
[1mScan results for: image registry1.dso.mil/ironbank-staging/opensource/alpinelinux/alpine@sha256:e366b8d812c20fdd44dfa436a1bd0c7bbc57a3f53e710854dc993a45dc767d37 3efe4c4124f377e07fb4949b74359a4176f15f0a55c2231c2b47e840bc573291[0m
[1mVulnerabilities[0m
+----------------+----------+------+---------+------------+--------+------------+------------+----------------------------------------------------+---------------+
| [1m     CVE      [0m | [1mSEVERITY[0m | [1mCVSS[0m | [1mPACKAGE[0m | [1m VERSION  [0m | [1mSTATUS[0m | [1mPUBLISHED [0m | [1mDISCOVERED[0m | [1m                   DESCRIPTION                    [0m | [1mCUSTOM LABELS[0m |
+----------------+----------+------+---------+------------+--------+------------+------------+----------------------------------------------------+---------------+
| [0mCVE-2025-60876[0m | [33;1mmedium[0m   | [0m6.50[0m | [0mbusybox[0m | [0m1.37.0-r14[0m | [0m[0m       | [0m> 7 months[0m | [0m< 1 hour[0m   | [0mBusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF[0m  | [0m[0m              |
|                |          |      |         |            |        |            |            | (0x0A) and other C0 control bytes in the HTTP      |               |
|                |          |      |         |            |        |            |            | request-target (path/query), allowing the request  |               |
|                |          |      |         |            |        |            |            | line...                                            |               |
+----------------+----------+------+---------+------------+--------+------------+------------+----------------------------------------------------+---------------+

[1mVulnerabilities found for image registry1.dso.mil/ironbank-staging/opensource/alpinelinux/alpine@sha256:e366b8d812c20fdd44dfa436a1bd0c7bbc57a3f53e710854dc993a45dc767d37: total - 1, critical - 0, high - 0, medium - 1, low - 0[0m
[1mCustom Labels [maintainer:ironbank@dsop.io mil.dso.ironbank.image.keywords:base,os,alpine mil.dso.ironbank.product.name:alpine mil.dso.ironbank.project.id:18012 org.opencontainers.image.revision:4d96ab7be1afe15ad4b7a185c064b61fb0cd83b0 org.opencontainers.image.source:https://repo1.dso.mil/dsop/opensource/alpinelinux/alpine_3.21 org.opencontainers.image.version:3.21 org.opencontainers.image.created:2026-06-16 20:07:28 org.opencontainers.image.description:Alpine Linux is a security-oriented, lightweight Linux distribution based on musl libc and busybox. org.opencontainers.image.title:alpine org.opencontainers.image.url:https://www.alpinelinux.org/ mil.dso.ironbank.image.parent: mil.dso.ironbank.image.type:opensource mil.dso.ironbank.os-type:alpine321-container org.opencontainers.image.licenses:MIT org.opencontainers.image.vendor:Iron Bank][0m
[1mVulnerability threshold check results: PASS[0m

[1mCompliance Issues[0m
+----------+----------------------------------------------+---------------+
| [1mSEVERITY[0m | [1m                DESCRIPTION                 [0m | [1mCUSTOM LABELS[0m |
+----------+----------------------------------------------+---------------+
| [91;1mhigh[0m     | [0mImage should be created with a non-root user[0m | [0m[0m              |
+----------+----------------------------------------------+---------------+

[1mCompliance found for image registry1.dso.mil/ironbank-staging/opensource/alpinelinux/alpine@sha256:e366b8d812c20fdd44dfa436a1bd0c7bbc57a3f53e710854dc993a45dc767d37: total - 1, critical - 0, high - 1, medium - 0, low - 0[0m
[1mCompliance threshold check results: PASS[0m
Link to the results in Console: http://twistlock-console.twistlock.svc.cluster.local:8081/#!/monitor/vulnerabilities/images/ci?search=3efe4c4124f377e07fb4949b74359a4176f15f0a55c2231c2b47e840bc573291
Wrote scan results to ci-artifacts/scan-results/twistlock/amd64/twistlock_cve.json
