[Bug 2272258] Review Request: trivy - Vulnerability and license scanner

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



https://bugzilla.redhat.com/show_bug.cgi?id=2272258



--- Comment #3 from Jerry James <loganjerry@xxxxxxxxx> ---
[!]: Package must own all directories that it creates.
     Note: Directories without known owners:
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/efs,
     /usr/share/licenses/trivy/vendor/github.com/liggitt/tabwriter,
    
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com,
     /usr/share/licenses/trivy/vendor/github.com/kylelemons,
     /usr/share/licenses/trivy/vendor/k8s.io/kube-openapi/pkg/validation,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/feature/s3,
    
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com/go-
     yaml, /usr/share/licenses/trivy/vendor/github.com/klauspost/compress,
    
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp,
     /usr/share/licenses/trivy/vendor/github.com/csaf-
     poc/csaf_distribution/v3/LICENSES,
     /usr/share/licenses/trivy/vendor/github.com/docker/go-units,
     /usr/share/licenses/trivy/vendor/github.com/moby/spdystream,
     /usr/share/licenses/trivy/vendor/github.com/sergi,
     /usr/share/licenses/trivy/vendor/github.com/open-policy-
     agent/opa/internal/semver,
     /usr/share/licenses/trivy/vendor/k8s.io/kube-openapi/pkg/internal,
     /usr/share/licenses/trivy/vendor/github.com/hashicorp/hcl/v2,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/accessanalyzer,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/sso,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/rds, /usr/share/licenses/trivy/vendor/github.com/beorn7,
     /usr/share/licenses/trivy/vendor/github.com/beorn7/perks,
     /usr/share/licenses/trivy/vendor/github.com/AzureAD,
    
/usr/share/licenses/trivy/vendor/google.golang.org/api/internal/third_party,
     /usr/share/licenses/trivy/vendor/github.com/cloudflare,
     /usr/share/licenses/trivy/vendor/google.golang.org/api/internal,
     /usr/share/licenses/trivy/vendor/github.com/moby/sys/user,
     /usr/share/licenses/trivy/vendor/github.com/mxk,
     /usr/share/licenses/trivy/vendor/github.com/cpuguy83/dockercfg,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/ecs,
     /usr/share/licenses/trivy/vendor/github.com/russross/blackfriday/v2,
     /usr/share/licenses/trivy/pkg/iac,
     /usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize,
    
/usr/share/licenses/trivy/vendor/github.com/prometheus/common/internal/bitbucket.org/ww/goautoneg,
     /usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib,
     /usr/share/licenses/trivy/vendor/github.com/moby/sys/mountinfo,
     /usr/share/licenses/trivy/vendor/github.com/jbenet/go-context,
     /usr/share/licenses/trivy/vendor/github.com/vbatts,
     /usr/share/licenses/trivy/vendor/github.com/cenkalti/backoff/v4,
     /usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis/v2/geohash,
     /usr/share/licenses/trivy/vendor/github.com/antchfx,
     /usr/share/licenses/trivy/vendor/k8s.io/client-go/third_party,
     /usr/share/licenses/trivy/vendor/modernc.org/sqlite,
     /usr/share/licenses/trivy/vendor/github.com/go-logr/logr,
     /usr/share/licenses/trivy/vendor/github.com/golang,
     /usr/share/licenses/trivy/vendor/github.com/go-git/go-billy/v5,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go-v2/feature,
     /usr/share/licenses/trivy/vendor/dario.cat/mergo,
     /usr/share/licenses/trivy/vendor/github.com/Intevation,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/lambda,
     /usr/share/licenses/trivy/vendor/github.com/dlclark,
     /usr/share/licenses/trivy/vendor/github.com/spdx,
     /usr/share/licenses/trivy/vendor/k8s.io,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/cloudfront,
     /usr/share/licenses/trivy/vendor/github.com/modern-go,
     /usr/share/licenses/trivy/vendor/github.com/oklog,
     /usr/share/licenses/trivy/vendor/cloud.google.com/go/compute,
     /usr/share/licenses/trivy/vendor/github.com/subosito/gotenv,
     /usr/share/licenses/trivy/vendor/github.com/opencontainers,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/elasticsearchservice,
     /usr/share/licenses/trivy/vendor/github.com/googleapis/enterprise-
     certificate-proxy,
     /usr/share/licenses/trivy/vendor/github.com/spf13/afero,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/kms, /usr/share/licenses/trivy/vendor/golang.org/x,
     /usr/share/licenses/trivy/vendor/github.com/docker/cli,
    
/usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis/v2/hyperloglog,
     /usr/share/licenses/trivy/vendor/github.com/vbatts/tar-split,
     /usr/share/licenses/trivy/vendor/github.com/cenkalti/backoff,
     /usr/share/licenses/trivy/vendor/github.com/mitchellh/go-homedir,
     /usr/share/licenses/trivy/vendor/github.com/containerd/log,
     /usr/share/licenses/trivy/vendor/github.com/knqyf263/go-rpmdb,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/internal/configsources,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/internal/ini, /usr/share/licenses/trivy/vendor/github.com/moby,
     /usr/share/licenses/trivy/vendor/github.com/olekukonko,
     /usr/share/licenses/trivy/vendor/github.com/evanphx/json-patch,
     /usr/share/licenses/trivy/vendor/github.com/klauspost/compress/internal,
     /usr/share/licenses/trivy/vendor/github.com/gobwas,
     /usr/share/licenses/trivy/vendor/github.com/CycloneDX/cyclonedx-go,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/sns,
     /usr/share/licenses/trivy/vendor/github.com/aws/smithy-go/internal,
     /usr/share/licenses/trivy/vendor/github.com/cespare,
     /usr/share/licenses/trivy/vendor/gopkg.in/yaml.v3,
     /usr/share/licenses/trivy/vendor/github.com/prometheus/common/internal,
     /usr/share/licenses/trivy/vendor/github.com/golang-jwt/jwt/v5,
     /usr/share/licenses/trivy/vendor/google.golang.org/grpc,
     /usr/share/licenses/trivy/vendor/github.com/lunixbochs/struc,
     /usr/share/licenses/trivy/vendor/github.com/gosuri/uitable,
     /usr/share/licenses/trivy/vendor/github.com/mailru,
     /usr/share/licenses/trivy/vendor/github.com/pelletier,
     /usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis,
     /usr/share/licenses/trivy/vendor/github.com/quasilyte/go-ruleguard,
     /usr/share/licenses/trivy/vendor/github.com/ProtonMail,
     /usr/share/licenses/trivy/vendor/github.com/moby/buildkit,
     /usr/share/licenses/trivy/vendor/github.com/samber/lo,
     /usr/share/licenses/trivy/vendor/github.com/quasilyte/go-
     ruleguard/dsl, /usr/share/licenses/trivy/vendor/github.com/go-
     redis/redis/v8, /usr/share/licenses/trivy/vendor/github.com/aws/aws-
     sdk-go-v2/service/cloudtrail,
     /usr/share/licenses/trivy/vendor/github.com/golang-jwt/jwt,
     /usr/share/licenses/trivy/vendor/github.com/subosito,
     /usr/share/licenses/trivy/vendor/github.com/owenrumney/go-sarif,
     /usr/share/licenses/trivy/vendor/github.com/sourcegraph,
     /usr/share/licenses/trivy/vendor/github.com/tchap,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/apigateway,
     /usr/share/licenses/trivy/vendor/github.com/go-openapi/spec,
     /usr/share/licenses/trivy/vendor/github.com/aws/smithy-go,
     /usr/share/licenses/trivy/vendor/github.com/sergi/go-diff,
     /usr/share/licenses/trivy/vendor/google.golang.org,
     /usr/share/licenses/trivy/pkg,
     /usr/share/licenses/trivy/vendor/google.golang.org/genproto/googleapis,
     /usr/share/licenses/trivy/vendor/modernc.org/token,
     /usr/share/licenses/trivy/vendor/github.com/exponent-io,
     /usr/share/licenses/trivy/vendor/github.com/go-
     openapi/runtime/middleware/denco,
     /usr/share/licenses/trivy/vendor/github.com/shopspring/decimal,
     /usr/share/licenses/trivy/vendor/github.com/aws/smithy-
     go/internal/sync/singleflight,
     /usr/share/licenses/trivy/vendor/github.com/Azure/go-autorest/logger,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/eks,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/codebuild,
     /usr/share/licenses/trivy/vendor/github.com/microsoft,
     /usr/share/licenses/trivy/vendor/k8s.io/kube-
     openapi/pkg/internal/third_party/go-json-experiment,
     /usr/share/licenses/trivy/vendor/k8s.io/apimachinery/third_party,
     /usr/share/licenses/trivy/pkg/iac/scanners/helm,
     /usr/share/licenses/trivy/vendor/github.com/alecthomas/chroma,
     /usr/share/licenses/trivy/vendor/github.com/prometheus/common,
     /usr/share/licenses/trivy/vendor/github.com/remyoudompheng/bigfft,
     /usr/share/licenses/trivy/vendor/github.com/mitchellh/mapstructure,
     /usr/share/licenses/trivy/vendor/github.com/briandowns,
     /usr/share/licenses/trivy/vendor/github.com/docker/distribution,
     /usr/share/licenses/trivy/vendor/github.com/antchfx/htmlquery,
     /usr/share/licenses/trivy/vendor/github.com/opencontainers/go-digest,
     /usr/share/licenses/trivy/vendor/github.com/spf13/cobra,
    
/usr/share/licenses/trivy/vendor/github.com/klauspost/compress/zstd/internal/xxhash,
     /usr/share/licenses/trivy/vendor/github.com/cyphar/filepath-
     securejoin, /usr/share/licenses/trivy/vendor/github.com/Azure/azure-
     sdk-for-go/sdk/azcore,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/redshift,
     /usr/share/licenses/trivy/vendor/github.com/pelletier/go-toml/v2,
     /usr/share/licenses/trivy/vendor/k8s.io/apimachinery,
     /usr/share/licenses/trivy/vendor/k8s.io/client-go,
     /usr/share/licenses/trivy/vendor/sigs.k8s.io/json,
     /usr/share/licenses/trivy/vendor/github.com/cenkalti,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/feature/s3/manager,
     /usr/share/licenses/trivy/vendor/github.com/hashicorp/golang-lru/v2,
     /usr/share/licenses/trivy/vendor/github.com/imdario/mergo,
     /usr/share/licenses/trivy/vendor/github.com/containerd,
     /usr/share/licenses/trivy/vendor/k8s.io/client-
     go/third_party/forked/golang,
     /usr/share/licenses/trivy/vendor/github.com/agnivade/levenshtein,
     /usr/share/licenses/trivy/vendor/github.com/docker/docker-credential-
     helpers, /usr/share/licenses/trivy/vendor/github.com/rcrowley/go-
     metrics, /usr/share/licenses/trivy/vendor/github.com/aquasecurity,
     /usr/share/licenses/trivy/vendor/modernc.org/libc/honnef.co,
     /usr/share/licenses/trivy/vendor/github.com/klauspost/compress/zstd,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/cloudwatchlogs,
     /usr/share/licenses/trivy/vendor/github.com/felixge/httpsnoop,
     /usr/share/licenses/trivy/vendor/github.com/kballard,
     /usr/share/licenses/trivy/vendor/github.com/lann/ps,
     /usr/share/licenses/trivy/vendor/github.com/munnerz/goautoneg,
     /usr/share/licenses/trivy/vendor/github.com/pmezard,
     /usr/share/licenses/trivy/vendor/github.com/chai2010/gettext-go,
     /usr/share/licenses/trivy/vendor/github.com/tchap/go-patricia/v2,
     /usr/share/licenses/trivy/vendor/github.com/aquasecurity/bolt-
     fixtures, /usr/share/licenses/trivy/vendor/github.com/russross,
     /usr/share/licenses/trivy/vendor/github.com/xeipuuv,
     /usr/share/licenses/trivy/vendor/k8s.io/kube-
     openapi/pkg/validation/spec,
     /usr/share/licenses/trivy/vendor/github.com/open-policy-agent,
     /usr/share/licenses/trivy/vendor/github.com/shopspring,
     /usr/share/licenses/trivy/vendor/github.com/anchore,
     /usr/share/licenses/trivy/vendor/helm.sh/helm/v3,
     /usr/share/licenses/trivy/vendor/github.com/Masterminds/goutils,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/internal/accept-encoding,
     /usr/share/licenses/trivy/vendor/github.com/golang-jwt/jwt/v4,
    
/usr/share/licenses/trivy/vendor/k8s.io/kubectl/pkg/util/i18n/translations,
     /usr/share/licenses/trivy/vendor/github.com/docker/go-metrics,
     /usr/share/licenses/trivy/vendor/github.com/in-toto/in-toto-golang,
     /usr/share/licenses/trivy/vendor/k8s.io/client-go/third_party/forked,
     /usr/share/licenses/trivy/vendor/github.com/cpuguy83/go-md2man,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/kafka,
     /usr/share/licenses/trivy/vendor/github.com/Azure/azure-sdk-for-
     go/sdk, /usr/share/licenses/trivy/vendor/github.com/hashicorp/hc-
     install, /usr/share/licenses/trivy/vendor/github.com/sigstore/rekor,
     /usr/share/licenses/trivy/vendor/github.com/distribution,
     /usr/share/licenses/trivy/vendor/github.com/Masterminds/semver,
     /usr/share/licenses/trivy/vendor/github.com/morikuni/aec,
     /usr/share/licenses/trivy/vendor/gopkg.in/ini.v1,
     /usr/share/licenses/trivy/vendor/github.com/emirpasic,
    
/usr/share/licenses/trivy/vendor/google.golang.org/genproto/googleapis/api,
     /usr/share/licenses/trivy/vendor/github.com/mitchellh/hashstructure,
     /usr/share/licenses/trivy/vendor/github.com/pkg/errors,
     /usr/share/licenses/trivy/vendor/oras.land,
     /usr/share/licenses/trivy/vendor/github.com/GoogleCloudPlatform/docker-
     credential-gcr,
     /usr/share/licenses/trivy/vendor/github.com/antchfx/xpath,
     /usr/share/licenses/trivy/vendor/github.com/gosuri/uitable/util,
    
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc,
     /usr/share/licenses/trivy/vendor/github.com/go-openapi/loads,
     /usr/share/licenses/trivy/vendor/github.com/dgryski,
     /usr/share/licenses/trivy/vendor/go.opentelemetry.io,
     /usr/share/licenses/trivy/vendor/github.com/knqyf263/go-deb-version,
     /usr/share/licenses/trivy/vendor/github.com/masahiro331/go-disk,
     /usr/share/licenses/trivy/vendor/github.com/cpuguy83/go-md2man/v2,
     /usr/share/licenses/trivy/vendor/github.com/OneOfOne/xxhash,
     /usr/share/licenses/trivy/vendor/github.com/jmoiron/sqlx,
     /usr/share/licenses/trivy/vendor/github.com/openvex,
     /usr/share/licenses/trivy/vendor/github.com/rivo/uniseg,
     /usr/share/licenses/trivy/vendor/github.com/open-policy-
     agent/opa/internal/providers/aws,
     /usr/share/licenses/trivy/vendor/github.com/saracen/walker,
     /usr/share/licenses/trivy/vendor/github.com/bmatcuk,
     /usr/share/licenses/trivy/vendor/sigs.k8s.io/yaml/goyaml.v2,
     /usr/share/licenses/trivy/vendor/github.com/magiconair/properties,
     /usr/share/licenses/trivy/vendor/github.com/testcontainers,
     /usr/share/licenses/trivy/vendor/github.com/zclconf,
     /usr/share/licenses/trivy/vendor/github.com/huandu/xstrings,
     /usr/share/licenses/trivy/vendor/github.com/twitchtv/twirp,
     /usr/share/licenses/trivy/vendor/github.com/magefile/mage,
     /usr/share/licenses/trivy/vendor/github.com/aquasecurity/tml,
     /usr/share/licenses/trivy/vendor/github.com/evanphx,
     /usr/share/licenses/trivy/vendor/github.com/go-git/go-billy,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/feature/ec2/imds,
     /usr/share/licenses/trivy/vendor/github.com/davecgh/go-spew,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/internal,
     /usr/share/licenses/trivy/vendor/github.com/Azure,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/internal/endpoints/v2,
     /usr/share/licenses/trivy/vendor/cloud.google.com/go/internal/version,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/internal, /usr/share/licenses/trivy/vendor/github.com/json-
     iterator,
     /usr/share/licenses/trivy/vendor/github.com/hashicorp/errwrap,
     /usr/share/licenses/trivy/vendor/github.com/OneOfOne,
     /usr/share/licenses/trivy/vendor/github.com/mitchellh/go-wordwrap,
     /usr/share/licenses/trivy/vendor/github.com/gogo/protobuf,
     /usr/share/licenses/trivy/vendor/github.com/stretchr/objx,
     /usr/share/licenses/trivy/vendor/github.com/hashicorp/terraform-json,
     /usr/share/licenses/trivy/vendor/github.com/apparentlymart/go-
     textseg/v15, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/internal/sync/singleflight,
     /usr/share/licenses/trivy/vendor/github.com/containerd/fifo,
     /usr/share/licenses/trivy/vendor/github.com/masahiro331/go-xfs-
     filesystem,
     /usr/share/licenses/trivy/vendor/github.com/containerd/typeurl,
     /usr/share/licenses/trivy/vendor/github.com/sosedoff,
     /usr/share/licenses/trivy/vendor/github.com/kevinburke,
     /usr/share/licenses/trivy/vendor/google.golang.org/genproto,
     /usr/share/licenses/trivy/vendor/github.com/saracen,
     /usr/share/licenses/trivy/vendor/github.com/shibumi/go-pathspec,
     /usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/api,
     /usr/share/licenses/trivy/vendor/github.com/distribution/reference,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/internal/presigned-url,
     /usr/share/licenses/trivy/vendor/github.com/ulikunitz/xz,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go/internal,
     /usr/share/licenses/trivy/vendor/github.com/sagikazarmark/slog-shim,
     /usr/share/licenses/trivy/vendor/cloud.google.com,
     /usr/share/licenses/trivy/vendor/k8s.io/kubectl/pkg/util,
     /usr/share/licenses/trivy/vendor/github.com/pkg,
     /usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis/v2/metro,
     /usr/share/licenses/trivy/vendor/github.com/hashicorp/go-uuid,
     /usr/share/licenses/trivy/vendor/github.com/rcrowley,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/emr, /usr/share/licenses/trivy/vendor/go.uber.org,
     /usr/share/licenses/trivy/vendor/github.com/golang-jwt,
     /usr/share/licenses/trivy/vendor/modernc.org/strutil,
     /usr/share/licenses/trivy/vendor/github.com/cyphar,
     /usr/share/licenses/trivy/vendor/go.etcd.io,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/apigatewayv2,
    
/usr/share/licenses/trivy/vendor/github.com/klauspost/compress/internal/snapref,
     /usr/share/licenses/trivy/vendor/github.com/liamg/jfather,
     /usr/share/licenses/trivy/vendor/modernc.org/ccgo/v3,
     /usr/share/licenses/trivy/vendor/github.com/fsnotify,
    
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked,
     /usr/share/licenses/trivy/vendor/github.com/google/gnostic-models,
     /usr/share/licenses/trivy/vendor/github.com/aquasecurity/trivy-db,
     /usr/share/licenses/trivy/vendor/github.com/golang/groupcache,
     /usr/share/licenses/trivy/vendor/github.com/spf13/viper,
    
/usr/share/licenses/trivy/vendor/google.golang.org/genproto/googleapis/rpc,
     /usr/share/licenses/trivy/vendor/golang.org/x/oauth2,
     /usr/share/licenses/trivy/vendor/github.com/stretchr,
     /usr/share/licenses/trivy/vendor/modernc.org/memory,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/feature/ec2, /usr/share/licenses/trivy/vendor/k8s.io/cli-
     runtime, /usr/share/licenses/trivy/vendor/github.com/Azure/go-
     autorest/autorest/date,
     /usr/share/licenses/trivy/vendor/github.com/Azure/go-autorest/tracing,
     /usr/share/licenses/trivy/vendor/github.com/hashicorp/go-version,
     /usr/share/licenses/trivy/vendor/github.com/bgentry/go-netrc,
     /usr/share/licenses/trivy/vendor/github.com/kevinburke/ssh_config,
     /usr/share/licenses/trivy/vendor/github.com/AdaLogics,
     /usr/share/licenses/trivy/vendor/github.com/lib,
     /usr/share/licenses/trivy/vendor/github.com/russross/blackfriday,
     /usr/share/licenses/trivy/vendor/github.com/apparentlymart,
     /usr/share/licenses/trivy/vendor/github.com/asaskevich,
     /usr/share/licenses/trivy/vendor/github.com/xeipuuv/gojsonreference,
     /usr/share/licenses/trivy/vendor/github.com/go-openapi/analysis,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/internal/checksum,
     /usr/share/licenses/trivy/vendor/github.com/go-openapi/jsonpointer,
     /usr/share/licenses/trivy/vendor/github.com/MakeNowJust/heredoc,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go/internal/sync/singleflight,
     /usr/share/licenses/trivy/vendor/github.com/yuin,
    
/usr/share/licenses/trivy/vendor/github.com/prometheus/common/internal/bitbucket.org,
     /usr/share/licenses/trivy/vendor/github.com/go-git/gcfg,
     /usr/share/licenses/trivy/vendor/sigs.k8s.io/structured-merge-diff/v4,
     /usr/share/licenses/trivy/vendor/github.com/santhosh-
     tekuri/jsonschema/v5,
     /usr/share/licenses/trivy/vendor/github.com/openvex/go-vex,
     /usr/share/licenses/trivy/vendor/github.com/agext,
     /usr/share/licenses/trivy/vendor/k8s.io/component-base,
     /usr/share/licenses/trivy/vendor/github.com/go-redis,
     /usr/share/licenses/trivy/vendor/github.com/emicklei,
     /usr/share/licenses/trivy/vendor/github.com/aws/smithy-
     go/internal/sync, /usr/share/licenses/trivy/vendor/github.com/aws/aws-
     sdk-go-v2/service/dynamodb,
     /usr/share/licenses/trivy/vendor/github.com/google/licenseclassifier,
     /usr/share/licenses/trivy/vendor/k8s.io/utils,
    
/usr/share/licenses/trivy/vendor/github.com/prometheus/common/internal/bitbucket.org/ww,
     /usr/share/licenses/trivy/vendor/github.com/masahiro331/go-
     ext4-filesystem, /usr/share/licenses/trivy/vendor/github.com/go-
     openapi/validate,
     /usr/share/licenses/trivy/vendor/github.com/hashicorp/go-getter,
     /usr/share/licenses/trivy/vendor/github.com/secure-systems-lab,
     /usr/share/licenses/trivy/vendor/github.com/alicebob,
     /usr/share/licenses/trivy/pkg/iac/scanners/helm/test/mysql/charts,
     /usr/share/licenses/trivy/vendor/gopkg.in/yaml.v2,
     /usr/share/licenses/trivy/vendor/github.com/cpuguy83,
     /usr/share/licenses/trivy/vendor/k8s.io/klog,
     /usr/share/licenses/trivy/vendor/github.com/goccy,
     /usr/share/licenses/trivy/vendor/github.com/Masterminds/semver/v3,
     /usr/share/licenses/trivy/vendor/github.com/hashicorp/hcl,
     /usr/share/licenses/trivy/vendor/github.com/sirupsen/logrus,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/ssooidc, /usr/share/licenses/trivy/vendor/github.com/go-
     git/go-git/v5,
    
/usr/share/licenses/trivy/vendor/k8s.io/apimachinery/third_party/forked/golang,
     /usr/share/licenses/trivy/vendor/github.com/remyoudompheng,
     /usr/share/licenses/trivy/vendor/golang.org/x/mod,
     /usr/share/licenses/trivy/vendor/github.com/josharian/intern,
     /usr/share/licenses/trivy/vendor/lukechampine.com/uint128,
     /usr/share/licenses/trivy/vendor/github.com/anchore/go-struct-
     converter, /usr/share/licenses/trivy/vendor/github.com/go-
     openapi/runtime/middleware,
     /usr/share/licenses/trivy/vendor/github.com/apparentlymart/go-cidr,
     /usr/share/licenses/trivy/vendor/github.com/liggitt,
     /usr/share/licenses/trivy/vendor/k8s.io/utils/internal/third_party/forked,
     /usr/share/licenses/trivy/vendor/github.com/tetratelabs,
     /usr/share/licenses/trivy/vendor/modernc.org/mathutil,
     /usr/share/licenses/trivy/vendor/github.com/xanzy/ssh-agent,
     /usr/share/licenses/trivy/vendor/github.com/hashicorp/go-cleanhttp,
     /usr/share/licenses/trivy/vendor/golang.org/x/exp,
     /usr/share/licenses/trivy/pkg/iac/scanners,
     /usr/share/licenses/trivy/vendor/github.com/imdario,
     /usr/share/licenses/trivy/vendor/github.com/skeema/knownhosts,
     /usr/share/licenses/trivy/vendor/github.com/open-policy-
     agent/opa/internal,
     /usr/share/licenses/trivy/vendor/github.com/gorilla/mux,
     /usr/share/licenses/trivy/vendor/github.com/hashicorp/terraform-exec,
     /usr/share/licenses/trivy/vendor/github.com/apparentlymart/go-textseg,
     /usr/share/licenses/trivy/vendor/github.com/sosedoff/gitkit,
     /usr/share/licenses/trivy/vendor/google.golang.org/protobuf,
     /usr/share/licenses/trivy/vendor/github.com/gregjones,
     /usr/share/licenses/trivy/vendor/github.com/cespare/xxhash/v2,
     /usr/share/licenses/trivy/vendor/github.com/Masterminds/sprig,
     /usr/share/licenses/trivy/vendor/github.com/VividCortex,
     /usr/share/licenses/trivy/vendor/github.com/go-openapi/strfmt,
     /usr/share/licenses/trivy/vendor/github.com/prometheus/client_golang,
     /usr/share/licenses/trivy/vendor/github.com/mitchellh/reflectwalk,
     /usr/share/licenses/trivy/vendor/github.com/moby/sys/signal,
    
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com/go-
     yaml/yaml, /usr/share/licenses/trivy/vendor/oras.land/oras-go,
     /usr/share/licenses/trivy/vendor/github.com/gosuri/uitable/util/wordwrap,
     /usr/share/licenses/trivy/vendor/github.com/kylelemons/godebug,
     /usr/share/licenses/trivy/vendor/k8s.io/kube-openapi/pkg,
     /usr/share/licenses/trivy/vendor/golang.org/x/term,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/neptune,
     /usr/share/licenses/trivy/vendor/github.com/aquasecurity/go-gem-
     version, /usr/share/licenses/trivy/vendor/github.com/shibumi,
     /usr/share/licenses/trivy/vendor/github.com/cheggaaa/pb,
     /usr/share/licenses/trivy/vendor/github.com/googleapis/gax-go/v2,
     /usr/share/licenses/trivy/vendor/github.com/mitchellh,
     /usr/share/licenses/trivy/vendor/github.com/aquasecurity/trivy-java-
     db, /usr/share/licenses/trivy/vendor/golang.org/x/xerrors,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/elasticloadbalancingv2,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/workspaces,
     /usr/share/licenses/trivy/vendor/github.com/xlab,
     /usr/share/licenses/trivy/vendor/k8s.io/kubectl/pkg/util/i18n,
     /usr/share/licenses/trivy/vendor/github.com/go-openapi,
     /usr/share/licenses/trivy/vendor/github.com/dlclark/regexp2,
     /usr/share/licenses/trivy/vendor/github.com/hashicorp/go-
     retryablehttp, /usr/share/licenses/trivy/vendor/golang.org/x/text,
     /usr/share/licenses/trivy/vendor/modernc.org/libc/honnef.co/go/netdb,
     /usr/share/licenses/trivy/vendor/github.com/klauspost,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/s3,
     /usr/share/licenses/trivy/vendor/github.com/peterbourgon/diskv,
     /usr/share/licenses/trivy/vendor/github.com/Microsoft/hcsshim,
     /usr/share/licenses/trivy/vendor/modernc.org/cc/v3,
     /usr/share/licenses/trivy/vendor/gopkg.in/cheggaaa,
     /usr/share/licenses/trivy/vendor/github.com/mitchellh/copystructure,
     /usr/share/licenses/trivy/vendor/go.opencensus.io,
     /usr/share/licenses/trivy/vendor/sigs.k8s.io/yaml,
     /usr/share/licenses/trivy/vendor/github.com/go-openapi/jsonreference,
     /usr/share/licenses/trivy/vendor/github.com/exponent-io/jsonpath,
     /usr/share/licenses/trivy/vendor/github.com/mattn/go-shellwords,
     /usr/share/licenses/trivy/vendor/github.com/owenrumney,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go-v2/aws,
     /usr/share/licenses/trivy/vendor/gopkg.in/cheggaaa/pb.v1,
     /usr/share/licenses/trivy/vendor/github.com/hashicorp,
     /usr/share/licenses/trivy/vendor/golang.org/x/crypto,
     /usr/share/licenses/trivy/vendor/github.com/huandu,
     /usr/share/licenses/trivy/vendor/github.com/secure-systems-lab/go-
     securesystemslib,
     /usr/share/licenses/trivy/vendor/github.com/prometheus/client_model,
     /usr/share/licenses/trivy/vendor/github.com/gorilla,
     /usr/share/licenses/trivy/vendor/github.com/ProtonMail/go-crypto,
    
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/net/http,
     /usr/share/licenses/trivy/vendor/github.com/mattn,
     /usr/share/licenses/trivy/vendor/golang.org/x/sync,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/aws/protocol,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go,
     /usr/share/licenses/trivy/vendor/github.com/stretchr/testify,
     /usr/share/licenses/trivy/vendor/github.com/knqyf263,
     /usr/share/licenses/trivy/vendor/github.com/hashicorp/golang-lru,
     /usr/share/licenses/trivy/vendor/github.com/Azure/azure-sdk-for-
     go/sdk/internal,
     /usr/share/licenses/trivy/vendor/github.com/moby/sys/sequential,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/kinesis,
     /usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal,
     /usr/share/licenses/trivy/vendor/github.com/Masterminds,
     /usr/share/licenses/trivy/vendor/github.com/aquasecurity/table,
     /usr/share/licenses/trivy/vendor/github.com/dustin,
     /usr/share/licenses/trivy/vendor/github.com/mattn/go-colorable,
     /usr/share/licenses/trivy/vendor/github.com/prometheus,
     /usr/share/licenses/trivy/vendor/github.com/bgentry,
     /usr/share/licenses/trivy/vendor/github.com/gogo,
     /usr/share/licenses/trivy/vendor/github.com/xlab/treeprint,
     /usr/share/licenses/trivy/vendor/github.com/masahiro331/go-mvn-
     version, /usr/share/licenses/trivy/vendor/github.com/AdamKorcz,
     /usr/share/licenses/trivy/vendor/github.com/jbenet,
     /usr/share/licenses/trivy/vendor/cloud.google.com/go/compute/metadata,
     /usr/share/licenses/trivy/vendor/github.com/containerd/stargz-
     snapshotter, /usr/share/licenses/trivy/vendor/github.com/skeema,
     /usr/share/licenses/trivy/vendor/modernc.org/cc,
     /usr/share/licenses/trivy/vendor/github.com/golang/protobuf,
     /usr/share/licenses/trivy/vendor/github.com/inconshreveable/mousetrap,
     /usr/share/licenses/trivy/vendor/github.com/prometheus/procfs,
     /usr/share/licenses/trivy/vendor/helm.sh,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/internal/s3shared,
     /usr/share/licenses/trivy/vendor/k8s.io/klog/v2,
     /usr/share/licenses/trivy/vendor/github.com/bitnami/go-version,
     /usr/share/licenses/trivy/vendor/github.com/hashicorp/go-multierror,
     /usr/share/licenses/trivy/vendor/github.com/docker/docker,
     /usr/share/licenses/trivy/vendor/github.com/AzureAD/microsoft-
     authentication-library-for-go,
     /usr/share/licenses/trivy/vendor/github.com/pjbgf/sha1cd,
     /usr/share/licenses/trivy/vendor/sigs.k8s.io,
     /usr/share/licenses/trivy/vendor/github.com/in-toto,
     /usr/share/licenses/trivy/vendor/github.com/open-policy-
     agent/opa/internal/edittree,
     /usr/share/licenses/trivy/vendor/golang.org,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/sqs,
     /usr/share/licenses/trivy/vendor/github.com/Microsoft/go-winio,
     /usr/share/licenses/trivy/vendor/github.com/spf13/pflag,
     /usr/share/licenses/trivy/vendor/cloud.google.com/go/storage,
     /usr/share/licenses/trivy/vendor/github.com/xanzy,
     /usr/share/licenses/trivy/vendor/github.com/google/shlex,
     /usr/share/licenses/trivy/vendor/github.com/google/wire,
     /usr/share/licenses/trivy/vendor/github.com/asaskevich/govalidator,
     /usr/share/licenses/trivy/vendor/github.com/gregjones/httpcache,
     /usr/share/licenses/trivy/vendor/github.com/AdaLogics/go-fuzz-headers,
     /usr/share/licenses/trivy/vendor/github.com/googleapis/gax-go,
     /usr/share/licenses/trivy/vendor/gopkg.in/inf.v0,
     /usr/share/licenses/trivy/vendor/github.com/masahiro331,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/internal/sync,
     /usr/share/licenses/trivy/vendor/github.com/emicklei/go-restful,
     /usr/share/licenses/trivy/vendor/github.com/santhosh-tekuri,
     /usr/share/licenses/trivy/vendor/github.com/aquasecurity/trivy-
     kubernetes, /usr/share/licenses/trivy/vendor/github.com/google/go-
     containerregistry,
     /usr/share/licenses/trivy/vendor/github.com/aquasecurity/go-version,
     /usr/share/licenses/trivy/vendor/github.com/opentracing/opentracing-
     go, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go/internal/sync,
    
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc,
     /usr/share/licenses/trivy/vendor/github.com/google/gofuzz,
     /usr/share/licenses/trivy/vendor/github.com/containerd/continuity,
     /usr/share/licenses/trivy/vendor/github.com/Microsoft,
     /usr/share/licenses/trivy/vendor/github.com/open-policy-
     agent/opa/internal/edittree/bitvector,
     /usr/share/licenses/trivy/vendor/github.com/sourcegraph/conc,
     /usr/share/licenses/trivy/vendor/github.com/Intevation/jsonpath,
     /usr/share/licenses/trivy/vendor/github.com/MakeNowJust,
     /usr/share/licenses/trivy/vendor/go.mongodb.org,
     /usr/share/licenses/trivy/vendor/github.com/bitnami,
     /usr/share/licenses/trivy/vendor/github.com/spf13/cast,
     /usr/share/licenses/trivy/vendor/cloud.google.com/go/internal,
     /usr/share/licenses/trivy/vendor/google.golang.org/appengine,
     /usr/share/licenses/trivy/vendor/github.com/mattn/go-isatty,
     /usr/share/licenses/trivy/vendor/k8s.io/kube-
     openapi/pkg/internal/third_party/go-json-experiment/json,
    
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com/qri-
     io, /usr/share/licenses/trivy/vendor/github.com/munnerz,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/internal/endpoints,
     /usr/share/licenses/trivy/vendor/github.com/peterbourgon,
     /usr/share/licenses/trivy/vendor/github.com/rubenv/sql-
     migrate/sqlparse,
     /usr/share/licenses/trivy/vendor/modernc.org/libc/honnef.co/go,
     /usr/share/licenses/trivy/vendor/k8s.io/apimachinery/third_party/forked,
     /usr/share/licenses/trivy/vendor/github.com/spdx/tools-golang,
     /usr/share/licenses/trivy/vendor/github.com/package-url/packageurl-go,
     /usr/share/licenses/trivy/vendor/github.com/yashtewari/glob-
     intersection, /usr/share/licenses/trivy/vendor/go.etcd.io/bbolt,
     /usr/share/licenses/trivy/vendor/github.com/hashicorp/go-safetemp,
     /usr/share/licenses/trivy/vendor/go.opentelemetry.io/otel/sdk,
     /usr/share/licenses/trivy/vendor/github.com/goccy/go-yaml,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go-v2/service,
     /usr/share/licenses/trivy/vendor/github.com/briandowns/spinner,
     /usr/share/licenses/trivy/vendor/github.com/lann/builder,
     /usr/share/licenses/trivy/vendor/cloud.google.com/go/iam,
     /usr/share/licenses/trivy/vendor,
     /usr/share/licenses/trivy/vendor/github.com/BurntSushi,
     /usr/share/licenses/trivy/vendor/github.com/aquasecurity/testdocker,
     /usr/share/licenses/trivy/vendor/github.com/containerd/containerd,
     /usr/share/licenses/trivy/vendor/github.com/mxk/go-flowrate,
     /usr/share/licenses/trivy/vendor/github.com/open-policy-
     agent/opa/internal/gojsonschema,
     /usr/share/licenses/trivy/vendor/github.com/fatih,
     /usr/share/licenses/trivy/vendor/github.com/chai2010,
     /usr/share/licenses/trivy/vendor/github.com/pmezard/go-difflib,
     /usr/share/licenses/trivy/vendor/dario.cat,
     /usr/share/licenses/trivy/vendor/github.com/lann,
     /usr/share/licenses/trivy/vendor/github.com/emirpasic/gods,
     /usr/share/licenses/trivy/vendor/github.com/mailru/easyjson,
     /usr/share/licenses/trivy/vendor/helm.sh/helm,
     /usr/share/licenses/trivy/pkg/iac/scanners/helm/test,
     /usr/share/licenses/trivy/vendor/github.com/jmespath/go-jmespath,
     /usr/share/licenses/trivy/vendor/github.com/google/go-cmp,
     /usr/share/licenses/trivy/vendor/github.com/magefile,
     /usr/share/licenses/trivy/vendor/go.opentelemetry.io/otel/trace,
     /usr/share/licenses/trivy/vendor/github.com/Azure/go-ansiterm,
     /usr/share/licenses/trivy/vendor/github.com/opencontainers/image-spec,
     /usr/share/licenses/trivy/vendor/k8s.io/api,
     /usr/share/licenses/trivy/vendor/golang.org/x/tools,
     /usr/share/licenses/trivy/vendor/github.com/cespare/xxhash,
     /usr/share/licenses/trivy/vendor/github.com/monochromegane,
     /usr/share/licenses/trivy/vendor/modernc.org/ccgo,
     /usr/share/licenses/trivy/pkg/iac/scanners/helm/test/mysql/charts/common,
     /usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml,
     /usr/share/licenses/trivy/vendor/github.com/santhosh-
     tekuri/jsonschema,
     /usr/share/licenses/trivy/vendor/github.com/Azure/azure-sdk-for-go,
     /usr/share/licenses/trivy/vendor/github.com/google,
     /usr/share/licenses/trivy/vendor/github.com/moby/locker,
     /usr/share/licenses/trivy/vendor/github.com/liamg,
     /usr/share/licenses/trivy/vendor/k8s.io/utils/internal,
     /usr/share/licenses/trivy/vendor/github.com/google/btree,
     /usr/share/licenses/trivy/vendor/github.com/aquasecurity/trivy-aws,
     /usr/share/licenses/trivy/vendor/github.com/google/uuid,
    
/usr/share/licenses/trivy/vendor/k8s.io/utils/internal/third_party/forked/golang,
     /usr/share/licenses/trivy/vendor/github.com/magiconair,
     /usr/share/licenses/trivy/vendor/github.com/dustin/go-humanize,
     /usr/share/licenses/trivy/vendor/github.com/knqyf263/go-apk-version,
     /usr/share/licenses/trivy/vendor/github.com/sirupsen,
     /usr/share/licenses/trivy/vendor/github.com/yashtewari,
     /usr/share/licenses/trivy/vendor/github.com/sagikazarmark,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/cloudwatch,
     /usr/share/licenses/trivy/vendor/github.com/go-openapi/errors,
     /usr/share/licenses/trivy/vendor/github.com/cheggaaa,
     /usr/share/licenses/trivy/vendor/github.com/bmatcuk/doublestar,
     /usr/share/licenses/trivy/vendor/github.com/tchap/go-patricia,
     /usr/share/licenses/trivy/vendor/github.com/google/licenseclassifier/v2,
     /usr/share/licenses/trivy/vendor/modernc.org,
     /usr/share/licenses/trivy/vendor/google.golang.org/api,
     /usr/share/licenses/trivy/vendor/github.com/pkg/browser,
     /usr/share/licenses/trivy/vendor/github.com/jmespath,
    
/usr/share/licenses/trivy/vendor/google.golang.org/api/internal/third_party/uritemplates,
    
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/google.golang.org,
     /usr/share/licenses/trivy/vendor/go.opentelemetry.io/otel/metric,
     /usr/share/licenses/trivy/vendor/k8s.io/apiextensions-apiserver,
     /usr/share/licenses/trivy/vendor/github.com/zclconf/go-cty,
     /usr/share/licenses/trivy/vendor/github.com/cloudflare/circl,
     /usr/share/licenses/trivy/vendor/github.com/olekukonko/tablewriter,
     /usr/share/licenses/trivy/vendor/github.com/open-policy-
     agent/opa/internal/providers,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/ecr, /usr/share/licenses/trivy/vendor/github.com/open-
     policy-agent/opa/internal/jwx,
     /usr/share/licenses/trivy/vendor/modernc.org/libc,
     /usr/share/licenses/trivy/vendor/github.com/rubenv,
     /usr/share/licenses/trivy/vendor/github.com/spf13,
     /usr/share/licenses/trivy/vendor/github.com/go-errors,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/internal/endpoint-discovery,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-go-v2,
     /usr/share/licenses/trivy/vendor/go.mongodb.org/mongo-driver,
     /usr/share/licenses/trivy/vendor/github.com/pelletier/go-toml,
     /usr/share/licenses/trivy/vendor/github.com/aquasecurity/go-
     pep440-version, /usr/share/licenses/trivy/vendor/github.com/aws/aws-
     sdk-go-v2/service/athena,
     /usr/share/licenses/trivy/vendor/github.com/modern-go/reflect2,
     /usr/share/licenses/trivy/vendor/go.uber.org/multierr,
     /usr/share/licenses/trivy/vendor/github.com/docker/go-connections,
     /usr/share/licenses/trivy/vendor/github.com/NYTimes/gziphandler,
     /usr/share/licenses/trivy/vendor/github.com/go-gorp,
     /usr/share/licenses/trivy/vendor/github.com/owenrumney/squealer,
     /usr/share/licenses/trivy/pkg/iac/scanners/helm/test/mysql,
     /usr/share/licenses/trivy/vendor/github.com/CycloneDX,
     /usr/share/licenses/trivy/vendor/k8s.io/utils/internal/third_party,
     /usr/share/licenses/trivy/vendor/sigs.k8s.io/structured-merge-diff,
     /usr/share/licenses/trivy/vendor/github.com/Intevation/gval,
     /usr/share/licenses/trivy/vendor/github.com/davecgh,
     /usr/share/licenses/trivy/vendor/github.com/go-gorp/gorp/v3,
     /usr/share/licenses/trivy/vendor/github.com/kballard/go-shellquote,
     /usr/share/licenses/trivy/vendor/github.com/fatih/color,
     /usr/share/licenses/trivy/vendor/github.com/samber,
     /usr/share/licenses/trivy/vendor/github.com/open-policy-
     agent/opa/internal/gqlparser,
     /usr/share/licenses/trivy/vendor/github.com/aquasecurity/trivy-
     policies, /usr/share/licenses/trivy/vendor/github.com/Azure/azure-sdk-
     for-go/sdk/azidentity,
     /usr/share/licenses/trivy/vendor/github.com/xeipuuv/gojsonschema,
     /usr/share/licenses/trivy/vendor/github.com/moby/patternmatcher,
     /usr/share/licenses/trivy/vendor/github.com/json-iterator/go,
     /usr/share/licenses/trivy/vendor/k8s.io/kubectl/pkg,
    
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com/qri-
     io/starlib/util, /usr/share/licenses/trivy/vendor/k8s.io/apiserver,
     /usr/share/licenses/trivy/vendor/github.com/moby/term,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/mq,
     /usr/share/licenses/trivy/vendor/github.com/masahiro331/go-vmdk-
     parser, /usr/share/licenses/trivy/vendor/github.com/Azure/go-
     autorest/autorest/adal,
     /usr/share/licenses/trivy/vendor/github.com/josharian,
     /usr/share/licenses/trivy/vendor/github.com/rivo,
     /usr/share/licenses/trivy/vendor/github.com/zclconf/go-cty-yaml,
     /usr/share/licenses/trivy/vendor/github.com/dgryski/go-rendezvous,
     /usr/share/licenses/trivy/vendor/github.com/owenrumney/go-sarif/v2,
     /usr/share/licenses/trivy/vendor/github.com/liamg/memoryfs,
     /usr/share/licenses/trivy/vendor/github.com/modern-go/concurrent,
     /usr/share/licenses/trivy/vendor/github.com/opentracing,
     /usr/share/licenses/trivy/vendor/github.com/testcontainers/testcontainers-
     go/modules/localstack,
     /usr/share/licenses/trivy/vendor/github.com/BurntSushi/toml,
     /usr/share/licenses/trivy/vendor/github.com/go-errors/errors,
     /usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis/v2/fpconv,
     /usr/share/licenses/trivy/vendor/github.com/containerd/cgroups,
     /usr/share/licenses/trivy/vendor/github.com/gofrs/uuid,
     /usr/share/licenses/trivy/vendor/github.com/csaf-
     poc/csaf_distribution/v3,
     /usr/share/licenses/trivy/vendor/github.com/googleapis,
     /usr/share/licenses/trivy/vendor/github.com/mitchellh/hashstructure/v2,
     /usr/share/licenses/trivy/vendor/go.starlark.net,
     /usr/share/licenses/trivy/vendor/github.com/bmatcuk/doublestar/v4,
     /usr/share/licenses/trivy/vendor/k8s.io/kubectl,
     /usr/share/licenses/trivy/vendor/github.com/xeipuuv/gojsonpointer,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/internal/v4a, /usr/share/licenses/trivy/vendor/lukechampine.com,
     /usr/share/licenses/trivy/vendor/k8s.io/kube-openapi,
     /usr/share/licenses/trivy/vendor/gopkg.in,
     /usr/share/licenses/trivy/vendor/github.com/GoogleCloudPlatform,
     /usr/share/licenses/trivy/vendor/github.com/microsoft/go-rustaudit,
     /usr/share/licenses/trivy/vendor/github.com/docker/go-events,
     /usr/share/licenses/trivy/vendor/github.com/mattn/go-runewidth,
     /usr/share/licenses/trivy/vendor/github.com/gobwas/glob,
     /usr/share/licenses/trivy/vendor/github.com/go-ini,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/docdb, /usr/share/licenses/trivy/vendor/github.com,
     /usr/share/licenses/trivy/vendor/github.com/csaf-poc,
     /usr/share/licenses/trivy/vendor/github.com/docker,
     /usr/share/licenses/trivy/vendor/github.com/Masterminds/sprig/v3,
     /usr/share/licenses/trivy/vendor/github.com/agnivade,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/secretsmanager,
     /usr/share/licenses/trivy/vendor/github.com/opencontainers/runtime-
     spec, /usr/share/licenses/trivy/vendor/go.uber.org/zap,
     /usr/share/licenses/trivy/vendor/github.com/yuin/gopher-lua,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/elasticache,
     /usr/share/licenses/trivy/vendor/k8s.io/kube-
     openapi/pkg/internal/third_party,
     /usr/share/licenses/trivy/vendor/github.com/ulikunitz,
     /usr/share/licenses/trivy/vendor/github.com/go-openapi/swag,
     /usr/share/licenses/trivy/vendor/github.com/emicklei/go-restful/v3,
     /usr/share/licenses/trivy/vendor/cloud.google.com/go,
     /usr/share/licenses/trivy/vendor/github.com/tetratelabs/wazero,
     /usr/share/licenses/trivy/vendor/github.com/aquasecurity/loading,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/ec2, /usr/share/licenses/trivy/vendor/github.com/gosuri,
     /usr/share/licenses/trivy/vendor/github.com/google/s2a-go,
     /usr/share/licenses/trivy/vendor/github.com/pjbgf,
     /usr/share/licenses/trivy/vendor/github.com/monochromegane/go-
     gitignore, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/credentials,
     /usr/share/licenses/trivy/vendor/github.com/VividCortex/ewma,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/aws/protocol/eventstream,
     /usr/share/licenses/trivy/vendor/github.com/go-git,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/iam,
     /usr/share/licenses/trivy/vendor/github.com/oklog/ulid,
     /usr/share/licenses/trivy/vendor/modernc.org/opt,
     /usr/share/licenses/trivy/vendor/github.com/felixge,
    
/usr/share/licenses/trivy/vendor/sigs.k8s.io/kustomize/kyaml/internal/forked/github.com/qri-
     io/starlib, /usr/share/licenses/trivy/vendor/go.opentelemetry.io/otel,
     /usr/share/licenses/trivy/vendor/github.com/Azure/go-
     autorest/autorest,
     /usr/share/licenses/trivy/vendor/github.com/gorilla/websocket,
     /usr/share/licenses/trivy/vendor/github.com/lib/pq,
     /usr/share/licenses/trivy/vendor/github.com/inconshreveable,
     /usr/share/licenses/trivy/vendor/github.com/morikuni,
     /usr/share/licenses/trivy/vendor/github.com/alicebob/miniredis/v2,
     /usr/share/licenses/trivy/vendor/github.com/testcontainers/testcontainers-
     go, /usr/share/licenses/trivy/vendor/github.com/alecthomas,
     /usr/share/licenses/trivy/vendor/github.com/csaf-
     poc/csaf_distribution,
     /usr/share/licenses/trivy/vendor/github.com/testcontainers/testcontainers-
     go/modules, /usr/share/licenses/trivy/vendor/github.com/Azure/go-
     autorest,
    
/usr/share/licenses/trivy/vendor/github.com/klauspost/compress/zstd/internal,
     /usr/share/licenses/trivy/vendor/github.com/AdamKorcz/go-118-fuzz-
     build,
     /usr/share/licenses/trivy/vendor/github.com/Masterminds/squirrel,
     /usr/share/licenses/trivy/vendor/github.com/gofrs,
     /usr/share/licenses/trivy/vendor/github.com/twitchtv,
    
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation/net,
     /usr/share/licenses/trivy/vendor/github.com/containerd/stargz-
     snapshotter/estargz, /usr/share/licenses/trivy/vendor/github.com/go-
     openapi/runtime, /usr/share/licenses/trivy/vendor/golang.org/x/sys,
     /usr/share/licenses/trivy/vendor/github.com/go-logr/stdr,
     /usr/share/licenses/trivy/vendor/github.com/rubenv/sql-migrate,
     /usr/share/licenses/trivy/vendor/github.com/agext/levenshtein,
     /usr/share/licenses/trivy/vendor/github.com/cheggaaa/pb/v3,
     /usr/share/licenses/trivy/vendor/github.com/opencontainers/selinux,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/ebs,
     /usr/share/licenses/trivy/vendor/github.com/knqyf263/nested,
     /usr/share/licenses/trivy/vendor/github.com/lunixbochs,
     /usr/share/licenses/trivy/vendor/github.com/alicebob/gopher-json,
     /usr/share/licenses/trivy/vendor/golang.org/x/net,
     /usr/share/licenses/trivy/vendor/github.com/go-logr,
     /usr/share/licenses/trivy/vendor/github.com/go-redis/redis,
     /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/service/sts,
     /usr/share/licenses/trivy/vendor/github.com/liamg/iamgo,
     /usr/share/licenses/trivy/vendor/github.com/go-git/go-git,
     /usr/share/licenses/trivy/vendor/github.com/NYTimes,
     /usr/share/licenses/trivy/vendor/github.com/open-policy-agent/opa,
     /usr/share/licenses/trivy/vendor/github.com/aquasecurity/go-npm-
     version, /usr/share/licenses/trivy/vendor/github.com/aws/aws-sdk-
     go-v2/config,
     /usr/share/licenses/trivy/vendor/github.com/sagikazarmark/locafero,
     /usr/share/licenses/trivy/vendor/github.com/sigstore,
     /usr/share/licenses/trivy/vendor/github.com/go-ini/ini,
    
/usr/share/licenses/trivy/vendor/go.opentelemetry.io/contrib/instrumentation,
     /usr/share/licenses/trivy/vendor/github.com/aws,
     /usr/share/licenses/trivy/vendor/github.com/package-url,
     /usr/share/licenses/trivy/vendor/github.com/masahiro331/go-ebs-file,
     /usr/share/licenses/trivy/vendor/github.com/quasilyte,
     /usr/share/licenses/trivy/vendor/github.com/containerd/typeurl/v2,
     /usr/share/licenses/trivy/vendor/github.com/jmoiron,
     /usr/share/licenses/trivy/vendor/github.com/knqyf263/go-rpm-version,
     /usr/share/licenses/trivy/vendor/gopkg.in/warnings.v0,
     /usr/share/licenses/trivy/vendor/github.com/moby/sys,
     /usr/share/licenses/trivy/vendor/github.com/fsnotify/fsnotify,
     /usr/share/licenses/trivy/vendor/github.com/mitchellh/go-testing-
     interface,
     /usr/share/licenses/trivy/vendor/github.com/containerd/ttrpc,
     /usr/share/licenses/trivy/vendor/github.com/go-gorp/gorp,
     /usr/share/licenses/trivy/vendor/golang.org/x/time
[x]: %build honors applicable compiler flags or justifies otherwise.
[!]: Package contains no bundled libraries without FPC exception.
     Note: Especially check following dirs for bundled code:
     /home/jamesjer/2272258-trivy/upstream-
     unpacked/Source1/vendor/sigs.k8s.io/kustomize/kyaml/ext,
     /home/jamesjer/2272258-trivy/upstream-
     unpacked/Source1/vendor/k8s.io/client-go/third_party,
     /home/jamesjer/2272258-trivy/upstream-
     unpacked/Source1/vendor/k8s.io/apimachinery/third_party,
     /home/jamesjer/2272258-trivy/upstream-
     unpacked/Source1/vendor/google.golang.org/api/internal/third_party,
     /home/jamesjer/2272258-trivy/upstream-
     unpacked/Source1/vendor/github.com/opentracing/opentracing-go/ext,
     /home/jamesjer/2272258-trivy/upstream-
     unpacked/Source1/vendor/k8s.io/utils/internal/third_party,
     /home/jamesjer/2272258-trivy/upstream-
     unpacked/Source1/vendor/helm.sh/helm/v3/internal/third_party,
     /home/jamesjer/2272258-trivy/upstream-
     unpacked/Source1/vendor/k8s.io/kube-openapi/pkg/internal/third_party,
     /home/jamesjer/2272258-trivy/upstream-
     unpacked/Source1/vendor/github.com/hashicorp/hcl/v2/ext
[x]: Changelog in prescribed format.
[x]: Sources contain only permissible code or content.
[-]: Package contains desktop file if it is a GUI application.
[-]: Development files must be in a -devel package
[x]: Package uses nothing in %doc for runtime.
[x]: Package consistently uses macros (instead of hard-coded directory
     names).
[x]: Package is named according to the Package Naming Guidelines.
[x]: Package does not generate any conflict.
[x]: Package obeys FHS, except libexecdir and /usr/target.
[-]: If the package is a rename of another package, proper Obsoletes and
     Provides are present.
[x]: Requires correct, justified where necessary.
[x]: Spec file is legible and written in American English.
[-]: Package contains systemd file(s) if in need.
[x]: Useful -debuginfo package or justification otherwise.
[x]: Package is not known to require an ExcludeArch tag.
[x]: Package complies to the Packaging Guidelines
[x]: Package successfully compiles and builds into binary rpms on at least
     one supported primary architecture.
[x]: Package installs properly.
[x]: Rpmlint is run on all rpms the build produces.
     Note: There are rpmlint messages (see attachment).
[x]: The License field must be a valid SPDX expression.
[x]: Package does not own files or directories owned by other packages.
[x]: Package uses either %{buildroot} or $RPM_BUILD_ROOT
[x]: Package does not run rm -rf %{buildroot} (or $RPM_BUILD_ROOT) at the
     beginning of %install.
[x]: Macros in Summary, %description expandable at SRPM build time.
[x]: Dist tag is present.
[x]: Package does not contain duplicates in %files.
[x]: Permissions on files are set properly.
[x]: Package must not depend on deprecated() packages.
[x]: Package use %makeinstall only when make install DESTDIR=... doesn't
     work.
[x]: Package is named using only allowed ASCII characters.
[x]: Package does not use a name that already exists.
[x]: Package is not relocatable.
[x]: Sources used to build the package match the upstream source, as
     provided in the spec URL.
[x]: Spec file name must match the spec package %{name}, in the format
     %{name}.spec.
[x]: File names are valid UTF-8.
[x]: Large documentation must go in a -doc subpackage. Large could be size
     (~1MB) or number of files.
     Note: Documentation size is 6382 bytes in 3 files.
[x]: Packages must not store files under /srv, /opt or /usr/local

===== SHOULD items =====

Generic:
[-]: If the source package does not include license text(s) as a separate
     file from upstream, the packager SHOULD query upstream to include it.
[x]: Final provides and requires are sane (see attachments).
[?]: Package functions as described.
[!]: Latest version is packaged.
[x]: Package does not include license text files separate from upstream.
[x]: SourceX tarball generation or download is documented.
     Note: Package contains tarball without URL, check comments
[-]: Sources are verified with gpgverify first in %prep if upstream
     publishes signatures.
     Note: gpgverify is not used.
[x]: %check is present and all tests pass.
[x]: Packages should try to preserve timestamps of original installed
     files.
[x]: Reviewer should test that the package builds in mock.
[x]: Buildroot is not present
[x]: Package has no %clean section with rm -rf %{buildroot} (or
     $RPM_BUILD_ROOT)
[x]: No file requires outside of /etc, /bin, /sbin, /usr/bin, /usr/sbin.
[x]: Fully versioned dependency in subpackages if applicable.
[x]: Packager, Vendor, PreReq, Copyright tags should not be in spec file
[x]: SourceX is a working URL.
[x]: Package should compile and build into binary rpms on all supported
     architectures.
[x]: Spec use %global instead of %define unless justified.

===== EXTRA items =====

Generic:
[x]: Large data in /usr/share should live in a noarch subpackage if package
     is arched.
     Note: Arch-ed rpms have a total of 4454400 bytes in /usr/share

     These are the licenses for the vendored packages.

[x]: Rpmlint is run on debuginfo package(s).
     Note: No rpmlint messages.
[x]: Rpmlint is run on all installed packages.
     Note: There are rpmlint messages (see attachment).
[x]: Spec file according to URL is the same as in SRPM.


-- 
You are receiving this mail because:
You are always notified about changes to this product and component
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2272258

Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202272258%23c3
--
_______________________________________________
package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue




[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite Conditions]     [KDE Users]

  Powered by Linux