Skip to content

Demo: CVE fix detected for Python image #1447

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
octo-sts wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Demo: CVE fix detected for Python image #1447

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
263 changes: 256 additions & 7 deletions PR_BODY.md
View file
Open in desktop

Large diffs are not rendered by default.

265 changes: 257 additions & 8 deletions demo-results/last-run.md
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion demo-results/new-image.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
cgr.dev/cgr-demo.com/python:3.12.12
cgr.dev/cgr-demo.com/python:3.12.13
2 changes: 1 addition & 1 deletion diff.json
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion grype-new.json
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion grype-old.json
View file
Open in desktop

Large diffs are not rendered by default.

516 changes: 492 additions & 24 deletions grype-results.sarif
View file
Open in desktop

Large diffs are not rendered by default.

17 changes: 13 additions & 4 deletions new.keys
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,13 @@
CVE-2025-12781 python-3.12 3.12.12-r7
CVE-2025-15366 python-3.12 3.12.12-r7
CVE-2025-15367 python-3.12 3.12.12-r7
CVE-2026-2297 python-3.12 3.12.12-r7
CVE-2025-12781 python-3.12 3.12.13-r8
CVE-2025-13462 python-3.12 3.12.13-r8
CVE-2025-15366 python-3.12 3.12.13-r8
CVE-2025-15367 python-3.12 3.12.13-r8
CVE-2026-2297 python-3.12 3.12.13-r8
CVE-2026-3446 python-3.12 3.12.13-r8
CVE-2026-3479 python-3.12 3.12.13-r8
CVE-2026-3644 python-3.12 3.12.13-r8
CVE-2026-4224 python-3.12 3.12.13-r8
CVE-2026-4786 python-3.12 3.12.13-r8
CVE-2026-6019 python-3.12 3.12.13-r8
CVE-2026-7210 python-3.12 3.12.13-r8
CVE-2026-9669 python-3.12 3.12.13-r8
240 changes: 240 additions & 0 deletions old.tsv
View file
Open in desktop

Large diffs are not rendered by default.

116 changes: 58 additions & 58 deletions pcc_scan_results.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,35 +1,35 @@
{
"results": [
{
"id": "sha256:ebac0b192ca653240b727e756a775976c69e8e1f0ffaaa128230521516b583a8",
"name": "cgr.dev/cgr-demo.com/python:3.12.12",
"id": "sha256:690f3c96a9ca6dc9b5fcc66307adfb3a91fcb5ea268d8b169d46c704ee6f35a0",
"name": "cgr.dev/cgr-demo.com/python:3.12.13",
"distro": "Chainguard",
"distroRelease": "chainguard",
"digest": "sha256:cc136371ef0348791e44b1803b1a50e3415d6aa08c37b575a829ab0481d7f944",
"digest": "sha256:a91e9183cd2b4a3c81697bfd3a5a30440ce063f3363425493856148cddf4f2e7",
"collections": [
"All"
],
"packages": [
{
"type": "os",
"name": "zlib",
"version": "1.3.2-r1",
"version": "1.3.2-r3",
"licenses": [
"MPL-2.0 AND MIT"
]
},
{
"type": "os",
"name": "readline",
"version": "8.3-r1",
"version": "8.3-r2",
"licenses": [
"GPL-3.0-or-later"
]
},
{
"type": "os",
"name": "xz",
"version": "5.8.2-r1",
"version": "5.8.3-r1",
"licenses": [
"GPL-3.0-or-later"
]
Expand All @@ -45,130 +45,130 @@
{
"type": "os",
"name": "libffi",
"version": "3.5.2-r1",
"version": "3.6.0-r2",
"licenses": [
"MIT"
]
},
{
"type": "os",
"name": "libxcrypt",
"version": "4.5.2-r2",
"version": "4.5.2-r3",
"licenses": [
"GPL-2.0-or-later AND LGPL-2.1-or-later"
]
},
{
"type": "os",
"name": "gdbm",
"version": "1.26-r2",
"version": "1.26-r5",
"licenses": [
"GPL-3.0-or-later"
]
},
{
"type": "os",
"name": "chainguard-baselayout",
"version": "20230214-r16",
"version": "20230214-r17",
"licenses": [
"MIT"
]
},
{
"type": "os",
"name": "wolfi-baselayout",
"version": "20230201-r28",
"licenses": [
"MIT"
]
},
{
"type": "os",
"name": "python-3.12",
"version": "3.12.12-r7",
"licenses": [
"PSF-2.0"
]
},
{
"type": "os",
"name": "ncurses",
"version": "6.6_p20251230-r5",
"version": "20230201-r29",
"licenses": [
"MIT"
]
},
{
"type": "os",
"name": "util-linux",
"version": "2.41.3-r3",
"version": "2.42.2-r0",
"licenses": [
"GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-1.0-only AND LGPL-2.1-or-later AND BSD-1-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND MIT AND CC-PDDC"
"GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-1.0-only AND LGPL-2.1-or-later AND BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND MIT AND CC-PDDC"
]
},
{
"type": "os",
"name": "gcc",
"version": "15.2.0-r10",
"version": "16.1.0-r4",
"licenses": [
"GPL-3.0-or-later WITH GCC-exception-3.1"
]
},
{
"type": "os",
"name": "expat",
"version": "2.7.4-r3",
"version": "2.8.2-r0",
"licenses": [
"MIT"
]
},
{
"type": "os",
"name": "glibc",
"version": "2.43-r2",
"licenses": [
"LGPL-2.1-or-later"
]
},
{
"type": "os",
"name": "bzip2",
"version": "1.0.8-r22",
"version": "1.0.8-r23",
"licenses": [
"MPL-2.0 AND MIT"
]
},
{
"type": "os",
"name": "sqlite",
"version": "3.51.1-r0",
"version": "3.53.3-r1",
"licenses": [
"blessing"
]
},
{
"type": "os",
"name": "py3-pip",
"version": "26.0.1-r1",
"version": "26.1.2-r1",
"licenses": [
"MIT"
]
},
{
"type": "os",
"name": "ncurses",
"version": "6.6.20260704-r0",
"licenses": [
"MIT"
]
},
{
"type": "os",
"name": "openssl",
"version": "3.6.1-r2",
"version": "3.6.3-r3",
"licenses": [
"Apache-2.0"
]
},
{
"type": "os",
"name": "glibc",
"version": "2.43-r11",
"licenses": [
"LGPL-2.1-or-later"
]
},
{
"type": "os",
"name": "ca-certificates",
"version": "20251003-r3",
"version": "20260413-r0",
"licenses": [
"MPL-2.0 AND MIT"
]
},
{
"type": "os",
"name": "python-3.12",
"version": "3.12.13-r8",
"licenses": [
"PSF-2.0"
]
}
],
"complianceDistribution": {
Expand All @@ -189,53 +189,53 @@
"vulnerabilityScanPassed": true,
"history": [
{
"created": "2026-03-06T02:11:34Z",
"created": "2026-07-06T23:11:32Z",
"instruction": "RUN apko"
},
{
"created": "2026-03-06T02:11:34Z",
"created": "2026-07-06T23:11:32Z",
"instruction": "RUN apko"
},
{
"created": "2026-03-06T02:11:34Z",
"created": "2026-07-06T23:11:32Z",
"instruction": "RUN apko"
},
{
"created": "2026-03-06T02:11:34Z",
"created": "2026-07-06T23:11:32Z",
"instruction": "RUN apko"
},
{
"created": "2026-03-06T02:11:34Z",
"created": "2026-07-06T23:11:32Z",
"instruction": "RUN apko"
},
{
"created": "2026-03-06T02:11:34Z",
"created": "2026-07-06T23:11:32Z",
"instruction": "RUN apko"
},
{
"created": "2026-03-06T02:11:34Z",
"created": "2026-07-06T23:11:32Z",
"instruction": "RUN apko"
},
{
"created": "2026-03-06T02:11:34Z",
"created": "2026-07-06T23:11:32Z",
"instruction": "RUN apko"
},
{
"created": "2026-03-06T02:11:34Z",
"created": "2026-07-06T23:11:32Z",
"instruction": "RUN apko"
},
{
"created": "2026-03-06T02:11:34Z",
"created": "2026-07-06T23:11:32Z",
"instruction": "RUN apko"
},
{
"created": "2026-03-06T02:11:34Z",
"created": "2026-07-06T23:11:32Z",
"instruction": "RUN apko"
}
],
"scanTime": "2026-03-10T18:15:23.373702592Z",
"scanID": "69b05fbb8c59397c3f55035c"
"scanTime": "2026-07-08T12:30:50.956248565Z",
"scanID": "6a4e42faa6beb271d8cbcd13"
}
],
"consoleURL": "https://app.prismacloud.io/compute?computeState=/monitor/vulnerabilities/images/ci?search%3Dsha256%253Aebac0b192ca653240b727e756a775976c69e8e1f0ffaaa128230521516b583a8"
"consoleURL": "https://app.prismacloud.io/compute?computeState=/monitor/vulnerabilities/images/ci?search%3Dsha256%253A690f3c96a9ca6dc9b5fcc66307adfb3a91fcb5ea268d8b169d46c704ee6f35a0"
}
2 changes: 1 addition & 1 deletion pcc_scan_results.sarif.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
{"$schema":"https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json","version":"2.1.0","runs":[{"tool":{"driver":{"name":"Prisma Cloud (twistcli)","version":"34.04.145","rules":[]}},"results":[]}]}
{"$schema":"https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json","version":"2.1.0","runs":[{"tool":{"driver":{"name":"Prisma Cloud (twistcli)","version":"34.04.160","rules":[]}},"results":[]}]}
Loading