notify doctors work, audit work, new product advisory sprints

2026-01-13 08:36:29 +02:00
parent b8868a5f13
commit 9ca7cb183e
343 changed files with 24492 additions and 3544 deletions
--- a/docs/examples/binary-diff/sample-outputs/diff.json
+++ b/docs/examples/binary-diff/sample-outputs/diff.json
@@ -0,0 +1,179 @@
+{
+  "schemaVersion": "1.0.0",
+  "base": {
+    "reference": "docker://registry.example.com/app:1.0.0",
+    "digest": "sha256:abc123def456789012345678901234567890123456789012345678901234abcd",
+    "manifestDigest": "sha256:111222333444555666777888999000aaabbbcccdddeeefff000111222333444555"
+  },
+  "target": {
+    "reference": "docker://registry.example.com/app:1.0.1",
+    "digest": "sha256:def456abc789012345678901234567890123456789012345678901234567efgh",
+    "manifestDigest": "sha256:666777888999000aaabbbcccdddeeefff000111222333444555666777888999000"
+  },
+  "platform": {
+    "os": "linux",
+    "architecture": "amd64"
+  },
+  "analysisMode": "elf",
+  "timestamp": "2026-01-13T12:00:00.000000Z",
+  "findings": [
+    {
+      "path": "/usr/lib/x86_64-linux-gnu/libssl.so.3",
+      "changeType": "modified",
+      "binaryFormat": "elf",
+      "layerDigest": "sha256:aaa111bbb222ccc333ddd444eee555fff666777888999000aaabbbcccdddeeef",
+      "baseHashes": {
+        "buildId": "abc123def456789012345678",
+        "fileHash": "1111111111111111111111111111111111111111111111111111111111111111",
+        "sections": {
+          ".text": {
+            "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+            "size": 524288,
+            "offset": 4096
+          },
+          ".rodata": {
+            "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+            "size": 131072,
+            "offset": 528384
+          }
+        }
+      },
+      "targetHashes": {
+        "buildId": "def789abc012345678901234",
+        "fileHash": "2222222222222222222222222222222222222222222222222222222222222222",
+        "sections": {
+          ".text": {
+            "sha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+            "size": 524544,
+            "offset": 4096
+          },
+          ".rodata": {
+            "sha256": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+            "size": 131200,
+            "offset": 528640
+          }
+        }
+      },
+      "sectionDeltas": [
+        {
+          "section": ".text",
+          "status": "modified",
+          "baseSha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+          "targetSha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+          "sizeDelta": 256
+        },
+        {
+          "section": ".rodata",
+          "status": "modified",
+          "baseSha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+          "targetSha256": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+          "sizeDelta": 128
+        },
+        {
+          "section": ".data",
+          "status": "identical",
+          "baseSha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+          "targetSha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+          "sizeDelta": 0
+        },
+        {
+          "section": ".symtab",
+          "status": "identical",
+          "baseSha256": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+          "targetSha256": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
+          "sizeDelta": 0
+        }
+      ],
+      "confidence": 0.95,
+      "verdict": "patched"
+    },
+    {
+      "path": "/usr/lib/x86_64-linux-gnu/libcrypto.so.3",
+      "changeType": "modified",
+      "binaryFormat": "elf",
+      "layerDigest": "sha256:aaa111bbb222ccc333ddd444eee555fff666777888999000aaabbbcccdddeeef",
+      "sectionDeltas": [
+        {
+          "section": ".text",
+          "status": "modified",
+          "sizeDelta": 1024
+        },
+        {
+          "section": ".rodata",
+          "status": "identical",
+          "sizeDelta": 0
+        }
+      ],
+      "confidence": 0.92,
+      "verdict": "patched"
+    },
+    {
+      "path": "/usr/bin/openssl",
+      "changeType": "modified",
+      "binaryFormat": "elf",
+      "sectionDeltas": [
+        {
+          "section": ".text",
+          "status": "modified",
+          "sizeDelta": 512
+        },
+        {
+          "section": ".data",
+          "status": "modified",
+          "sizeDelta": 64
+        },
+        {
+          "section": ".symtab",
+          "status": "modified",
+          "sizeDelta": 128
+        }
+      ],
+      "confidence": 0.75,
+      "verdict": "unknown"
+    },
+    {
+      "path": "/app/bin/myapp",
+      "changeType": "modified",
+      "binaryFormat": "elf",
+      "sectionDeltas": [
+        {
+          "section": ".text",
+          "status": "modified",
+          "sizeDelta": 2048
+        },
+        {
+          "section": ".rodata",
+          "status": "modified",
+          "sizeDelta": 512
+        },
+        {
+          "section": ".data",
+          "status": "modified",
+          "sizeDelta": 128
+        }
+      ],
+      "confidence": 0.98,
+      "verdict": "vanilla"
+    }
+  ],
+  "summary": {
+    "totalBinaries": 156,
+    "modified": 4,
+    "unchanged": 152,
+    "added": 0,
+    "removed": 0,
+    "verdicts": {
+      "patched": 2,
+      "vanilla": 1,
+      "unknown": 1,
+      "incompatible": 0
+    },
+    "sectionsAnalyzed": [".text", ".rodata", ".data", ".symtab", ".dynsym"],
+    "analysisDurationMs": 12400
+  },
+  "metadata": {
+    "toolVersion": "1.0.0",
+    "analysisTimestamp": "2026-01-13T12:00:00.000000Z",
+    "configDigest": "sha256:config123456789abcdef0123456789abcdef0123456789abcdef0123456789ab"
+  }
+}