{ "schemaVersion": "1.0.0", "base": { "reference": "docker://registry.example.com/app:1.0.0", "digest": "sha256:abc123def456789012345678901234567890123456789012345678901234abcd", "manifestDigest": "sha256:111222333444555666777888999000aaabbbcccdddeeefff000111222333444555" }, "target": { "reference": "docker://registry.example.com/app:1.0.1", "digest": "sha256:def456abc789012345678901234567890123456789012345678901234567efgh", "manifestDigest": "sha256:666777888999000aaabbbcccdddeeefff000111222333444555666777888999000" }, "platform": { "os": "linux", "architecture": "amd64" }, "analysisMode": "elf", "timestamp": "2026-01-13T12:00:00.000000Z", "findings": [ { "path": "/usr/lib/x86_64-linux-gnu/libssl.so.3", "changeType": "modified", "binaryFormat": "elf", "layerDigest": "sha256:aaa111bbb222ccc333ddd444eee555fff666777888999000aaabbbcccdddeeef", "baseHashes": { "buildId": "abc123def456789012345678", "fileHash": "1111111111111111111111111111111111111111111111111111111111111111", "sections": { ".text": { "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "size": 524288, "offset": 4096 }, ".rodata": { "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", "size": 131072, "offset": 528384 } } }, "targetHashes": { "buildId": "def789abc012345678901234", "fileHash": "2222222222222222222222222222222222222222222222222222222222222222", "sections": { ".text": { "sha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc", "size": 524544, "offset": 4096 }, ".rodata": { "sha256": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "size": 131200, "offset": 528640 } } }, "sectionDeltas": [ { "section": ".text", "status": "modified", "baseSha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "targetSha256": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc", "sizeDelta": 256 }, { "section": ".rodata", "status": "modified", "baseSha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb", "targetSha256": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd", "sizeDelta": 128 }, { "section": ".data", "status": "identical", "baseSha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee", "targetSha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee", "sizeDelta": 0 }, { "section": ".symtab", "status": "identical", "baseSha256": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", "targetSha256": "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", "sizeDelta": 0 } ], "confidence": 0.95, "verdict": "patched" }, { "path": "/usr/lib/x86_64-linux-gnu/libcrypto.so.3", "changeType": "modified", "binaryFormat": "elf", "layerDigest": "sha256:aaa111bbb222ccc333ddd444eee555fff666777888999000aaabbbcccdddeeef", "sectionDeltas": [ { "section": ".text", "status": "modified", "sizeDelta": 1024 }, { "section": ".rodata", "status": "identical", "sizeDelta": 0 } ], "confidence": 0.92, "verdict": "patched" }, { "path": "/usr/bin/openssl", "changeType": "modified", "binaryFormat": "elf", "sectionDeltas": [ { "section": ".text", "status": "modified", "sizeDelta": 512 }, { "section": ".data", "status": "modified", "sizeDelta": 64 }, { "section": ".symtab", "status": "modified", "sizeDelta": 128 } ], "confidence": 0.75, "verdict": "unknown" }, { "path": "/app/bin/myapp", "changeType": "modified", "binaryFormat": "elf", "sectionDeltas": [ { "section": ".text", "status": "modified", "sizeDelta": 2048 }, { "section": ".rodata", "status": "modified", "sizeDelta": 512 }, { "section": ".data", "status": "modified", "sizeDelta": 128 } ], "confidence": 0.98, "verdict": "vanilla" } ], "summary": { "totalBinaries": 156, "modified": 4, "unchanged": 152, "added": 0, "removed": 0, "verdicts": { "patched": 2, "vanilla": 1, "unknown": 1, "incompatible": 0 }, "sectionsAnalyzed": [".text", ".rodata", ".data", ".symtab", ".dynsym"], "analysisDurationMs": 12400 }, "metadata": { "toolVersion": "1.0.0", "analysisTimestamp": "2026-01-13T12:00:00.000000Z", "configDigest": "sha256:config123456789abcdef0123456789abcdef0123456789abcdef0123456789ab" } }