u0435\u0440\u043e\u043c.<\/p>\n<p>\u041d\u0430 \u044d\u0442\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0441\u043a\u0430\u043d\u0435\u0440 \u043e\u0431\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u043a \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u043c\u0443 \u0444\u0430\u0439\u043b\u0443, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u043e\u043c\u0443 \u0438\u0437 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 Docker \u043d\u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u043c \u044d\u0442\u0430\u043f\u0435. \u0417\u0430\u0442\u0435\u043c \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u043e\u0431\u0440\u0430\u0437\u0430 \u0438 \u0435\u0433\u043e \u0441\u043b\u043e\u0435\u0432. \u0417\u0434\u0435\u0441\u044c \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 SBOM. \u0412 \u043d\u0430\u0448\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0433\u043e \u043d\u0435\u0442, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435.<\/p>\n<p>\u0414\u0430\u043b\u0435\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0441\u044f <a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/fanal\/image\/image.go#L111\">\u043f\u043e\u0438\u0441\u043a \u0438\u043d\u0434\u0435\u043a\u0441\u0430 \u0431\u0430\u0437\u043e\u0432\u043e\u0433\u043e \u0441\u043b\u043e\u044f<\/a>. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0431\u043e\u0442\u043b\u0438\u0432\u043e \u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u0445 \u043f\u0440\u0438\u043c\u0435\u0440 \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u0442\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438:<\/p>\n<pre><code class=\"bash\">FROM debian:8 RUN apt-get update COPY mysecret \/ ENTRYPOINT [\"entrypoint.sh\"] CMD [\"somecmd\"]<\/code><\/pre>\n<p>\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e Dockerfile \u043d\u0443\u0436\u043d\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043b\u043e\u0438 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0441\u0431\u043e\u0440\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u0431\u0430\u0437\u043e\u0432\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0437\u0443 Debian. \u0427\u0442\u043e\u0431\u044b \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c, \u0432 \u0446\u0438\u043a\u043b\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0438\u0449\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u0430\u044f \u0441 \u043a\u043e\u043d\u0446\u0430 \u0441\u0442\u0440\u043e\u043a\u0430 \u0432\u0438\u0434\u0430:<\/p>\n<pre><code class=\"bash\">CMD [\"\/bin\/sh\"]<\/code><\/pre>\n<p>\u0417\u0430\u0442\u0435\u043c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0441\u043b\u043e\u0435\u0432 \u0438 \u043e\u0431\u0440\u0430\u0437\u0430 \u043a\u043e\u043d\u0432\u0435\u0440\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u043a\u043b\u044e\u0447\u0438 \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 <strong>fanal.db<\/strong>. \u0414\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u043b\u043e\u044f \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0438\u0437 \u0438\u0441\u0442\u043e\u0440\u0438\u0438, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u044f\u0442\u044c \u0436\u0435 \u0441\u0430\u043c\u0438\u043c Docker, \u043e \u0442\u043e\u043c, \u043a\u0430\u043a\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u043e\u043d \u0431\u044b\u043b \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d (\u043a\u0430\u043a \u043c\u044b \u0432\u0438\u0434\u0435\u043b\u0438 \u043d\u0430 \u0440\u0438\u0441\u0443\u043d\u043a\u0435 1).<\/p>\n<p>\u0414\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0438\u0437 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0441\u043b\u043e\u0435\u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0441\u044f <a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/fanal\/cache\/fs.go#L158\">\u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043a\u0435\u0448\u0430<\/a>. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 Trivy \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c: \u043e\u043d \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0430 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0438\u043d\u0441\u043f\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0435 \u0441\u043b\u043e\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0435\u0449\u0435 \u043d\u0435\u0442 \u0432 \u043a\u0435\u0448\u0435 (\u043f\u0440\u0438 \u0443\u0441\u043b\u043e\u0432\u0438\u0438, \u0447\u0442\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0445\u0435\u043c \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u044e\u0442). \u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043e\u0431 \u043e\u0431\u0440\u0430\u0437\u0435.<\/p>\n<p>\u041f\u043e\u0441\u043b\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0443\u0436\u0435 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043b\u043e\u0435\u0432 \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0430\u0435\u043c \u043a <a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/fanal\/artifact\/image\/image.go#L201\">\u0438\u043d\u0441\u043f\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e<\/a> \u0442\u0435\u0445, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043a\u0435\u0448\u0435 \u043d\u0435 \u043d\u0430\u0448\u043b\u043e\u0441\u044c. \u0418\u043d\u0441\u043f\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u043e\u043f\u044f\u0442\u044c \u0436\u0435 \u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.<\/p>\n<p>\u041d\u0430<strong> <\/strong><a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/fanal\/artifact\/image\/image.go#L215)\">\u0448\u0435\u0441\u0442\u043e\u043c<\/a> \u044d\u0442\u0430\u043f\u0435 \u043c\u044b \u0432\u0438\u0434\u0438\u043c, \u0437\u0430\u0447\u0435\u043c \u043e\u0442\u0434\u0435\u043b\u044f\u043b\u0441\u044f \u0431\u0430\u0437\u043e\u0432\u044b\u0439 \u0441\u043b\u043e\u0439. \u041e\u0442\u043b\u0438\u0447\u0438\u0435 \u044d\u0442\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0434\u043b\u044f \u043d\u0435\u0433\u043e \u043d\u0435 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0438\u0441\u043a \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043a \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u043c, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0442\u0440\u0435\u0442\u044c\u0435\u043c \u044d\u0442\u0430\u043f\u0435, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0438\u043f, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u043f\u043e\u0438\u0441\u043a \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432.<\/p>\n<p>\u0421\u043a\u0430\u043d\u0435\u0440 \u201c\u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442\u0441\u044f\u201d \u043f\u043e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043e\u0431\u0440\u0430\u0437\u0430. \u041f\u0435\u0440\u0435\u0434 \u0430\u043d\u0430\u043b\u0438\u0437\u043e\u043c \u043e\u043d \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0444\u0430\u0439\u043b\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u043e\u043c <strong>.wh.<\/strong> \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c\u0438 <strong>.wh.<\/strong> \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u043c\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 <strong>\/etc\/.wh..wh..wh..opq.<\/strong> \u0414\u043b\u044f \u0441\u043f\u0440\u0430\u0432\u043a\u0438, \u0442\u0430\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u0441\u043e\u0437\u0434\u0430\u044e\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 overlay (Docker \u043a\u0430\u043a \u0440\u0430\u0437 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0442\u0430\u043a\u043e\u0439 \u0441\u0440\u0435\u0434\u0435). \u042d\u0442\u0438 \u0444\u0430\u0439\u043b\u044b \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0432\u0435\u0440\u0445 \u0438 \u0432\u043d\u0438\u0437. \u0424\u0430\u0439\u043b\u044b \u0441 \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u043e\u043c <strong>.wh.<\/strong> \u0441\u043b\u0443\u0436\u0430\u0442 \u043c\u0430\u0440\u043a\u0435\u0440\u0430\u043c\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044f\u043c\u0438: \u043e\u043d\u0438 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u0444\u0430\u0439\u043b \u0438\u043b\u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0431\u044b\u043b \u0443\u0434\u0430\u043b\u0435\u043d \u0438\u043b\u0438 \u0441\u043a\u0440\u044b\u0442 \u0432 overlay-\u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u042d\u0442\u0438 \u0444\u0430\u0439\u043b\u044b \u043e\u0431\u044b\u0447\u043d\u043e \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u2014 \u043e\u043d\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u0430\u043c\u0438, \u043d\u0435 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u043b\u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 Trivy \u0438\u0445 \u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442. \u0412\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043d\u0430 \u0430\u043d\u0430\u043b\u0438\u0437.<\/p>\n<p>\u0412 \u0445\u043e\u0434\u0435 \u044d\u0442\u0430\u043f\u043e\u0432 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435: \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043b\u0438 \u043e\u043d \u043a\u0440\u0438\u0442\u0435\u0440\u0438\u044f\u043c \u043a\u0430\u043a\u043e\u0433\u043e-\u043b\u0438\u0431\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430. \u0418\u043d\u044b\u043c\u0438 \u0441\u043b\u043e\u0432\u0430\u043c\u0438, \u043c\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043d\u0430 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u044c.<\/p>\n<p>\u0415\u0441\u043b\u0438 \u0445\u043e\u0442\u044f \u0431\u044b \u043e\u0434\u043d\u043e \u0438\u0437 \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043e, \u0438\u0437 \u043d\u0435\u0433\u043e \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0432\u0441\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f. \u041d\u0430 \u044d\u0442\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u043e\u0442\u0431\u0438\u0440\u0430\u044e\u0442\u0441\u044f \u0444\u0430\u0439\u043b\u044b, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u041f\u043e\u0437\u0434\u043d\u0435\u0435 \u043e\u043d\u0438 \u0442\u0430\u043a\u0436\u0435 \u0434\u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0435.<\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/436\/36d\/7c8\/43636d7c8c88d660b4c0be9b0bf55087.png\" alt=\"\u0420\u0438\u0441\u0443\u043d\u043e\u043a 2. \u041f\u0440\u0438\u043c\u0435\u0440 \u0432\u044b\u0432\u043e\u0434\u043e\u0432 \u0432 \u043b\u043e\u0433\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\" title=\"\u0420\u0438\u0441\u0443\u043d\u043e\u043a 2. \u041f\u0440\u0438\u043c\u0435\u0440 \u0432\u044b\u0432\u043e\u0434\u043e\u0432 \u0432 \u043b\u043e\u0433\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\" width=\"616\" height=\"422\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/436\/36d\/7c8\/43636d7c8c88d660b4c0be9b0bf55087.png\"\/><\/p>\n<div><figcaption>\u0420\u0438\u0441\u0443\u043d\u043e\u043a 2. \u041f\u0440\u0438\u043c\u0435\u0440 \u0432\u044b\u0432\u043e\u0434\u043e\u0432 \u0432 \u043b\u043e\u0433\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430<\/figcaption><\/div>\n<\/figure>\n<p>\u041d\u0430 \u0440\u0438\u0441\u0443\u043d\u043a\u0435 2 \u0438\u043b\u043b\u044e\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440 \u0444\u0430\u0439\u043b\u043e\u0432 Trivy. \u041f\u0440\u0438\u0447\u0435\u043c \u0442\u0435, \u0447\u0442\u043e \u0434\u0430\u043b\u0435\u0435 \u0438\u0434\u0443\u0442 \u0441 \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u0440\u043e\u0432\u043d\u044f \u0434\u0435\u0431\u0430\u0433 (\u0434\u0435\u0431\u0430\u0433 \u043f\u0440\u0438\u043d\u0442\u0441\u0442\u0435\u0439\u0442\u043c\u0435\u043d\u0442, \u0434\u0430-\u0434\u0430!) \u2014 \u044d\u0442\u043e \u0444\u0430\u0439\u043b\u044b, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u0441 \u0442\u0438\u043f\u043e\u043c secret.<\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/b4a\/e6c\/58c\/b4ae6c58c6fc225daf105d4a9cf56862.png\" alt=\"\u0420\u0438\u0441\u0443\u043d\u043e\u043a 3. \u041f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043e\u0431\u0440\u0430\u0437\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 (\u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u043d\u0430\u044f)\" title=\"\u0420\u0438\u0441\u0443\u043d\u043e\u043a 3. \u041f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043e\u0431\u0440\u0430\u0437\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 (\u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u043d\u0430\u044f)\" width=\"2595\" height=\"1323\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/b4a\/e6c\/58c\/b4ae6c58c6fc225daf105d4a9cf56862.png\"\/><\/p>\n<div><figcaption>\u0420\u0438\u0441\u0443\u043d\u043e\u043a 3. \u041f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043e\u0431\u0440\u0430\u0437\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 (\u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u043d\u0430\u044f)<\/figcaption><\/div>\n<\/figure>\n<p>\u0417\u0430\u0432\u0435\u0440\u0448\u0430\u044e\u0449\u0438\u0435 \u044d\u0442\u0430\u043f\u044b \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u0430\u043d\u0430\u043b\u0438\u0437\u0430, \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0438\u0445 \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 <strong>fanal.db<\/strong>, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u043e\u0431\u0440\u0430\u0437\u0430 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u0432 \u043a\u0435\u0448. \u041d\u0430 \u044d\u0442\u043e\u043c \u0432\u0441\u0451, \u0444\u0443\u0445!<\/p>\n<h3>\u0420\u0430\u0431\u043e\u0442\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432<\/h3>\n<p>\u0410\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0437\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438:<\/p>\n<ul>\n<li>\n<p>\u0410\u043d\u0430\u043b\u0438\u0437 \u0432\u0435\u0440\u0441\u0438\u0438 \u041e\u0421: \u044d\u0442\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044e\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u0437 \u0440\u0435\u043b\u0438\u0437\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430. \u0425\u043e\u0442\u044f \u044d\u0442\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435 \u0441\u0442\u043e\u043b\u044c \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438, \u043e\u043d\u0438 \u0432\u0441\u0451 \u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432 \u0442\u0430\u0431\u043b\u0438\u0446\u0443 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445.<\/p>\n<\/li>\n<li>\n<p>\u0410\u043d\u0430\u043b\u0438\u0437 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439: \u044d\u0442\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u0438\u0449\u0443\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0444\u0430\u0439\u043b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438, \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u0430\u0445. \u0422\u0430\u0431\u043b\u0438\u0446\u0443 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0432 <a href=\"https:\/\/aquasecurity.github.io\/trivy\/v0.51\/docs\/coverage\/language\/\">\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438<\/a>.<\/p>\n<\/li>\n<li>\n<p>\u0410\u043d\u0430\u043b\u0438\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e \u0441\u0431\u043e\u0440\u043a\u0435: \u044d\u0442\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044e\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 \u043e\u0431\u0440\u0430\u0437\u0430.<\/p>\n<\/li>\n<li>\n<p>\u0410\u043d\u0430\u043b\u0438\u0437 \u0444\u0430\u0439\u043b\u043e\u0432 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u041e\u0421 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 apk, dpkg \u0438 \u0442. \u0434.). \u041e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u043d\u0438\u043c\u0438 \u043c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u0432 <a href=\"https:\/\/aquasecurity.github.io\/trivy\/v0.51\/docs\/coverage\/os\/\">\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438<\/a>.<\/p>\n<\/li>\n<li>\n<p>\u041f\u043e\u0438\u0441\u043a \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432: \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u044d\u0442\u043e\u0439 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u0438\u0449\u0443\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b.<\/p>\n<\/li>\n<\/ul>\n<div>\n<div class=\"table\">\n<table>\n<tbody>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"center\"><strong>\u0433\u0440\u0443\u043f\u043f\u0430.\u2116<\/strong><\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"center\"><strong>\u0418\u043c\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430<\/strong><\/p>\n<\/td>\n<td>\n<p align=\"center\"><strong>Required<\/strong><\/p>\n<\/td>\n<td>\n<p align=\"center\"><strong>\u041a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439<\/strong><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.1<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">alpineOSAnalyzer <\/p>\n<\/td>\n<td>\n<p>\/etc\/alpine-release<\/p>\n<\/td>\n<td rowspan=\"13\">\n<p align=\"left\">\u041f\u0430\u0440\u0441\u0438\u0442 \u0432\u0435\u0440\u0441\u0438\u044e \u041e\u0421 \u0438\u0437 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0444\u0430\u0439\u043b\u0430<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.2<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">amazonLinuxOSAnalyzer<\/p>\n<\/td>\n<td>\n<p>etc\/system-release, usr\/lib\/system-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.3<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">debianOSAnalyzer<\/p>\n<\/td>\n<td>\n<p>etc\/debian_version<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.4<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">marinerOSAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">etc\/mariner-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.5<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">almaOSAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">etc\/almalinux-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.6<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">centOSAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">etc\/centos-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.7<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">fedoraOSAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">etc\/fedora-release, usr\/lib\/fedora-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.8<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">oracleOSAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">usr\/lib\/fedora-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.9<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">redhatOSAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">etc\/redhat-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.10<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">rockyOSAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">etc\/rocky-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.11<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">osReleaseAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">etc\/os-release,<br \/> usr\/lib\/os-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.12<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">ubuntuESMAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">var\/lib\/ubuntu-advantage\/status.json<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.13<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">ubuntuOSAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">etc\/lsb-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">2.1<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">packagesPropsAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">HasSuffix(packages.props)<\/p>\n<\/td>\n<td>\n<p align=\"left\">\u041f\u0430\u0440\u0441\u0438\u0442 \u0444\u0430\u0439\u043b <strong>packages.props<\/strong>, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445 .NET \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">2.2<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">depsLibraryAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">HasSuffix(.deps.json)<\/p>\n<\/td>\n<td>\n<p align=\"left\">\u041f\u0430\u0440\u0441\u0438\u0442 \u0444\u0430\u0439\u043b \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 .NET, \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044f \u0438\u0437 \u043d\u0435\u0433\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 \u0438 \u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445.<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">2.3<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">nodePkgLibraryAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">package.json<\/p>\n<\/td>\n<td>\n<p align=\"left\">\u041f\u0430\u0440\u0441\u0438\u0442 \u0444\u0430\u0439\u043b \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 JS\/TS, \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044f \u0438\u0437 \u043d\u0435\u0433\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 \u0438 \u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445.<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">2.4<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">gemspecLibraryAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">Regex(.*\/specifications\/.+\\\\.gemspec) <\/p>\n<\/td>\n<td>\n<p align=\"left\">\u041f\u0430\u0440\u0441\u0438\u0442 \u0444\u0430\u0439\u043b <strong>.gemspec<\/strong>, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0438 \u0438\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445 Ruby. <\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">2.5<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">metaAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">Regex(`.*\/envs\/.+\/conda-meta\/.+-.+-.+\\.json) <\/p>\n<\/td>\n<td>\n<p align=\"left\">\u041f\u0430\u0440\u0441\u0438\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 \u0432\u0438\u0434\u0430 <strong>&lt;conda-root>\/envs\/&lt;env>\/conda-meta\/&lt;package>.json<\/strong>, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 Conda-\u043f\u0430\u043a\u0435\u0442\u0430\u0445. <\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">2.6<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">gobinaryLibraryAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">IsExecutable<\/p>\n<\/td>\n<td>\n<p align=\"left\">\u041f\u0430\u0440\u0441\u0438\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 Go-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435. <\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">2.7<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">rustBinaryLibraryAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">IsExecutable<\/p>\n<\/td>\n<td>\n<p align=\"left\">\u041f\u0430\u0440\u0441\u0438\u0442 Rust-\u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u0445.<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">3.1<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">contentManifestAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">root\/buildinfo\/content_manifests\/ &amp; .json<\/p>\n<\/td>\n<td>\n<p align=\"left\">\u0412 Red Hat \u0435\u0441\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043c\u0430\u043d\u0438\u0444\u0435\u0441\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0430\u043a\u0435\u0442\u0430\u0445, \u0438\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430\u0445, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Red Hat. <br \/> \u0418\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u0438 \u0444\u0430\u0439\u043b\u044b \u0438 \u043f\u0430\u0440\u0441\u044f\u0442\u0441\u044f \u0437\u0434\u0435\u0441\u044c.<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">3.2<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">dockerfileAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">root\/buildinfo\/ &amp; HasPefix(Dockerfile)<\/p>\n<\/td>\n<td>\n<p align=\"left\">\u041f\u0430\u0440\u0441\u0438\u0442 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u0440\u0435\u0434\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 \u0438\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">4.1<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">rpmPkgAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">usr\/lib\/sysimage\/rpm\/Packages,<br \/>var\/lib\/rpm\/Packages,<br \/>usr\/lib\/sysimage\/rpm\/Packages.db,<br \/>var\/lib\/rpm\/Packages.db,<br \/>usr\/lib\/sysimage\/rpm\/rpmdb.sqlite,<br \/>var\/lib\/rpm\/rpmdb.sqlite<\/p>\n<\/td>\n<td>\n<p align=\"left\">\u042d\u0442\u0438 \u0444\u0430\u0439\u043b\u044b \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u043c\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 Linux \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">4.2<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">rpmqaPkgAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">var\/lib\/rpmmanifest\/container-manifest-2<\/p>\n<\/td>\n<td>\n<p align=\"left\">\u0424\u0430\u0439\u043b <strong>container-manifest-2<\/strong> \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 <strong>var\/lib\/rpmmanifest\/<\/strong> \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u0430\u043d\u0438\u0444\u0435\u0441\u0442 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0441 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u0430.<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">4.3<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">alpinePkgAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">lib\/apk\/db\/installed<\/p>\n<\/td>\n<td>\n<p align=\"left\">\u0424\u0430\u0439\u043b <strong>installed<\/strong> \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 <strong>lib\/apk\/db\/<\/strong> \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 Alpine Linux.<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">4.4<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">dpkgAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">var\/lib\/dpkg\/status<br \/> var\/lib\/dpkg\/status.d\/<br \/> ivar\/lib\/dpkg\/info\/<br \/> var\/lib\/dpkg\/available<\/p>\n<\/td>\n<td>\n<p align=\"left\">\u041f\u0430\u0440\u0441\u0438\u043d\u0433\u0430 \u0442\u043e\u043b\u044c\u043a\u043e dkpg \u0444\u0430\u0439\u043b\u0430 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0434\u0430\u0436\u0435 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 apt, \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u043e\u0434 \u0441\u043e\u0431\u043e\u0439 dpkg.\u00a0<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">5.1<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">sbomAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">.spdx<br \/> .spdx.json<br \/> .cdx<br \/> .cdx.json<\/p>\n<\/td>\n<td>\n<p align=\"left\">\u041f\u0430\u0440\u0441\u0438\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u0437 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 SBOM \u0444\u0430\u0439\u043b\u043e\u0432<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">5.2<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">SecretAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">\n<\/td>\n<td>\n<p align=\"left\">\u0418\u0449\u0435\u0442 \u0441\u0435\u043a\u0440\u0435\u0442\u044b<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<p><strong>\u041f\u043e\u043f\u044b\u0442\u043a\u0438 \u043e\u0431\u043c\u0430\u043d\u0443\u0442\u044c Trivy<\/strong><\/p>\n<p>\u0422\u0435\u043f\u0435\u0440\u044c, \u043a\u043e\u0433\u0434\u0430 \u043c\u044b \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c, \u043a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b, \u043c\u043e\u0436\u043d\u043e \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u0441\u043b\u0430\u0431\u0438\u0442\u044c\u0441\u044f \u0438 \u043d\u0435 \u0442\u043e\u0440\u043e\u043f\u0438\u0442\u044c\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0432 \u043e\u0431\u0440\u0430\u0437\u0430\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043f\u0440\u0438\u0447\u0435\u043c \u0442\u0430\u043a, \u0447\u0442\u043e\u0431\u044b \u043a\u043e\u043b\u043b\u0435\u0433\u0438 \u0438\u0437 \u043e\u0442\u0434\u0435\u043b\u0430 \u0418\u0411 \u043d\u0435 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u0438 \u0441 \u0437\u0430\u043c\u0435\u0447\u0430\u043d\u0438\u044f\u043c\u0438.\u00a0<\/p>\n<p>\u0414\u0430\u0432\u0430\u0439\u0442\u0435 \u0441\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u043e\u0431\u0440\u0430\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 Alpine \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u0432 \u043d\u0435\u0433\u043e curl. \u0414\u043b\u044f \u0442\u043e\u0433\u043e \u0447\u0442\u043e\u0431\u044b \u0441\u043a\u0440\u044b\u0442\u044c \u0434\u043b\u044f Trivy \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 curl \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435, \u0443\u0434\u0430\u043b\u0438\u043c \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 ~\/lib\/apk\/db\/installed \u0437\u0430\u043f\u0438\u0441\u0438 \u043e \u043f\u0430\u043a\u0435\u0442\u0435. \u042d\u0442\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043d\u0435 \u043f\u043e\u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0443\u0442\u0438\u043b\u0438\u0442\u044b.<\/p>\n<pre><code class=\"bash\">FROM alpine:latest RUN apk update &amp;&amp; apk add curl &amp;&amp; sed -i -e  '\/P:libcurl\/,+18d' lib\/apk\/db\/installed &amp;&amp; sed -i -e  '\/P:curl\/,+18d' lib\/apk\/db\/installed &amp;&amp; sed -i -e '\/R:libcurl\/,+3d' lib\/apk\/db\/installed<\/code><\/pre>\n<pre><code class=\"bash\">docker build -t simple . trivy image --format cyclonedx --output simple.json simple<\/code><\/pre>\n<p>\u0412 \u0438\u0442\u043e\u0433\u0435 \u0432 SBOM \u0444\u0430\u0439\u043b\u0435 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435 \u043e \u043f\u0430\u043a\u0435\u0442\u0435 curl. \u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438 \u043a apk\/dpkg, \u0433\u0434\u0435 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0443\u0436\u043d\u043e \u0431\u0443\u0434\u0435\u0442 \u0444\u0430\u0439\u043b\u044b \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 var\/lib\/dpkg\/.<\/p>\n<details class=\"spoiler\">\n<summary>\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442: simple.json<\/summary>\n<div class=\"spoiler__content\">\n<pre><code class=\"json\">{   \"$schema\": \"http:\/\/cyclonedx.org\/schema\/bom-1.5.schema.json\",   \"bomFormat\": \"CycloneDX\",   \"specVersion\": \"1.5\",   \"serialNumber\": \"urn:uuid:5701312e-e2be-4cc5-b8fb-0d2c84ade435\",   \"version\": 1,   \"metadata\": {     \"timestamp\": \"2024-06-18T11:58:03+00:00\",     \"tools\": {       \"components\": [         {           \"type\": \"application\",           \"group\": \"aquasecurity\",           \"name\": \"trivy\",           \"version\": \"0.52.0\"         }       ]     },     \"component\": {       \"bom-ref\": \"f454a1e2-78e9-4b06-8d4c-aa57e771d29a\",       \"type\": \"container\",       \"name\": \"simple\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:DiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:DiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:ImageID\",           \"value\": \"sha256:2863ace3f03ff8dffe0938aaae013100f154963ecffc66906a2b46e2283b5cb7\"         },         {           \"name\": \"aquasecurity:trivy:RepoTag\",           \"value\": \"simple:latest\"         },         {           \"name\": \"aquasecurity:trivy:SchemaVersion\",           \"value\": \"2\"         }       ]     }   },   \"components\": [     {       \"bom-ref\": \"be0c2be1-a5ca-4c09-af16-e605edbeccbb\",       \"type\": \"operating-system\",       \"name\": \"alpine\",       \"version\": \"3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:Class\",           \"value\": \"os-pkgs\"         },         {           \"name\": \"aquasecurity:trivy:Type\",           \"value\": \"alpine\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/alpine-baselayout-data@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"alpine-baselayout-data\",       \"version\": \"3.6.5-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"ee68a6fb02f7e62304b428b0404a2fc1e2fc353d\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/alpine-baselayout-data@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"alpine-baselayout-data@3.6.5-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"alpine-baselayout\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"3.6.5-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/alpine-baselayout@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"alpine-baselayout\",       \"version\": \"3.6.5-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"a8a719fa3db7c6cb005e681086438ef1d1e76d6c\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/alpine-baselayout@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"alpine-baselayout@3.6.5-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"alpine-baselayout\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"3.6.5-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/alpine-keys@2.4-r1?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"alpine-keys\",       \"version\": \"2.4-r1\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"78ab5150a3919e474204e0f91972d1cf0a344f9d\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/alpine-keys@2.4-r1?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"alpine-keys@2.4-r1\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"alpine-keys\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"2.4-r1\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/apk-tools@2.14.4-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"apk-tools\",       \"version\": \"2.14.4-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"a8c5ec2451b123ac57e39b0cb6ceccdaf26d5099\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/apk-tools@2.14.4-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"apk-tools@2.14.4-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"apk-tools\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"2.14.4-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/brotli-libs@1.1.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"brotli-libs\",       \"version\": \"1.1.0-r2\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"bc58ba1128a8703ca7ab3d7097a07bf095d9ddcd\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/brotli-libs@1.1.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"brotli-libs@1.1.0-r2\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"brotli\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.1.0-r2\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"busybox-binsh\",       \"version\": \"1.36.1-r28\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"bcc87860f989f46a653262a6c76c9e86a0f6d549\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"busybox-binsh@1.36.1-r28\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"busybox\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.36.1-r28\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/busybox@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"busybox\",       \"version\": \"1.36.1-r28\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"0676c3ae99458f235efcd3a8842d3371636e7cbe\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/busybox@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"busybox@1.36.1-r28\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"busybox\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.36.1-r28\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/c-ares@1.28.1-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"c-ares\",       \"version\": \"1.28.1-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"a128e26b902d098af3e7987ffa97c879916b9a0d\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/c-ares@1.28.1-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"c-ares@1.28.1-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"c-ares\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.28.1-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/ca-certificates-bundle@20240226-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"ca-certificates-bundle\",       \"version\": \"20240226-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"118470356e088a64f194c32a95a24fb5afa0b867\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MPL-2.0\"           }         },         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/ca-certificates-bundle@20240226-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"ca-certificates-bundle@20240226-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"ca-certificates\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"20240226-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/ca-certificates@20240226-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"ca-certificates\",       \"version\": \"20240226-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"d2b7d55933c597e43a51ce1e9d42aa1c245003a0\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MPL-2.0\"           }         },         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/ca-certificates@20240226-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"ca-certificates@20240226-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"ca-certificates\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"20240226-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"libcrypto3\",       \"version\": \"3.3.0-r2\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"69627477e98ac11d7a2250683f55c9f0eebe1cee\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"Apache-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"libcrypto3@3.3.0-r2\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"openssl\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"3.3.0-r2\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/libidn2@2.3.7-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"libidn2\",       \"version\": \"2.3.7-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"02629e610eec8b3f8fc422bec27b3b2359d5c962\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         },         {           \"license\": {             \"name\": \"LGPL-3.0-or-later\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/libidn2@2.3.7-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"libidn2@2.3.7-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"libidn2\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"2.3.7-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/libpsl@0.21.5-r1?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"libpsl\",       \"version\": \"0.21.5-r1\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"1f1e660c761dadb2614c0f573ea6ef2be8649206\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/libpsl@0.21.5-r1?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"libpsl@0.21.5-r1\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"libpsl\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"0.21.5-r1\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"libssl3\",       \"version\": \"3.3.0-r2\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"612adac6b965a4920b7456374bf1ec34383901ff\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"Apache-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"libssl3@3.3.0-r2\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"openssl\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"3.3.0-r2\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/libunistring@1.2-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"libunistring\",       \"version\": \"1.2-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"1ff86ed40752102a6c84ece085ae89ac88c74c5a\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         },         {           \"license\": {             \"name\": \"LGPL-3.0-or-later\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/libunistring@1.2-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"libunistring@1.2-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"libunistring\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.2-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/musl-utils@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"musl-utils\",       \"version\": \"1.2.5-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"e11671e426dc2d8189155906d007c39be1eb1367\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         },         {           \"license\": {             \"name\": \"BSD-2-Clause\"           }         },         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/musl-utils@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"musl-utils@1.2.5-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"musl\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.2.5-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"musl\",       \"version\": \"1.2.5-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"3d2da235e1c31f7045e9382a48cbbfa5c7375c86\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"musl@1.2.5-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"musl\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.2.5-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/nghttp2-libs@1.62.0-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"nghttp2-libs\",       \"version\": \"1.62.0-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"31d24a354dec6ffaf8c483ed77e07ce5cb17c53d\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/nghttp2-libs@1.62.0-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"nghttp2-libs@1.62.0-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"nghttp2\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.62.0-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/scanelf@1.3.7-r2?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"scanelf\",       \"version\": \"1.3.7-r2\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"c84b0b49111485cb08744822f9b34a9fa9524fcc\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/scanelf@1.3.7-r2?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"scanelf@1.3.7-r2\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"pax-utils\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.3.7-r2\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/ssl_client@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"ssl_client\",       \"version\": \"1.36.1-r28\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"5dd848dcb8ac48034bf64586a45daa0ae84d8509\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/ssl_client@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"ssl_client@1.36.1-r28\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"busybox\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.36.1-r28\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/zlib@1.3.1-r1?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"zlib\",       \"version\": \"1.3.1-r1\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"9ba6f253e2982e0e6e71cb4187e3d6b6c4bbae99\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"Zlib\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/zlib@1.3.1-r1?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"zlib@1.3.1-r1\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"zlib\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.3.1-r1\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/zstd-libs@1.5.6-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"zstd-libs\",       \"version\": \"1.5.6-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"4d60614645192deddc80e6e568fe535b38c315c1\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"BSD-3-Clause\"           }         },         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/zstd-libs@1.5.6-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"zstd-libs@1.5.6-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"zstd\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.5.6-r0\"         }       ]     }   ],   \"dependencies\": [     {       \"ref\": \"be0c2be1-a5ca-4c09-af16-e605edbeccbb\",       \"dependsOn\": [         \"pkg:apk\/alpine\/alpine-baselayout-data@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/alpine-baselayout@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/alpine-keys@2.4-r1?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/apk-tools@2.14.4-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/brotli-libs@1.1.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/busybox@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/c-ares@1.28.1-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/ca-certificates-bundle@20240226-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/ca-certificates@20240226-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libidn2@2.3.7-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libpsl@0.21.5-r1?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libunistring@1.2-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl-utils@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/nghttp2-libs@1.62.0-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/scanelf@1.3.7-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/ssl_client@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/zlib@1.3.1-r1?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/zstd-libs@1.5.6-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"f454a1e2-78e9-4b06-8d4c-aa57e771d29a\",       \"dependsOn\": [         \"be0c2be1-a5ca-4c09-af16-e605edbeccbb\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/alpine-baselayout-data@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": []     },     {       \"ref\": \"pkg:apk\/alpine\/alpine-baselayout@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/alpine-baselayout-data@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/alpine-keys@2.4-r1?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": []     },     {       \"ref\": \"pkg:apk\/alpine\/apk-tools@2.14.4-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/ca-certificates-bundle@20240226-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/zlib@1.3.1-r1?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/brotli-libs@1.1.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/busybox@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/busybox@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/c-ares@1.28.1-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/ca-certificates-bundle@20240226-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": []     },     {       \"ref\": \"pkg:apk\/alpine\/ca-certificates@20240226-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/libidn2@2.3.7-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/libunistring@1.2-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/libpsl@0.21.5-r1?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/libidn2@2.3.7-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libunistring@1.2-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/libunistring@1.2-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/musl-utils@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/scanelf@1.3.7-r2?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": []     },     {       \"ref\": \"pkg:apk\/alpine\/nghttp2-libs@1.62.0-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/scanelf@1.3.7-r2?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/ssl_client@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/zlib@1.3.1-r1?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/zstd-libs@1.5.6-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     }   ],   \"vulnerabilities\": [] } <\/code><\/pre>\n<\/p>\n<\/div>\n<\/details>\n<p>\u042d\u0442\u043e\u0442 \u0442\u0440\u044e\u043a \u043d\u0435 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442, \u0435\u0441\u043b\u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0444\u043b\u0430\u0433 &#8212;removed-pkgs.<\/p>\n<pre><code class=\"bash\">trivy image --removed-pkgs --format cyclonedx --output with_removed.json simple<\/code><\/pre>\n<details class=\"spoiler\">\n<summary>\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442: with_removed.json<\/summary>\n<div class=\"spoiler__content\">\n<pre><code class=\"json\">{   \"$schema\": \"http:\/\/cyclonedx.org\/schema\/bom-1.5.schema.json\",   \"bomFormat\": \"CycloneDX\",   \"specVersion\": \"1.5\",   \"serialNumber\": \"urn:uuid:90125ba3-fb31-49bf-97de-80a6a9389c18\",   \"version\": 1,   \"metadata\": {     \"timestamp\": \"2024-06-18T11:59:02+00:00\",     \"tools\": {       \"components\": [         {           \"type\": \"application\",           \"group\": \"aquasecurity\",           \"name\": \"trivy\",           \"version\": \"0.52.0\"         }       ]     },     \"component\": {       \"bom-ref\": \"73a39b8d-f318-425b-8b7c-3251ebc40070\",       \"type\": \"container\",       \"name\": \"simple\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:DiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:DiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:ImageID\",           \"value\": \"sha256:2863ace3f03ff8dffe0938aaae013100f154963ecffc66906a2b46e2283b5cb7\"         },         {           \"name\": \"aquasecurity:trivy:RepoTag\",           \"value\": \"simple:latest\"         },         {           \"name\": \"aquasecurity:trivy:SchemaVersion\",           \"value\": \"2\"         }       ]     }   },   \"components\": [     {       \"bom-ref\": \"01a85ab9-e3bc-41de-9e2b-5615863bd6f7\",       \"type\": \"library\",       \"name\": \"libncursesw\",       \"version\": \"6.4_p20240420-r0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         }       ]     },     {       \"bom-ref\": \"07b61b98-6bc7-45e2-aaf2-7d2a8014854e\",       \"type\": \"library\",       \"name\": \"curl\",       \"version\": \"8.7.1-r0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         }       ]     },     {       \"bom-ref\": \"127f253c-a7c4-477a-aeb0-01da3de7b358\",       \"type\": \"library\",       \"name\": \"libcurl\",       \"version\": \"8.7.1-r0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         }       ]     },     {       \"bom-ref\": \"31a6c493-18f2-457b-a667-945caf72e406\",       \"type\": \"library\",       \"name\": \"ncurses-terminfo-base\",       \"version\": \"6.4_p20240420-r0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         }       ]     },     {       \"bom-ref\": \"4414c997-ed28-4c5a-a805-fe910a0b4d6f\",       \"type\": \"library\",       \"name\": \"yash-binsh\",       \"version\": \"2.56.1-r1\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         }       ]     },     {       \"bom-ref\": \"767dea9c-a2c1-4740-9474-d1b889c14b3b\",       \"type\": \"library\",       \"name\": \"brotli\",       \"version\": \"1.1.0-r2\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         }       ]     },     {       \"bom-ref\": \"81bd6fa8-43e8-4c19-9786-685344661f9f\",       \"type\": \"library\",       \"name\": \"openssl\",       \"version\": \"3.3.1-r0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         }       ]     },     {       \"bom-ref\": \"8df69276-165e-466b-8c65-2a9c6b76452b\",       \"type\": \"library\",       \"name\": \"ncurses\",       \"version\": \"6.4_p20240420-r0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         }       ]     },     {       \"bom-ref\": \"a22fc604-cb46-430c-807a-4f8c44a89532\",       \"type\": \"library\",       \"name\": \"yash\",       \"version\": \"2.56.1-r1\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         }       ]     },     {       \"bom-ref\": \"a97049e7-3d03-4dc2-b23a-3174b8e493c5\",       \"type\": \"library\",       \"name\": \"zstd\",       \"version\": \"1.5.6-r0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         }       ]     },     {       \"bom-ref\": \"d723cf30-3e35-49f9-b849-9904404fe627\",       \"type\": \"library\",       \"name\": \"nghttp2\",       \"version\": \"1.62.0-r0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         }       ]     },     {       \"bom-ref\": \"daf11902-aea0-477b-8ac7-61d2ca711509\",       \"type\": \"operating-system\",       \"name\": \"alpine\",       \"version\": \"3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:Class\",           \"value\": \"os-pkgs\"         },         {           \"name\": \"aquasecurity:trivy:Type\",           \"value\": \"alpine\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/alpine-baselayout-data@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"alpine-baselayout-data\",       \"version\": \"3.6.5-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"ee68a6fb02f7e62304b428b0404a2fc1e2fc353d\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/alpine-baselayout-data@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"alpine-baselayout-data@3.6.5-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"alpine-baselayout\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"3.6.5-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/alpine-baselayout@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"alpine-baselayout\",       \"version\": \"3.6.5-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"a8a719fa3db7c6cb005e681086438ef1d1e76d6c\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/alpine-baselayout@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"alpine-baselayout@3.6.5-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"alpine-baselayout\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"3.6.5-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/alpine-keys@2.4-r1?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"alpine-keys\",       \"version\": \"2.4-r1\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"78ab5150a3919e474204e0f91972d1cf0a344f9d\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/alpine-keys@2.4-r1?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"alpine-keys@2.4-r1\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"alpine-keys\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"2.4-r1\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/apk-tools@2.14.4-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"apk-tools\",       \"version\": \"2.14.4-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"a8c5ec2451b123ac57e39b0cb6ceccdaf26d5099\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/apk-tools@2.14.4-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"apk-tools@2.14.4-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"apk-tools\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"2.14.4-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/brotli-libs@1.1.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"brotli-libs\",       \"version\": \"1.1.0-r2\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"bc58ba1128a8703ca7ab3d7097a07bf095d9ddcd\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/brotli-libs@1.1.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"brotli-libs@1.1.0-r2\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"brotli\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.1.0-r2\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"busybox-binsh\",       \"version\": \"1.36.1-r28\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"bcc87860f989f46a653262a6c76c9e86a0f6d549\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"busybox-binsh@1.36.1-r28\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"busybox\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.36.1-r28\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/busybox@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"busybox\",       \"version\": \"1.36.1-r28\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"0676c3ae99458f235efcd3a8842d3371636e7cbe\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/busybox@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"busybox@1.36.1-r28\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"busybox\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.36.1-r28\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/c-ares@1.28.1-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"c-ares\",       \"version\": \"1.28.1-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"a128e26b902d098af3e7987ffa97c879916b9a0d\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/c-ares@1.28.1-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"c-ares@1.28.1-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"c-ares\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.28.1-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/ca-certificates-bundle@20240226-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"ca-certificates-bundle\",       \"version\": \"20240226-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"118470356e088a64f194c32a95a24fb5afa0b867\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MPL-2.0\"           }         },         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/ca-certificates-bundle@20240226-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"ca-certificates-bundle@20240226-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"ca-certificates\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"20240226-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/ca-certificates@20240226-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"ca-certificates\",       \"version\": \"20240226-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"d2b7d55933c597e43a51ce1e9d42aa1c245003a0\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MPL-2.0\"           }         },         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/ca-certificates@20240226-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"ca-certificates@20240226-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"ca-certificates\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"20240226-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"libcrypto3\",       \"version\": \"3.3.0-r2\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"69627477e98ac11d7a2250683f55c9f0eebe1cee\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"Apache-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"libcrypto3@3.3.0-r2\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"openssl\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"3.3.0-r2\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/libidn2@2.3.7-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"libidn2\",       \"version\": \"2.3.7-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"02629e610eec8b3f8fc422bec27b3b2359d5c962\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         },         {           \"license\": {             \"name\": \"LGPL-3.0-or-later\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/libidn2@2.3.7-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"libidn2@2.3.7-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"libidn2\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"2.3.7-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/libpsl@0.21.5-r1?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"libpsl\",       \"version\": \"0.21.5-r1\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"1f1e660c761dadb2614c0f573ea6ef2be8649206\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/libpsl@0.21.5-r1?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"libpsl@0.21.5-r1\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"libpsl\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"0.21.5-r1\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"libssl3\",       \"version\": \"3.3.0-r2\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"612adac6b965a4920b7456374bf1ec34383901ff\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"Apache-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"libssl3@3.3.0-r2\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"openssl\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"3.3.0-r2\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/libunistring@1.2-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"libunistring\",       \"version\": \"1.2-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"1ff86ed40752102a6c84ece085ae89ac88c74c5a\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         },         {           \"license\": {             \"name\": \"LGPL-3.0-or-later\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/libunistring@1.2-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"libunistring@1.2-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"libunistring\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.2-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/musl-utils@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"musl-utils\",       \"version\": \"1.2.5-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"e11671e426dc2d8189155906d007c39be1eb1367\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         },         {           \"license\": {             \"name\": \"BSD-2-Clause\"           }         },         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/musl-utils@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"musl-utils@1.2.5-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"musl\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.2.5-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"musl\",       \"version\": \"1.2.5-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"3d2da235e1c31f7045e9382a48cbbfa5c7375c86\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"musl@1.2.5-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"musl\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.2.5-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/nghttp2-libs@1.62.0-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"nghttp2-libs\",       \"version\": \"1.62.0-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"31d24a354dec6ffaf8c483ed77e07ce5cb17c53d\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/nghttp2-libs@1.62.0-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"nghttp2-libs@1.62.0-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"nghttp2\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.62.0-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/scanelf@1.3.7-r2?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"scanelf\",       \"version\": \"1.3.7-r2\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"c84b0b49111485cb08744822f9b34a9fa9524fcc\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/scanelf@1.3.7-r2?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"scanelf@1.3.7-r2\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"pax-utils\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.3.7-r2\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/ssl_client@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"ssl_client\",       \"version\": \"1.36.1-r28\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"5dd848dcb8ac48034bf64586a45daa0ae84d8509\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/ssl_client@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"ssl_client@1.36.1-r28\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"busybox\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.36.1-r28\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/zlib@1.3.1-r1?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"zlib\",       \"version\": \"1.3.1-r1\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"9ba6f253e2982e0e6e71cb4187e3d6b6c4bbae99\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"Zlib\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/zlib@1.3.1-r1?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"zlib@1.3.1-r1\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"zlib\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.3.1-r1\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/zstd-libs@1.5.6-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"zstd-libs\",       \"version\": \"1.5.6-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"4d60614645192deddc80e6e568fe535b38c315c1\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"BSD-3-Clause\"           }         },         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/zstd-libs@1.5.6-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:67b7e246f4700d863a4ea89fc8b4e5ff4b92993e73f672e70ccb45bbcdef87b5\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"zstd-libs@1.5.6-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"zstd\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.5.6-r0\"         }       ]     }   ],   \"dependencies\": [     {       \"ref\": \"01a85ab9-e3bc-41de-9e2b-5615863bd6f7\",       \"dependsOn\": []     },     {       \"ref\": \"07b61b98-6bc7-45e2-aaf2-7d2a8014854e\",       \"dependsOn\": []     },     {       \"ref\": \"127f253c-a7c4-477a-aeb0-01da3de7b358\",       \"dependsOn\": []     },     {       \"ref\": \"31a6c493-18f2-457b-a667-945caf72e406\",       \"dependsOn\": []     },     {       \"ref\": \"4414c997-ed28-4c5a-a805-fe910a0b4d6f\",       \"dependsOn\": []     },     {       \"ref\": \"73a39b8d-f318-425b-8b7c-3251ebc40070\",       \"dependsOn\": [         \"daf11902-aea0-477b-8ac7-61d2ca711509\"       ]     },     {       \"ref\": \"767dea9c-a2c1-4740-9474-d1b889c14b3b\",       \"dependsOn\": []     },     {       \"ref\": \"81bd6fa8-43e8-4c19-9786-685344661f9f\",       \"dependsOn\": []     },     {       \"ref\": \"8df69276-165e-466b-8c65-2a9c6b76452b\",       \"dependsOn\": []     },     {       \"ref\": \"a22fc604-cb46-430c-807a-4f8c44a89532\",       \"dependsOn\": []     },     {       \"ref\": \"a97049e7-3d03-4dc2-b23a-3174b8e493c5\",       \"dependsOn\": []     },     {       \"ref\": \"d723cf30-3e35-49f9-b849-9904404fe627\",       \"dependsOn\": []     },     {       \"ref\": \"daf11902-aea0-477b-8ac7-61d2ca711509\",       \"dependsOn\": [         \"01a85ab9-e3bc-41de-9e2b-5615863bd6f7\",         \"07b61b98-6bc7-45e2-aaf2-7d2a8014854e\",         \"127f253c-a7c4-477a-aeb0-01da3de7b358\",         \"31a6c493-18f2-457b-a667-945caf72e406\",         \"4414c997-ed28-4c5a-a805-fe910a0b4d6f\",         \"767dea9c-a2c1-4740-9474-d1b889c14b3b\",         \"81bd6fa8-43e8-4c19-9786-685344661f9f\",         \"8df69276-165e-466b-8c65-2a9c6b76452b\",         \"a22fc604-cb46-430c-807a-4f8c44a89532\",         \"a97049e7-3d03-4dc2-b23a-3174b8e493c5\",         \"d723cf30-3e35-49f9-b849-9904404fe627\",         \"pkg:apk\/alpine\/alpine-baselayout-data@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/alpine-baselayout@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/alpine-keys@2.4-r1?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/apk-tools@2.14.4-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/brotli-libs@1.1.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/busybox@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/c-ares@1.28.1-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/ca-certificates-bundle@20240226-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/ca-certificates@20240226-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libidn2@2.3.7-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libpsl@0.21.5-r1?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libunistring@1.2-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl-utils@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/nghttp2-libs@1.62.0-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/scanelf@1.3.7-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/ssl_client@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/zlib@1.3.1-r1?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/zstd-libs@1.5.6-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/alpine-baselayout-data@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": []     },     {       \"ref\": \"pkg:apk\/alpine\/alpine-baselayout@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/alpine-baselayout-data@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/alpine-keys@2.4-r1?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": []     },     {       \"ref\": \"pkg:apk\/alpine\/apk-tools@2.14.4-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/ca-certificates-bundle@20240226-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/zlib@1.3.1-r1?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/brotli-libs@1.1.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/busybox@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/busybox@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/c-ares@1.28.1-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/ca-certificates-bundle@20240226-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": []     },     {       \"ref\": \"pkg:apk\/alpine\/ca-certificates@20240226-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/libidn2@2.3.7-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/libunistring@1.2-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/libpsl@0.21.5-r1?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/libidn2@2.3.7-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libunistring@1.2-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/libunistring@1.2-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/musl-utils@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/scanelf@1.3.7-r2?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": []     },     {       \"ref\": \"pkg:apk\/alpine\/nghttp2-libs@1.62.0-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/scanelf@1.3.7-r2?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/ssl_client@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/zlib@1.3.1-r1?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/zstd-libs@1.5.6-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     }   ],   \"vulnerabilities\": [] } <\/code><\/pre>\n<\/p>\n<\/div>\n<\/details>\n<p>\u0412\u043d\u0435\u0441\u0451\u043c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 Dockerfile.<\/p>\n<pre><code class=\"bash\">FROM alpine:latest RUN pkg=curl &amp;&amp; apk update &amp;&amp; apk add $(pkg) &amp;&amp; sed -i -e  '\/P:libcurl\/,+18d' lib\/apk\/db\/installed &amp;&amp; sed -i -e  '\/P:curl\/,+18d' lib\/apk\/db\/installed &amp;&amp; sed -i -e '\/R:libcurl\/,+3d' lib\/apk\/db\/installed<\/code><\/pre>\n<pre><code class=\"bash\">docker build -t hidden . trivy image --removed-pkgs --format cyclonedx --output hidden.json hidden<\/code><\/pre>\n<p>\u0412 SBOM-\u0444\u0430\u0439\u043b\u0435 \u0441\u043d\u043e\u0432\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435 \u043e \u043f\u0430\u043a\u0435\u0442\u0435 curl.<\/p>\n<details class=\"spoiler\">\n<summary>\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442: hidden.json<\/summary>\n<div class=\"spoiler__content\">\n<pre><code class=\"json\">{   \"$schema\": \"http:\/\/cyclonedx.org\/schema\/bom-1.5.schema.json\",   \"bomFormat\": \"CycloneDX\",   \"specVersion\": \"1.5\",   \"serialNumber\": \"urn:uuid:135788ad-e4d0-4e24-b2cf-c3dc537345ea\",   \"version\": 1,   \"metadata\": {     \"timestamp\": \"2024-06-18T12:00:20+00:00\",     \"tools\": {       \"components\": [         {           \"type\": \"application\",           \"group\": \"aquasecurity\",           \"name\": \"trivy\",           \"version\": \"0.52.0\"         }       ]     },     \"component\": {       \"bom-ref\": \"a4731535-6673-41f7-8da9-04cccc724a5c\",       \"type\": \"container\",       \"name\": \"hidden\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:DiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:DiffID\",           \"value\": \"sha256:abc7cdb293178101d251284bb3dfb2c5d070a3b26162305dccab848e54330779\"         },         {           \"name\": \"aquasecurity:trivy:ImageID\",           \"value\": \"sha256:b09a69b41c302e4a5d417cbcca672af19ffd6bb9ba8a39519851d44685c2a36a\"         },         {           \"name\": \"aquasecurity:trivy:RepoTag\",           \"value\": \"hidden:latest\"         },         {           \"name\": \"aquasecurity:trivy:SchemaVersion\",           \"value\": \"2\"         }       ]     }   },   \"components\": [     {       \"bom-ref\": \"fc62c8ca-130f-47d1-9e92-bf004f47df33\",       \"type\": \"operating-system\",       \"name\": \"alpine\",       \"version\": \"3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:Class\",           \"value\": \"os-pkgs\"         },         {           \"name\": \"aquasecurity:trivy:Type\",           \"value\": \"alpine\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/alpine-baselayout-data@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"alpine-baselayout-data\",       \"version\": \"3.6.5-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"ee68a6fb02f7e62304b428b0404a2fc1e2fc353d\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/alpine-baselayout-data@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"alpine-baselayout-data@3.6.5-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"alpine-baselayout\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"3.6.5-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/alpine-baselayout@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"alpine-baselayout\",       \"version\": \"3.6.5-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"a8a719fa3db7c6cb005e681086438ef1d1e76d6c\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/alpine-baselayout@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"alpine-baselayout@3.6.5-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"alpine-baselayout\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"3.6.5-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/alpine-keys@2.4-r1?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"alpine-keys\",       \"version\": \"2.4-r1\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"78ab5150a3919e474204e0f91972d1cf0a344f9d\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/alpine-keys@2.4-r1?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"alpine-keys@2.4-r1\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"alpine-keys\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"2.4-r1\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/apk-tools@2.14.4-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"apk-tools\",       \"version\": \"2.14.4-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"a8c5ec2451b123ac57e39b0cb6ceccdaf26d5099\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/apk-tools@2.14.4-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"apk-tools@2.14.4-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"apk-tools\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"2.14.4-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"busybox-binsh\",       \"version\": \"1.36.1-r28\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"bcc87860f989f46a653262a6c76c9e86a0f6d549\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"busybox-binsh@1.36.1-r28\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"busybox\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.36.1-r28\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/busybox@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"busybox\",       \"version\": \"1.36.1-r28\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"0676c3ae99458f235efcd3a8842d3371636e7cbe\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/busybox@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"busybox@1.36.1-r28\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"busybox\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.36.1-r28\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/ca-certificates-bundle@20240226-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"ca-certificates-bundle\",       \"version\": \"20240226-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"118470356e088a64f194c32a95a24fb5afa0b867\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MPL-2.0\"           }         },         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/ca-certificates-bundle@20240226-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"ca-certificates-bundle@20240226-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"ca-certificates\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"20240226-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"libcrypto3\",       \"version\": \"3.3.0-r2\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"69627477e98ac11d7a2250683f55c9f0eebe1cee\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"Apache-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"libcrypto3@3.3.0-r2\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"openssl\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"3.3.0-r2\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"libssl3\",       \"version\": \"3.3.0-r2\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"612adac6b965a4920b7456374bf1ec34383901ff\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"Apache-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"libssl3@3.3.0-r2\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"openssl\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"3.3.0-r2\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/musl-utils@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"musl-utils\",       \"version\": \"1.2.5-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"e11671e426dc2d8189155906d007c39be1eb1367\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         },         {           \"license\": {             \"name\": \"BSD-2-Clause\"           }         },         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/musl-utils@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"musl-utils@1.2.5-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"musl\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.2.5-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"musl\",       \"version\": \"1.2.5-r0\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"3d2da235e1c31f7045e9382a48cbbfa5c7375c86\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"MIT\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"musl@1.2.5-r0\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"musl\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.2.5-r0\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/scanelf@1.3.7-r2?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"scanelf\",       \"version\": \"1.3.7-r2\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"c84b0b49111485cb08744822f9b34a9fa9524fcc\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/scanelf@1.3.7-r2?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"scanelf@1.3.7-r2\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"pax-utils\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.3.7-r2\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/ssl_client@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"ssl_client\",       \"version\": \"1.36.1-r28\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"5dd848dcb8ac48034bf64586a45daa0ae84d8509\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"GPL-2.0\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/ssl_client@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"ssl_client@1.36.1-r28\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"busybox\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.36.1-r28\"         }       ]     },     {       \"bom-ref\": \"pkg:apk\/alpine\/zlib@1.3.1-r1?arch=x86_64&amp;distro=3.20.0\",       \"type\": \"library\",       \"name\": \"zlib\",       \"version\": \"1.3.1-r1\",       \"hashes\": [         {           \"alg\": \"SHA-1\",           \"content\": \"9ba6f253e2982e0e6e71cb4187e3d6b6c4bbae99\"         }       ],       \"licenses\": [         {           \"license\": {             \"name\": \"Zlib\"           }         }       ],       \"purl\": \"pkg:apk\/alpine\/zlib@1.3.1-r1?arch=x86_64&amp;distro=3.20.0\",       \"properties\": [         {           \"name\": \"aquasecurity:trivy:LayerDiffID\",           \"value\": \"sha256:02f2bcb26af5ea6d185dcf509dc795746d907ae10c53918b6944ac85447a0c72\"         },         {           \"name\": \"aquasecurity:trivy:PkgID\",           \"value\": \"zlib@1.3.1-r1\"         },         {           \"name\": \"aquasecurity:trivy:PkgType\",           \"value\": \"alpine\"         },         {           \"name\": \"aquasecurity:trivy:SrcName\",           \"value\": \"zlib\"         },         {           \"name\": \"aquasecurity:trivy:SrcVersion\",           \"value\": \"1.3.1-r1\"         }       ]     }   ],   \"dependencies\": [     {       \"ref\": \"a4731535-6673-41f7-8da9-04cccc724a5c\",       \"dependsOn\": [         \"fc62c8ca-130f-47d1-9e92-bf004f47df33\"       ]     },     {       \"ref\": \"fc62c8ca-130f-47d1-9e92-bf004f47df33\",       \"dependsOn\": [         \"pkg:apk\/alpine\/alpine-baselayout-data@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/alpine-baselayout@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/alpine-keys@2.4-r1?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/apk-tools@2.14.4-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/busybox@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/ca-certificates-bundle@20240226-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl-utils@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/scanelf@1.3.7-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/ssl_client@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/zlib@1.3.1-r1?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/alpine-baselayout-data@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": []     },     {       \"ref\": \"pkg:apk\/alpine\/alpine-baselayout@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/alpine-baselayout-data@3.6.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/alpine-keys@2.4-r1?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": []     },     {       \"ref\": \"pkg:apk\/alpine\/apk-tools@2.14.4-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/ca-certificates-bundle@20240226-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/zlib@1.3.1-r1?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/busybox-binsh@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/busybox@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/busybox@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/ca-certificates-bundle@20240226-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": []     },     {       \"ref\": \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/musl-utils@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/scanelf@1.3.7-r2?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": []     },     {       \"ref\": \"pkg:apk\/alpine\/scanelf@1.3.7-r2?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/ssl_client@1.36.1-r28?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/libcrypto3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/libssl3@3.3.0-r2?arch=x86_64&amp;distro=3.20.0\",         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     },     {       \"ref\": \"pkg:apk\/alpine\/zlib@1.3.1-r1?arch=x86_64&amp;distro=3.20.0\",       \"dependsOn\": [         \"pkg:apk\/alpine\/musl@1.2.5-r0?arch=x86_64&amp;distro=3.20.0\"       ]     }   ],   \"vulnerabilities\": [] } <\/code><\/pre>\n<\/p>\n<\/div>\n<\/details>\n<p>\u042d\u0442\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u044b, \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434, \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u044b\u0435, \u043d\u043e \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0441\u043b\u0443\u0436\u0438\u0442\u044c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0432\u0434\u043e\u0445\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0441 \u043d\u0435\u0434\u043e\u0431\u0440\u044b\u043c\u0438 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u044f\u043c\u0438.<\/p>\n<h3>\u041f\u043e\u0441\u043b\u0435\u0441\u043b\u043e\u0432\u0438\u0435<\/h3>\n<p>\u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u043f\u043e\u0441\u0442\u0430\u0440\u0430\u043b\u0438\u0441\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0432\u0437\u0433\u043b\u044f\u0434 \u043d\u0430 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 Trivy. \u0422\u0435\u043f\u0435\u0440\u044c \u043c\u044b \u0437\u043d\u0430\u0435\u043c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e, \u043a\u0430\u043a \u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c, \u043d\u043e \u0438 \u043a\u0430\u043a \u043e\u043d \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442 \u00ab\u043f\u043e\u0434 \u043a\u0430\u043f\u043e\u0442\u043e\u043c\u00bb. \u041f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0442\u0430\u043a \u0436\u0435 \u0432\u0430\u0436\u043d\u043e, \u043a\u0430\u043a \u0438 \u0443\u043c\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442.\u00a0<\/p>\n<p>\u041d\u0430\u043f\u0438\u0448\u0438\u0442\u0435 \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u0445 \u043a \u0441\u0442\u0430\u0442\u044c\u0435, \u0437\u043d\u0430\u043b\u0438 \u043b\u0438 \u0432\u044b \u043e \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u043e\u0431\u0445\u043e\u0434\u0430 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0435 \u043b\u0438 \u0438\u0445 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 \u043c\u0430\u043d\u0438\u0444\u0435\u0441\u0442\u043e\u0432 \u0434\u043e\u043a\u0435\u0440 \u043e\u0431\u0440\u0430\u0437\u043e\u0432. \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0435, \u0442\u043e \u043a\u0430\u043a? <\/p>\n<\/p>\n<\/div>\n<\/div>\n<\/div>\n<p><!----><!----><\/div>\n<p><!----><!----><br \/> \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438 <a href=\"https:\/\/habr.com\/ru\/articles\/822705\/\"> https:\/\/habr.com\/ru\/articles\/822705\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<div><!--[--><!--]--><\/div>\n<div id=\"post-content-body\">\n<div>\n<div class=\"article-formatted-body article-formatted-body article-formatted-body_version-2\">\n<div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\">\n<p>\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440!\u00a0<\/p>\n<p>\u042d\u0442\u043e \u0447\u0442\u043e, \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u0441\u0442\u0430\u0442\u044c\u044f \u043e Trivy? \u041a\u0430\u0436\u0435\u0442\u0441\u044f, \u0431\u0443\u0434\u0442\u043e \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u043e\u0432\u043e\u0433\u043e \u0443\u0436\u0435 \u043e\u0431 \u044d\u0442\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043d\u0435\u043b\u044c\u0437\u044f, \u0430 \u0441\u0430\u043c \u0441\u043a\u0430\u043d\u0435\u0440 \u0432\u043d\u0435\u0434\u0440\u0435\u043d \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u0434\u0430\u0436\u0435 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0437\u0440\u0435\u043b\u043e\u0441\u0442\u0438 \u0418\u0411. \u041d\u043e \u043c\u044b \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0441\u0442\u0430\u0442\u0435\u0439 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043f\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e. \u0410 \u0432\u043e\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043b\u043e\u0433\u0438\u043a\u0438 \u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0430\u043c \u043d\u0430\u0439\u0442\u0438 \u0442\u0430\u043a \u0438 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c.<\/p>\n<p>\u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044b \u043c\u043e\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435 \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0430 <a href=\"https:\/\/aquasecurity.github.io\/trivy\/v0.51\/docs\/coverage\/\">\u201cCoverage\u201d<\/a> \u0438\u0437 <a href=\"https:\/\/aquasecurity.github.io\/trivy\/v0.51\/\">\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0441\u043a\u0430\u043d\u0435\u0440\u0430<\/a>. \u042d\u0442\u043e \u043d\u0430\u0432\u043e\u0434\u0438\u0442 \u043d\u0430 \u043c\u044b\u0441\u043b\u044c: \u201c\u041e\u0447\u0435\u0432\u0438\u0434\u043d\u043e, \u0447\u0442\u043e Trivy \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u0445 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u043e\u0432\u201d. \u041d\u043e, \u043a\u0430\u043a \u0447\u0430\u0441\u0442\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0435 \u0431\u044b\u0432\u0430\u0435\u0442 \u0432 \u043c\u0430\u0442\u0435\u043c\u0430\u0442\u0438\u043a\u0435, \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u043e\u0435 \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u043e \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432. \u0418\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443, \u043a\u0430\u043a \u0432\u044b\u0440\u0430\u0437\u0438\u043b\u0441\u044f \u043e\u0434\u0438\u043d \u0438\u0437 \u043d\u0430\u0448\u0438\u0445 \u043a\u043e\u043b\u043b\u0435\u0433, \u043c\u044b \u00ab\u0437\u0430\u0440\u0435\u0432\u0435\u0440\u0441\u0438\u043c \u043e\u043f\u0435\u043d\u0441\u0443\u0440\u0441\u00bb \u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u0435\u043c\u0441\u044f \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f, \u043a\u0430\u043a \u0432 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043a\u0430\u043d\u0435\u0440 Trivy. \u041c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0430 \u0410\u043d\u0430\u0441\u0442\u0430\u0441\u0438\u044f \u0411\u0435\u0440\u0435\u0437\u043e\u0432\u0441\u043a\u0430\u044f, \u0438\u043d\u0436\u0435\u043d\u0435\u0440 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 Swordfish Security.\u00a0<\/p>\n<figure class=\"full-width\"><\/figure>\n<h3>\u0412\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u044b<\/h3>\n<p>\u0421\u043a\u0430\u043d\u0435\u0440 Trivy \u043e\u0431\u044b\u0447\u043d\u043e \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 \u0441\u0432\u043e\u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u043f\u043e \u043f\u0443\u0442\u0438 <strong>~\/.cache\/trivy<\/strong>. \u0412 \u043d\u0435\u0439 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0434\u0432\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u0430\u043f\u043a\u0438: <strong>fanal<\/strong> \u0438 <strong>db<\/strong>. \u0412 <strong>db<\/strong> \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0431\u0430\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0435\u0435 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0432\u0435\u0440\u0441\u0438\u044f \u0411\u0414 \u0438 \u0432\u0440\u0435\u043c\u044f \u0435\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u041f\u0430\u043f\u043a\u0430 <strong>fanal<\/strong> \u0445\u0440\u0430\u043d\u0438\u0442 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u0438 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.<\/p>\n<p>\u041e\u0431\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 <a href=\"https:\/\/github.com\/boltdb\/bolt\">boltDB<\/a> \u2014 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u00ab\u043a\u043b\u044e\u0447-\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u00bb. \u0414\u043b\u044f \u0443\u0434\u043e\u0431\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0443\u0442\u0438\u043b\u0438\u0442\u0443 <a href=\"https:\/\/github.com\/br0xen\/boltbrowser\">boltbrowser<\/a>. \u042d\u0442\u043e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0431\u044b\u0441\u0442\u0440\u043e \u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435\u0441\u044f \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u0430 boltDB, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u043e\u043b\u0435\u0435 \u0443\u0434\u043e\u0431\u043d\u043e\u0439 \u0438 \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e\u0439.<\/p>\n<figure class=\"full-width\">\n<div><figcaption>\u0420\u0438\u0441\u0443\u043d\u043e\u043a 1. \u041f\u0440\u0438\u043c\u0435\u0440 \u0445\u0440\u0430\u043d\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 fanal.db<\/figcaption><\/div>\n<\/figure>\n<p>\u0412 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 <strong>fanal.db<\/strong> \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0434\u0435\u0442\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u043b\u043e\u044f\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0437\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 \u0438 \u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u041d\u0430 \u0440\u0438\u0441\u0443\u043d\u043a\u0435 1 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u043c \u0441\u043b\u043e\u0435: \u043a\u043e\u043c\u0430\u043d\u0434\u0430, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u043d \u0431\u044b\u043b \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d, \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u043d\u0435\u0439 \u043f\u0430\u043a\u0435\u0442\u0430\u0445. \u0412\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u0438\u0435 \u0443\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044b \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u0435\u043c\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442. \u041d\u043e \u043d\u0435 \u0431\u0443\u0434\u0435\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043f\u0435\u0440\u0435\u0439\u0434\u0435\u043c \u043a \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044e \u0435\u0433\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.<\/p>\n<h3>\u041f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f<\/h3>\n<p>\u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u2014 \u043b\u0438\u0448\u044c \u043e\u0434\u043d\u0430 \u0438\u0437 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 Trivy, \u043c\u044b \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0438\u043c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0438\u043c\u0435\u043d\u043d\u043e \u043d\u0430 \u043d\u0435\u0439. \u0417\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u0442\u043b\u0430\u0434\u043a\u0438 \u043d\u0430 \u043f\u0440\u043e\u0441\u0442\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u0435 Alpine, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u043c \u0431\u0440\u0435\u0439\u043a\u043f\u043e\u0438\u043d\u0442\u044b \u0432 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 \u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434. \u0414\u0430\u0436\u0435 \u0431\u0435\u0437 \u0443\u0433\u043b\u0443\u0431\u043b\u0435\u043d\u0438\u044f \u0432 \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u044d\u0442\u0430\u043f\u043e\u0432 \u0440\u0430\u0431\u043e\u0442\u044b.<\/p>\n<p>\u041d\u0430 <a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/commands\/app.go#L307\">\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435<\/a> \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u043e\u043a\u043e\u0432\u044b\u0445 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0448\u0430\u0433\u043e\u0432 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.<\/p>\n<p>\u041d\u0430 <a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/commands\/artifact\/run.go#L394\">\u0432\u0442\u043e\u0440\u043e\u043c \u044d\u0442\u0430\u043f\u0435<\/a> \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0442\u0430\u0439\u043c\u0430\u0443\u0442 \u043d\u0430 \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0430\u044f \u0431\u0430\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 <strong>fanal<\/strong>, \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0431\u0430\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 <strong>db<\/strong>\u00a0\u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u044e\u0442\u0441\u044f WASL-\u043c\u043e\u0434\u0443\u043b\u0438. \u0417\u0430\u0442\u0435\u043c \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f, \u0432 \u043d\u0430\u0448\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u2014 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0431\u0440\u0430\u0437\u0430.<\/p>\n<p>\u041d\u0430 <a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/commands\/artifact\/run.go#L164\">\u0442\u0440\u0435\u0442\u044c\u0435\u043c \u044d\u0442\u0430\u043f\u0435<\/a> \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u044e\u0442\u0441\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b lock-\u0444\u0430\u0439\u043b\u043e\u0432 \u0441\u0431\u043e\u0440\u0449\u0438\u043a\u043e\u0432), \u0438 \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u043c\u0435\u0442\u043e\u0434 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u043e\u0431\u0440\u0430\u0437\u0435 (\u0438\u0437 \u0430\u0440\u0445\u0438\u0432\u0430 \u0438\u043b\u0438 \u043e\u0431\u0440\u0430\u0437\u0430, \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e). \u0417\u0430\u0442\u0435\u043c \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043a \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 (\u0442\u0430\u043a\u043e\u0439 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u044b\u0439 \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043c\u0435\u0436\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432).<\/p>\n<p>\u041d\u0430 <a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/commands\/artifact\/run.go#L679\">\u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u043c \u044d\u0442\u0430\u043f\u0435<\/a> \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441\u043a\u0430\u043d\u0435\u0440. \u041f\u0435\u0440\u0435\u0434\u0430\u044e\u0442\u0441\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0446\u0435\u043b\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (\u0438\u043c\u044f \u043e\u0431\u0440\u0430\u0437\u0430), \u0444\u043b\u0430\u0433\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u0442\u0430\u043f\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u041d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0442\u0438\u043f\u044b \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a (\u043f\u0430\u043a\u0435\u0442\u044b \u041e\u0421, \u044f\u0437\u044b\u043a\u043e\u0432\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b) \u0438 \u0441\u043a\u0430\u043d\u0435\u0440\u044b (\u043f\u043e\u0438\u0441\u043a \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0430\u043c\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 Rekor, AWS \u0438 Docker Host. \u0421\u044e\u0434\u0430 \u0436\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0432\u0442\u043e\u0440\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b (lock-\u0444\u0430\u0439\u043b\u044b \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b).<\/p>\n<p>\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e Trivy \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0443 \u0447\u0435\u0440\u0435\u0437 CRI (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 containerd, podman, docker) \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0435: \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 (overlay, overlay2 \u2014 \u0438\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u043b\u044f \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043d\u0430\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u0440\u0443\u0433 \u043d\u0430 \u0434\u0440\u0443\u0433\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043b\u0435\u0433\u043a\u0438\u0435 \u0438 \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u044b\u0435 \u043e\u0431\u0440\u0430\u0437\u044b \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432). \u0422\u0430\u043a\u0436\u0435 \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0445 \u0432 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 Rekor \u043a\u043b\u0438\u0435\u043d\u0442.<\/p>\n<p>\u0418\u043c\u0435\u043d\u043d\u043e \u0437\u0434\u0435\u0441\u044c \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u044f\u044e\u0442\u0441\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u0438 \u043f\u043e\u0441\u0442-\u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b (\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u0431\u0443\u0434\u0435\u0442 \u0441\u043a\u0430\u0437\u0430\u043d\u043e \u0434\u0430\u043b\u044c\u0448\u0435). \u0410\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 (\u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0445 \u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0445 \u2014 \u043a\u0430\u043a, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u043e\u043c example). \u041d\u0430 \u044d\u0442\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0443 \u043d\u0430\u0441 \u0435\u0441\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043f\u043e\u043b\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u043e\u0431\u0440\u0430\u0437\u0435 \u0438 \u0435\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u043c, \u0433\u043e\u0442\u043e\u0432\u044b\u0439 \u043a \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u043e\u043d\u043d\u044b\u043c \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c.<\/p>\n<p>\u041c\u044b \u043f\u043e\u0442\u0438\u0445\u043e\u043d\u044c\u043a\u0443 \u043f\u0440\u0438\u0431\u043b\u0438\u0436\u0430\u0435\u043c\u0441\u044f \u043a \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043b\u043e\u0433\u0438\u043a\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041d\u043e \u043f\u0440\u0435\u0436\u0434\u0435 \u043f\u0435\u0440\u0435\u0439\u0434\u0435\u043c \u043a <a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/fanal\/artifact\/image\/image.go#L201\">\u043f\u044f\u0442\u043e\u043c\u0443 \u044d\u0442\u0430\u043f\u0443<\/a>, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 Trivy \u0431\u044b\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u0441\u043a\u0430\u043d\u0435\u0440\u043e\u043c.<\/p>\n<p>\u041d\u0430 \u044d\u0442\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0441\u043a\u0430\u043d\u0435\u0440 \u043e\u0431\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u043a \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u043c\u0443 \u0444\u0430\u0439\u043b\u0443, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u043e\u043c\u0443 \u0438\u0437 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 Docker \u043d\u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u043c \u044d\u0442\u0430\u043f\u0435. \u0417\u0430\u0442\u0435\u043c \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u043e\u0431\u0440\u0430\u0437\u0430 \u0438 \u0435\u0433\u043e \u0441\u043b\u043e\u0435\u0432. \u0417\u0434\u0435\u0441\u044c \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 SBOM. \u0412 \u043d\u0430\u0448\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0433\u043e \u043d\u0435\u0442, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435.<\/p>\n<p>\u0414\u0430\u043b\u0435\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0441\u044f <a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/fanal\/image\/image.go#L111\">\u043f\u043e\u0438\u0441\u043a \u0438\u043d\u0434\u0435\u043a\u0441\u0430 \u0431\u0430\u0437\u043e\u0432\u043e\u0433\u043e \u0441\u043b\u043e\u044f<\/a>. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0431\u043e\u0442\u043b\u0438\u0432\u043e \u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u0445 \u043f\u0440\u0438\u043c\u0435\u0440 \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u0442\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438:<\/p>\n<pre><code class=\"bash\">FROM debian:8 RUN apt-get update COPY mysecret \/ ENTRYPOINT [\"entrypoint.sh\"] CMD [\"somecmd\"]<\/code><\/pre>\n<p>\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e Dockerfile \u043d\u0443\u0436\u043d\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043b\u043e\u0438 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0441\u0431\u043e\u0440\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0442 \u0431\u0430\u0437\u043e\u0432\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0437\u0443 Debian. \u0427\u0442\u043e\u0431\u044b \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c, \u0432 \u0446\u0438\u043a\u043b\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0438\u0449\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u0430\u044f \u0441 \u043a\u043e\u043d\u0446\u0430 \u0441\u0442\u0440\u043e\u043a\u0430 \u0432\u0438\u0434\u0430:<\/p>\n<pre><code class=\"bash\">CMD [\"\/bin\/sh\"]<\/code><\/pre>\n<p>\u0417\u0430\u0442\u0435\u043c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0441\u043b\u043e\u0435\u0432 \u0438 \u043e\u0431\u0440\u0430\u0437\u0430 \u043a\u043e\u043d\u0432\u0435\u0440\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u043a\u043b\u044e\u0447\u0438 \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 <strong>fanal.db<\/strong>. \u0414\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u043b\u043e\u044f \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0438\u0437 \u0438\u0441\u0442\u043e\u0440\u0438\u0438, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u044f\u0442\u044c \u0436\u0435 \u0441\u0430\u043c\u0438\u043c Docker, \u043e \u0442\u043e\u043c, \u043a\u0430\u043a\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u043e\u043d \u0431\u044b\u043b \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d (\u043a\u0430\u043a \u043c\u044b \u0432\u0438\u0434\u0435\u043b\u0438 \u043d\u0430 \u0440\u0438\u0441\u0443\u043d\u043a\u0435 1).<\/p>\n<p>\u0414\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0438\u0437 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0441\u043b\u043e\u0435\u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0441\u044f <a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/fanal\/cache\/fs.go#L158\">\u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043a\u0435\u0448\u0430<\/a>. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 Trivy \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c: \u043e\u043d \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0430 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0438\u043d\u0441\u043f\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0435 \u0441\u043b\u043e\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0435\u0449\u0435 \u043d\u0435\u0442 \u0432 \u043a\u0435\u0448\u0435 (\u043f\u0440\u0438 \u0443\u0441\u043b\u043e\u0432\u0438\u0438, \u0447\u0442\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0445\u0435\u043c \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u044e\u0442). \u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043e\u0431 \u043e\u0431\u0440\u0430\u0437\u0435.<\/p>\n<p>\u041f\u043e\u0441\u043b\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0443\u0436\u0435 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043b\u043e\u0435\u0432 \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0430\u0435\u043c \u043a <a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/fanal\/artifact\/image\/image.go#L201\">\u0438\u043d\u0441\u043f\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e<\/a> \u0442\u0435\u0445, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043a\u0435\u0448\u0435 \u043d\u0435 \u043d\u0430\u0448\u043b\u043e\u0441\u044c. \u0418\u043d\u0441\u043f\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u043e\u043f\u044f\u0442\u044c \u0436\u0435 \u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.<\/p>\n<p>\u041d\u0430<strong> <\/strong><a href=\"https:\/\/github.com\/aquasecurity\/trivy\/blob\/1c49ae957e7d6b273288032b7a04392b81b46abe\/pkg\/fanal\/artifact\/image\/image.go#L215)\">\u0448\u0435\u0441\u0442\u043e\u043c<\/a> \u044d\u0442\u0430\u043f\u0435 \u043c\u044b \u0432\u0438\u0434\u0438\u043c, \u0437\u0430\u0447\u0435\u043c \u043e\u0442\u0434\u0435\u043b\u044f\u043b\u0441\u044f \u0431\u0430\u0437\u043e\u0432\u044b\u0439 \u0441\u043b\u043e\u0439. \u041e\u0442\u043b\u0438\u0447\u0438\u0435 \u044d\u0442\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0434\u043b\u044f \u043d\u0435\u0433\u043e \u043d\u0435 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0438\u0441\u043a \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043a \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u043c, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0442\u0440\u0435\u0442\u044c\u0435\u043c \u044d\u0442\u0430\u043f\u0435, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0438\u043f, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u043f\u043e\u0438\u0441\u043a \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432.<\/p>\n<p>\u0421\u043a\u0430\u043d\u0435\u0440 \u201c\u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442\u0441\u044f\u201d \u043f\u043e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043e\u0431\u0440\u0430\u0437\u0430. \u041f\u0435\u0440\u0435\u0434 \u0430\u043d\u0430\u043b\u0438\u0437\u043e\u043c \u043e\u043d \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0444\u0430\u0439\u043b\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u043e\u043c <strong>.wh.<\/strong> \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c\u0438 <strong>.wh.<\/strong> \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u043c\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 <strong>\/etc\/.wh..wh..wh..opq.<\/strong> \u0414\u043b\u044f \u0441\u043f\u0440\u0430\u0432\u043a\u0438, \u0442\u0430\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u0441\u043e\u0437\u0434\u0430\u044e\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 overlay (Docker \u043a\u0430\u043a \u0440\u0430\u0437 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0442\u0430\u043a\u043e\u0439 \u0441\u0440\u0435\u0434\u0435). \u042d\u0442\u0438 \u0444\u0430\u0439\u043b\u044b \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0432\u0435\u0440\u0445 \u0438 \u0432\u043d\u0438\u0437. \u0424\u0430\u0439\u043b\u044b \u0441 \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u043e\u043c <strong>.wh.<\/strong> \u0441\u043b\u0443\u0436\u0430\u0442 \u043c\u0430\u0440\u043a\u0435\u0440\u0430\u043c\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044f\u043c\u0438: \u043e\u043d\u0438 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u0444\u0430\u0439\u043b \u0438\u043b\u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0431\u044b\u043b \u0443\u0434\u0430\u043b\u0435\u043d \u0438\u043b\u0438 \u0441\u043a\u0440\u044b\u0442 \u0432 overlay-\u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u042d\u0442\u0438 \u0444\u0430\u0439\u043b\u044b \u043e\u0431\u044b\u0447\u043d\u043e \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u2014 \u043e\u043d\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u0430\u043c\u0438, \u043d\u0435 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u043b\u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 Trivy \u0438\u0445 \u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442. \u0412\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043d\u0430 \u0430\u043d\u0430\u043b\u0438\u0437.<\/p>\n<p>\u0412 \u0445\u043e\u0434\u0435 \u044d\u0442\u0430\u043f\u043e\u0432 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435: \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043b\u0438 \u043e\u043d \u043a\u0440\u0438\u0442\u0435\u0440\u0438\u044f\u043c \u043a\u0430\u043a\u043e\u0433\u043e-\u043b\u0438\u0431\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430. \u0418\u043d\u044b\u043c\u0438 \u0441\u043b\u043e\u0432\u0430\u043c\u0438, \u043c\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043d\u0430 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u044c.<\/p>\n<p>\u0415\u0441\u043b\u0438 \u0445\u043e\u0442\u044f \u0431\u044b \u043e\u0434\u043d\u043e \u0438\u0437 \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043e, \u0438\u0437 \u043d\u0435\u0433\u043e \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0432\u0441\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f. \u041d\u0430 \u044d\u0442\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u043e\u0442\u0431\u0438\u0440\u0430\u044e\u0442\u0441\u044f \u0444\u0430\u0439\u043b\u044b, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u041f\u043e\u0437\u0434\u043d\u0435\u0435 \u043e\u043d\u0438 \u0442\u0430\u043a\u0436\u0435 \u0434\u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0435.<\/p>\n<figure class=\"full-width\">\n<div><figcaption>\u0420\u0438\u0441\u0443\u043d\u043e\u043a 2. \u041f\u0440\u0438\u043c\u0435\u0440 \u0432\u044b\u0432\u043e\u0434\u043e\u0432 \u0432 \u043b\u043e\u0433\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430<\/figcaption><\/div>\n<\/figure>\n<p>\u041d\u0430 \u0440\u0438\u0441\u0443\u043d\u043a\u0435 2 \u0438\u043b\u043b\u044e\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440 \u0444\u0430\u0439\u043b\u043e\u0432 Trivy. \u041f\u0440\u0438\u0447\u0435\u043c \u0442\u0435, \u0447\u0442\u043e \u0434\u0430\u043b\u0435\u0435 \u0438\u0434\u0443\u0442 \u0441 \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u0440\u043e\u0432\u043d\u044f \u0434\u0435\u0431\u0430\u0433 (\u0434\u0435\u0431\u0430\u0433 \u043f\u0440\u0438\u043d\u0442\u0441\u0442\u0435\u0439\u0442\u043c\u0435\u043d\u0442, \u0434\u0430-\u0434\u0430!) \u2014 \u044d\u0442\u043e \u0444\u0430\u0439\u043b\u044b, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440 \u0441 \u0442\u0438\u043f\u043e\u043c secret.<\/p>\n<figure class=\"full-width\">\n<div><figcaption>\u0420\u0438\u0441\u0443\u043d\u043e\u043a 3. \u041f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043e\u0431\u0440\u0430\u0437\u0430 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 (\u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u043d\u0430\u044f)<\/figcaption><\/div>\n<\/figure>\n<p>\u0417\u0430\u0432\u0435\u0440\u0448\u0430\u044e\u0449\u0438\u0435 \u044d\u0442\u0430\u043f\u044b \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u0430\u043d\u0430\u043b\u0438\u0437\u0430, \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0438\u0445 \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 <strong>fanal.db<\/strong>, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u043e\u0431\u0440\u0430\u0437\u0430 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u0432 \u043a\u0435\u0448. \u041d\u0430 \u044d\u0442\u043e\u043c \u0432\u0441\u0451, \u0444\u0443\u0445!<\/p>\n<h3>\u0420\u0430\u0431\u043e\u0442\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432<\/h3>\n<p>\u0410\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0437\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438:<\/p>\n<ul>\n<li>\n<p>\u0410\u043d\u0430\u043b\u0438\u0437 \u0432\u0435\u0440\u0441\u0438\u0438 \u041e\u0421: \u044d\u0442\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044e\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u0437 \u0440\u0435\u043b\u0438\u0437\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430. \u0425\u043e\u0442\u044f \u044d\u0442\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043d\u0435 \u0441\u0442\u043e\u043b\u044c \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438, \u043e\u043d\u0438 \u0432\u0441\u0451 \u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432 \u0442\u0430\u0431\u043b\u0438\u0446\u0443 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445.<\/p>\n<\/li>\n<li>\n<p>\u0410\u043d\u0430\u043b\u0438\u0437 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439: \u044d\u0442\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u0438\u0449\u0443\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0444\u0430\u0439\u043b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438, \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u0430\u0445. \u0422\u0430\u0431\u043b\u0438\u0446\u0443 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0432 <a href=\"https:\/\/aquasecurity.github.io\/trivy\/v0.51\/docs\/coverage\/language\/\">\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438<\/a>.<\/p>\n<\/li>\n<li>\n<p>\u0410\u043d\u0430\u043b\u0438\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e \u0441\u0431\u043e\u0440\u043a\u0435: \u044d\u0442\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044e\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 \u043e\u0431\u0440\u0430\u0437\u0430.<\/p>\n<\/li>\n<li>\n<p>\u0410\u043d\u0430\u043b\u0438\u0437 \u0444\u0430\u0439\u043b\u043e\u0432 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u041e\u0421 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 apk, dpkg \u0438 \u0442. \u0434.). \u041e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u043d\u0438\u043c\u0438 \u043c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u0432 <a href=\"https:\/\/aquasecurity.github.io\/trivy\/v0.51\/docs\/coverage\/os\/\">\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438<\/a>.<\/p>\n<\/li>\n<li>\n<p>\u041f\u043e\u0438\u0441\u043a \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432: \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u044d\u0442\u043e\u0439 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u0438\u0449\u0443\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b.<\/p>\n<\/li>\n<\/ul>\n<div>\n<div class=\"table\">\n<table>\n<tbody>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"center\"><strong>\u0433\u0440\u0443\u043f\u043f\u0430.\u2116<\/strong><\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"center\"><strong>\u0418\u043c\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430<\/strong><\/p>\n<\/td>\n<td>\n<p align=\"center\"><strong>Required<\/strong><\/p>\n<\/td>\n<td>\n<p align=\"center\"><strong>\u041a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439<\/strong><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.1<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">alpineOSAnalyzer <\/p>\n<\/td>\n<td>\n<p>\/etc\/alpine-release<\/p>\n<\/td>\n<td rowspan=\"13\">\n<p align=\"left\">\u041f\u0430\u0440\u0441\u0438\u0442 \u0432\u0435\u0440\u0441\u0438\u044e \u041e\u0421 \u0438\u0437 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0444\u0430\u0439\u043b\u0430<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.2<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">amazonLinuxOSAnalyzer<\/p>\n<\/td>\n<td>\n<p>etc\/system-release, usr\/lib\/system-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.3<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">debianOSAnalyzer<\/p>\n<\/td>\n<td>\n<p>etc\/debian_version<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.4<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">marinerOSAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">etc\/mariner-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.5<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">almaOSAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">etc\/almalinux-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.6<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">centOSAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">etc\/centos-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.7<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">fedoraOSAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">etc\/fedora-release, usr\/lib\/fedora-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.8<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">oracleOSAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">usr\/lib\/fedora-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.9<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">redhatOSAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">etc\/redhat-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.10<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">rockyOSAnalyzer<\/p>\n<\/td>\n<td>\n<p align=\"left\">etc\/rocky-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.11<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">osReleaseAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">etc\/os-release,<br \/> usr\/lib\/os-release<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td data-colwidth=\"65\" width=\"65\">\n<p align=\"left\">1.12<\/p>\n<\/td>\n<td data-colwidth=\"200\" width=\"200\">\n<p align=\"left\">ubuntuESMAnalyzer <\/p>\n<\/td>\n<td>\n<p align=\"left\">var\/lib\/ubuntu-advantage\/status.j<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-379135","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/379135","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=379135"}],"version-history":[{"count":0,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/379135\/revisions"}],"wp:attachment":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=379135"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=379135"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=379135"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}