From 4ab3ea9799191e070e7cda450bd1d6bc2e35d582 Mon Sep 17 00:00:00 2001 From: Ashley Song <165685692+ashsong-nv@users.noreply.github.com> Date: Tue, 12 Nov 2024 13:27:23 -0500 Subject: [PATCH] Merge `ashsong_develop` branch into `main` (#3) This PR merges fixes and improvements from the `ashong_develop` branch into `main`. - Remove unused data files, including SBOMs, input messages, and outdated validation file - Add warning to quick start notebook about non-deterministic outputs - Remove unnecessary `debug_input` stage in `input.py` - Major improvements to `README` to address developer review feedback --- README.md | 199 +++--- configs/from_file.json | 2 +- .../rapidsai:23.08-cuda11.8-py3.10.json | 282 -------- .../rapidsai:24.06-cuda12.0-py3.9.json | 247 ------- .../morpheus/morpheus:23.07-runtime.sbom | 494 -------------- .../morpheus/morpheus:23.11-runtime.sbom | 465 ------------- .../morpheus/morpheus:24.03-runtime.sbom | 493 -------------- .../morpheus/morpheus:v23.07.03-runtime.sbom | 502 -------------- .../rapidsai/base:23.08-cuda11.8-py3.10.sbom | 621 ------------------ .../rapidsai/base:24.06-cuda12.2-py3.10.sbom | 599 ----------------- .../cve_validation_formatted_openai.json | 147 ----- quick_start/quick_start_guide.ipynb | 17 +- src/cve/pipeline/input.py | 11 - 13 files changed, 126 insertions(+), 3953 deletions(-) delete mode 100644 data/input_messages/rapidsai:23.08-cuda11.8-py3.10.json delete mode 100644 data/input_messages/rapidsai:24.06-cuda12.0-py3.9.json delete mode 100644 data/sboms/nvcr.io/nvidia/morpheus/morpheus:23.07-runtime.sbom delete mode 100644 data/sboms/nvcr.io/nvidia/morpheus/morpheus:23.11-runtime.sbom delete mode 100644 data/sboms/nvcr.io/nvidia/morpheus/morpheus:24.03-runtime.sbom delete mode 100644 data/sboms/nvcr.io/nvidia/morpheus/morpheus:v23.07.03-runtime.sbom delete mode 100644 data/sboms/nvcr.io/nvidia/rapidsai/base:23.08-cuda11.8-py3.10.sbom delete mode 100644 data/sboms/nvcr.io/nvidia/rapidsai/base:24.06-cuda12.2-py3.10.sbom delete mode 100644 data/validation_output/cve_validation_formatted_openai.json diff --git a/README.md b/README.md index 6231503..545fdd4 100644 --- a/README.md +++ b/README.md @@ -30,28 +30,29 @@ limitations under the License. - [Key components](#key-components) - [NIM microservices](#nim-microservices) - [Getting started](#getting-started) - - [Prerequisites](#prerequisites-1) - - [Install system requirements](#install-system-requirements) - - [Obtain API keys](#obtain-api-keys) - - [Set up the workflow repository](#set-up-the-workflow-repository) - - [Environment setup](#environment-setup) - - [Set up the environment file](#set-up-the-environment-file) - - [Build the Docker containers](#build-the-docker-containers) + - [Install system requirements](#install-system-requirements) + - [Obtain API keys](#obtain-api-keys) + - [Set up the workflow repository](#set-up-the-workflow-repository) + - [Set up the environment file](#set-up-the-environment-file) + - [Authenticate Docker with NGC](#authenticate-docker-with-ngc) + - [Build the Docker containers (optional)](#build-the-docker-containers-optional) + - [Start the Docker containers](#start-the-docker-containers) + - [Using NVIDIA-hosted NIMs](#using-nvidia-hosted-nims) + - [Using self-hosted NIMs](#using-self-hosted-nims) - [Running the workflow](#running-the-workflow) - - [Run the workflow using NVIDIA-hosted NIMs](#run-the-workflow-using-nvidia-hosted-nims) - - [Run the workflow using self-hosted NIMs](#run-the-workflow-using-self-hosted-nims) - - [Starting the workflow](#starting-the-workflow) - [From the quick start user guide notebook](#from-the-quick-start-user-guide-notebook) - [From the command line](#from-the-command-line) - - [Command line interface](#command-line-interface) - - [Command line interface (CLI)](#command-line-interface-cli) + - [Configuration files](#configuration-files) + - [Example command: `from_manual.json`](#example-command-from_manualjson) + - [Reviewing the output](#reviewing-the-output) + - [Example command: `from_http.json`](#example-command-from_httpjson) + - [Command line interface (CLI) reference](#command-line-interface-cli-reference) - [Overriding options on the command line](#overriding-options-on-the-command-line) - [Example 1: Override `max_retries`](#example-1-override-max_retries) - [Example 2: Override input type](#example-2-override-input-type) - [Example 3: Combine multiple overrides](#example-3-combine-multiple-overrides) - [Full list of options](#full-list-of-options) - - [Configuration files](#configuration-files) - - [Configuration file breakdown](#configuration-file-breakdown) + - [Configuration file reference](#configuration-file-reference) - [NGINX caching server](#nginx-caching-server) - [Customizing the Workflow](#customizing-the-workflow) - [Customizing the input](#customizing-the-input) @@ -99,13 +100,15 @@ This blueprint is for: - Details can be found in this later section: [Obtain API keys](#obtain-api-keys) ## Hardware requirements -The vulnerability analysis pipeline supports the following hardware: +Below are the hardware requirements for each component of the vulnerability analysis pipeline. -- **Pipeline operation**: 1x L40 GPU recommended -- **LLM NIM**: [Meta Llama 3 70B Instruct Support Matrix](https://docs.nvidia.com/nim/large-language-models/latest/support-matrix.html#meta-llama-3-70b-instruct) (Optional) +The overall hardware requirements depend on selected pipeline configuration. At a minimum, the hardware requirements for pipeline operation must be met. The LLM NIM and Embedding NIM hardware requirements only need to be met if self-hosting these components. See [Using self-hosted NIMs](#using-self-hosted-nims), [Customizing the LLM models](#customizing-the-llm-models) and [Customizing the embedding model](#customizing-the-embedding-model) sections for more information. + +- **(Required) Pipeline operation**: 1x L40 GPU or similar recommended +- **(Optional) LLM NIM**: [Meta Llama 3 70B Instruct Support Matrix](https://docs.nvidia.com/nim/large-language-models/latest/support-matrix.html#meta-llama-3-70b-instruct) - For improved paralleled performance, we recommend 8x or more H100s for LLM inference. - The pipeline can share the GPU with the LLM NIM, but it is recommended to have a separate GPU for the LLM NIM for optimal performance. -- **Embedding NIM**: [NV-EmbedQA-E5-v5 Support Matrix](https://docs.nvidia.com/nim/nemo-retriever/text-embedding/latest/support-matrix.html#nv-embedqa-e5-v5) (Optional) +- **(Optional) Embedding NIM**: [NV-EmbedQA-E5-v5 Support Matrix](https://docs.nvidia.com/nim/nemo-retriever/text-embedding/latest/support-matrix.html#nv-embedqa-e5-v5) - The pipeline can share the GPU with the Embedding NIM, but it is recommended to have a separate GPU for the Embedding NIM for optimal performance. @@ -141,21 +144,21 @@ The detailed architecture consists of the following components: - **Security scan result**: The workflow begins by inputting the identified CVEs from a container security scan as input. This can be generated from a container image scanner of your choosing such as [Anchore](https://anchore.com/container-vulnerability-scanning/). -- **PreProcessing**: All the below actions are encapsulated by multiple Morpheus preprocessing pipeline stages to prepare the data for use with the LLM engine. (See `src/cve/pipeline/input.py`.) +- **PreProcessing**: All the below actions are encapsulated by multiple Morpheus preprocessing pipeline stages to prepare the data for use with the LLM engine. (See [`src/cve/pipeline/input.py`](./src/cve/pipeline/input.py).) - **Code repository and documentation**: The blueprint pulls code repositories and documentation provided by the user. These repositories are processed through an embedding model, and the resulting embeddings are stored in vector databases (VDBs) for the agent's reference. - **Vector database**: Various vector databases can be used for the embedding. We currently utilize FAISS for the VDB because it does not require an external service and is simple to use. Any vector store can be used, such as NVIDIA cuVS, which would provide accelerated indexing and search. - **Lexical search**: As an alternative, a lexical search is available for use cases where creating an embedding is impractical due to a large number of source files in the target container. - **Software Bill of Materials (SBOM)**: The provided SBOM document is processed into a software-ingestible format for the agent's reference. SBOMs can be generated for any container using the open-source tool [Syft](https://github.com/anchore/syft). - **Web vulnerability intel**: The system collects detailed information about each CVE through web scraping and data retrieval from various public security databases, including GHSA, Redhat, Ubuntu, and NIST CVE records, as well as tailored threat intelligence feeds. -- **Core LLM engine**: (See `src/cve/pipeline/engine.py`.) - - **Checklist generation**: Leveraging the gathered information about each vulnerability, the checklist generation node creates a tailored, context-sensitive task checklist designed to guide the impact analysis. (See `src/cve/nodes/cve_checklist_node.py`.) +- **Core LLM engine**: (See [`src/cve/pipeline/engine.py`](./src/cve/pipeline/engine.py).) + - **Checklist generation**: Leveraging the gathered information about each vulnerability, the checklist generation node creates a tailored, context-sensitive task checklist designed to guide the impact analysis. (See [`src/cve/nodes/cve_checklist_node.py`](./src/cve/nodes/cve_checklist_node.py).) - - **Task agent**: At the core of the process is an LLM agent iterating through each item in the checklist. For each item, the agent answers the question using a set of tools which provide information about the target container. The tools tap into various data sources (web intel, vector DB, search etc.), retrieving relevant information to address each checklist item. The loop continues until the agent resolves each checklist item satisfactorily. (See `src/cve/nodes/cve_langchain_agent_node.py`.) + - **Task agent**: At the core of the process is an LLM agent iterating through each item in the checklist. For each item, the agent answers the question using a set of tools which provide information about the target container. The tools tap into various data sources (web intel, vector DB, search etc.), retrieving relevant information to address each checklist item. The loop continues until the agent resolves each checklist item satisfactorily. (See [`src/cve/nodes/cve_langchain_agent_node.py`](./src/cve/nodes/cve_langchain_agent_node.py).) - - **Summarization**: Once the agent has compiled findings for each checklist item, these results are condensed by the summarization node into a concise, human-readable paragraph. (See `src/cve/nodes/cve_summary_node.py`.) + - **Summarization**: Once the agent has compiled findings for each checklist item, these results are condensed by the summarization node into a concise, human-readable paragraph. (See [`src/cve/nodes/cve_summary_node.py`](./src/cve/nodes/cve_summary_node.py).) - - **Justification Assignment**: Given the summary, the justification status categorization node then assigns a resulting VEX (Vulnerability Exploitability eXchange) status to the CVE. We provided a set of predefined categories for the model to choose from. (See `src/cve/nodes/cve_justification_node.py`.) If the CVE is deemed exploitable, the reasoning category is "vulnerable." If it is not exploitable, there are 10 different reasoning categories to explain why the vulnerability is not exploitable in the given environment: + - **Justification Assignment**: Given the summary, the justification status categorization node then assigns a resulting VEX (Vulnerability Exploitability eXchange) status to the CVE. We provided a set of predefined categories for the model to choose from. (See [`src/cve/nodes/cve_justification_node.py`](./src/cve/nodes/cve_justification_node.py).) If the CVE is deemed exploitable, the reasoning category is "vulnerable." If it is not exploitable, there are 10 different reasoning categories to explain why the vulnerability is not exploitable in the given environment: - `false_positive` - `code_not_present` - `code_not_reachable` @@ -167,10 +170,10 @@ The detailed architecture consists of the following components: - `protected_by_perimeter` - `protected_by_mitigating_control` -- **Output**: At the end of the pipeline run, an output file including all the gathered and generated information is prepared for security analysts for a final review. (See `src/cve/pipeline/output.py`.) +- **Output**: At the end of the pipeline run, an output file including all the gathered and generated information is prepared for security analysts for a final review. (See [`src/cve/pipeline/output.py`](./src/cve/pipeline/output.py).) - > [!WARNING] - > All output should be vetted by a security analyst before being used in a cybersecurity application. +> [!WARNING] +> All output should be vetted by a security analyst before being used in a cybersecurity application. ### NIM microservices The Morpheus SDK can utilize various embedding model and LLM endpoints, and is optimized to use [NVIDIA NIM microservices](https://developer.nvidia.com/nim) (NIMs). NIMs are pre-built containers for the latest AI models that provide industry-standard APIs and optimized inference for the given model and hardware. Using NIMs enables easy deployment and scaling for self-hosted model inference. @@ -185,15 +188,13 @@ The current default embedding NIM model is `nv-embedqa-e5-v5`, which was selecte ## Getting started -### Prerequisites - -#### Install system requirements +### Install system requirements * [git](https://git-scm.com/) * [git-lfs](https://git-lfs.com/) * Since the workflow uses an [NVIDIA Morpheus](https://developer.nvidia.com/morpheus-cybersecurity) pipeline, the [Morpheus requirements](https://docs.nvidia.com/morpheus/getting_started.html#requirements) also need to be installed. -#### Obtain API keys +### Obtain API keys To run the pipeline you need to obtain API keys for the following APIs. These will be needed in a later step to [Set up the environment file](#set-up-the-environment-file). - **Required API Keys**: These APIs are required by the pipeline to retrieve vulnerability information from databases, perform online searches, and execute LLM queries. @@ -219,8 +220,7 @@ To run the pipeline you need to obtain API keys for the following APIs. These wi The workflow can be configured to use other LLM services as well, see the [Customizing the LLM models](#customizing-the-llm-models) section for more info. - -#### Set up the workflow repository +### Set up the workflow repository Clone the repository and set an environment variable for the path to the repository root. @@ -230,9 +230,7 @@ export REPO_ROOT=$(git rev-parse --show-toplevel) All commands are run from the repository root unless otherwise specified. -### Environment setup - -#### Set up the environment file +### Set up the environment file First we need to create an `.env` file in the `REPO_ROOT`, and add the API keys you created in the earlier [Obtain API keys](#obtain-api-keys) step. @@ -251,8 +249,20 @@ These variables need to be exported to the environment: export $(cat .env | xargs) ``` -#### Build the Docker containers -Next we need to build the necessary containers. +### Authenticate Docker with NGC + +In order to pull images required by the workflow from NGC, you must first authenticate Docker with NGC. You can use same the NVIDIA API Key obtained in the [Obtain API keys](#obtain-api-keys) section (saved as `NVIDIA_API_KEY` in the `.env` file). + +```bash +$ docker login nvcr.io +Username: $oauthtoken +Password: < Insert NVIDIA API Key here > +``` + +### Build the Docker containers (optional) +If no customizations were made to the source code, you can proceed to [Starting the Docker containers](#start-the-docker-containers), where the `docker compose up` step will automatically pull the pre-built Blueprint Docker container from NGC: `nvcr.io/nvidia/morpheus/morpheus-vuln-analysis:24.10`. + +If any customizations are made to the source code, we will need to build the container from source using the following command: ```bash cd $REPO_ROOT @@ -260,12 +270,12 @@ cd $REPO_ROOT docker compose build morpheus-vuln-analysis ``` -## Running the workflow +### Start the Docker containers -To run the workflow, there are two supported configurations. Both configurations utilize `docker compose` to start the service: -1. [**NVIDIA-hosted NIMs**](#run-the-workflow-using-nvidia-hosted-nims): The workflow is run with all computation being performed by NIMs hosted in NVIDIA GPU Cloud. This is the default configuration and is recommended for most users getting started with the workflow. +There are two supported configurations for starting the Docker containers. Both configurations utilize `docker compose` to start the service: +1. [**NVIDIA-hosted NIMs**](#using-nvidia-hosted-nims): The workflow is run with all computation being performed by NIMs hosted in NVIDIA GPU Cloud. This is the default configuration and is **recommended** for most users getting started with the workflow. 1. When using NVIDIA-hosted NIMs, only the `docker-compose.yml` configuration file is required. -2. [**Self-hosted NIMs**](#run-the-workflow-using-self-hosted-nims): The workflow is run using self-hosted LLM NIM services. This configuration is more advanced and requires additional setup to run the NIM services locally. +2. [**Self-hosted NIMs**](#using-self-hosted-nims): The workflow is run using self-hosted LLM NIM services. This configuration is more advanced and requires additional setup to run the NIM services locally. 1. When using self-hosted NIMs, both the `docker-compose.yml` and `docker-compose.nim.yml` configuration files are required. These two configurations are illustrated by the following diagram: @@ -278,14 +288,14 @@ Before beginning, ensure that the environment variables are set correctly. Both >[!TIP] The container binds to port 8080 by default. If you encounter a port collision error (e.g. `Bind for 0.0.0.0:8080 failed: port is already allocated`), you can set the environment variable `NGINX_HOST_HTTP_PORT` to specify a custom port before launching `docker compose`. For example: +> +> ```bash +> export NGINX_HOST_HTTP_PORT=8081 +> +> #... docker compose commands... +> ``` -```bash -export NGINX_HOST_HTTP_PORT=8081 - -#... docker compose commands... -``` - -#### Run the workflow using NVIDIA-hosted NIMs +#### Using NVIDIA-hosted NIMs When running the workflow in this configuration, only the `morpheus-vuln-analysis` service needs to be started since we will utilize NIMs hosted by NVIDIA. The `morpheus-vuln-analysis` container can be started using the following command: ```bash @@ -298,9 +308,14 @@ The command above starts the container in the background using the detached mode docker compose ps ``` -Continue to the [Starting the workflow](#starting-the-workflow) section to run the workflow. +Next, we need to attach to the `morpheus-vuln-analysis` container to access the environment where the workflow [command line tool](#from-the-command-line) and dependencies are installed. +```bash +docker compose exec -it morpheus-vuln-analysis bash +``` -#### Run the workflow using self-hosted NIMs +Continue to the [Running the workflow](#running-the-workflow) section to run the workflow. + +#### Using self-hosted NIMs To run the workflow using self-hosted NIMs, we use a second `docker compose` configuration file, `docker-compose.nim.yml`, which adds the self-hosted NIM services to the workflow. Utilizing a second configuration file allows for easy switching between the two configurations while keeping the base configuration file the same. >[!NOTE] @@ -318,11 +333,16 @@ cd ${REPO_ROOT} docker compose -f docker-compose.yml -f docker-compose.nim.yml up -d ``` -Continue to the [Starting the workflow](#starting-the-workflow) section to run the workflow. +Next, we need to attach to the `morpheus-vuln-analysis` container to access the environment where the workflow [command line tool](#from-the-command-line) and dependencies are installed. +```bash +docker compose -f docker-compose.yml -f docker-compose.nim.yml exec -it morpheus-vuln-analysis bash +``` + +Continue to the [Running the workflow](#running-the-workflow) section to run the workflow. -### Starting the workflow +## Running the workflow -Once the services have been started, the workflow can be run using an [interactive notebook](#from-the-quick-start-user-guide-notebook) (for a guided, step-by-step process) or from the [command line](#from-the-command-line). +Once the services have been started, the workflow can be run using either the [Quick start user guide notebook](#from-the-quick-start-user-guide-notebook) for an interactive step-by-step process, or directly from the [command line](#from-the-command-line). ### From the quick start user guide notebook To run the workflow in an interactive notebook, connect to the Jupyter notebook at http://localhost:8888/lab. Once connected, navigate to the notebook located at [`quick_start/quick_start_guide.ipynb`](./quick_start/quick_start_guide.ipynb) and follow the instructions. @@ -336,34 +356,34 @@ To run the workflow in an interactive notebook, connect to the Jupyter notebook ### From the command line -To run the workflow from the command line, you can use the provided CLI tool. In order to use the CLI tool, we must first attach to the `morpheus-vuln-analysis` container: +The vulnerability analysis workflow is designed to be run using the command line tool installed within the `morpheus-vuln-analysis` container. This section describes how get started using the command line tool. For more detailed information about the command line interface, see the [Command line interface (CLI) reference](#command-line-interface-cli-reference) section. -```bash -docker compose exec -it morpheus-vuln-analysis bash -``` +#### Configuration files -If you are using self-hosted NIMs, make sure to use both configuration files: -```bash -docker compose -f docker-compose.yml -f docker-compose.nim.yml exec -it morpheus-vuln-analysis bash -``` +The pipeline settings are controlled using configuration files. These are JSON files that define various pipeline settings, such as the input data, the LLM models used, and the output format. Several example configuration files are located in the [`configs/`](./configs/) folder. A brief description of each configuration file is as follows: +- `from_manual.json`: This configuration file starts the pipeline using manually provided data. All pipeline inputs are manually specified directly in the configuration file. +- `from_file.json`: This configuration file starts the pipeline using data fetched from a file. The pipeline fetches the input data from a file and processes it. This is very similar to `from_manual.json`, but the input data is read from a file instead of being directly specified in the config file. +- `from_http.json`: This configuration file starts an HTTP server to turn the workflow into a microservice. The pipeline fetches the input data from an HTTP source and processes it. To trigger the pipeline, you can send a POST request to the `/scan` endpoint with the input data in the request body. The pipeline will process the input data. + +There are two main modalities that the pipeline can be run in. When using the `from_file.json` or `from_manual.json` configuration files, the pipeline will process the input data, then it will shut down after it is completed. This modality is suitable for rapid iteration during testing and development. When using `from_http.json`, the pipeline is turned into a microservice which will run indefinitely, which is suitable for using in production. -From here, you can run the workflow using the provided CLI tool outlined in the [following section](#command-line-interface). +For a breakdown of the configuration file and available options, see the [Configuration file reference](#configuration-file-reference) section. To customize the configuration files for your use case, see [Customizing the workflow](#customizing-the-workflow). -### Command line interface +#### Example command: `from_manual.json` -The pipeline can be started using the following command: +The workflow pipeline can be started using the following command: ```bash python src/main.py --log_level DEBUG \ cve pipeline --config_file=${CONFIG_FILE} ``` -Where `${CONFIG_FILE}` is the path to the configuration file you want to use. For example, to run the pipeline with the `from_manual.json` configuration file, you would run: +In the command, `${CONFIG_FILE}` is the path to the configuration file you want to use. For example, to run the pipeline with the `from_manual.json` configuration file, you would run: ```bash python src/main.py --log_level DEBUG \ cve pipeline --config_file=configs/from_manual.json ``` -This pipeline will run to completion and the output is stashed by default at `.tmp/output.json`. Sample logs are as follows: +When the pipeline runs to completion, you should see logs similar to the following: ``` Message elapsed time: 28.240849 sec Vulnerability 'GHSA-3f63-hfp8-52jq' affected status: FALSE. Label: code_not_reachable @@ -379,14 +399,26 @@ LLM[Complete]: 7 messages [00:42, 6.05s/ messages] ====Pipeline Complete==== Total time: 45.61 sec Pipeline runtime: 42.69 sec - ``` -In addition to the raw JSON output in `.tmp/output.json`, you can also view a Markdown-formatted report for each CVE in the `.tmp/vulnerability_markdown_reports directory`. - > [!WARNING] > The output you receive from the pipeline may not be identical as the output in the example above. The output may vary due to the non-deterministic nature of the LLM models. +##### Reviewing the output + +The full pipeline JSON output is stashed by default at `.tmp/output.json`. The output JSON includes the following top level fields: + +* `input`: contains the inputs that were provided to the pipeline, such as the container and repo source information, the list of vulnerabilities to scan, etc. +* `info`: contains additional information collected by the pipeline for decision making. This includes paths to the generated VDB files, intelligence from various vulnerability databases, the list of SBOM packages, and any vulnerable dependencies that were identified. +* `output`: contains the output from the core LLM Engine, including the generated checklist, analysis summary, and justification assignment. + +In addition to the raw JSON output, you can also view a Markdown-formatted report for each CVE in the `.tmp/vulnerability_markdown_reports` directory. This view is helpful for human analysts reviewing the results. + +> [!TIP] +> To return detailed steps taken by the LLM agent in the output, set `return_intermediate_steps` to `true` in the configuration file. This can be helpful for explaining the output, and for troubleshooting unexpected results. + +#### Example command: `from_http.json` + Similarly, to run the pipeline with the `from_http.json` configuration file, you would run: ```bash python src/main.py --log_level DEBUG cve pipeline --config_file=configs/from_http.json @@ -407,9 +439,9 @@ In this command: Note that the results of the pipeline are not returned to the curl request. After processing the request, the server will save the results to the output path specified in the configuration file. The server will also display log and summary results from the workflow as it's running. Additional submissions to the server will append the results to the specified output file. -### Command line interface (CLI) +### Command line interface (CLI) reference -The top level entrypoint to each of the LLM example pipelines is `src/main.py`. The main entrypoint is a CLI tool with a built documentation using the `--help` command. For example, to see what commands are available, you can run: +The top level entrypoint to each of the LLM example pipelines is `src/main.py`. The main entrypoint is a CLI tool with built-in documentation using the `--help` command. For example, to see what commands are available, you can run: ``` (morpheus) root@58145366033a:/workspace_examples# python src/main.py --help Usage: morpheus_llm [OPTIONS] COMMAND [ARGS]... @@ -451,31 +483,24 @@ It's also possible to change the input type. For example, to use a different inp python src/main.py --log_level=DEBUG \ cve pipeline --config_file=configs/from_file.json \ config \ - input-file --file=data/input_messages/rapidsai:23.08-cuda11.8-py3.10.json + input-file --file=data/input_messages/morpheus:24.03-runtime.json ``` ##### Example 3: Combine multiple overrides -It's possible to combine multiple overrides in a single command. For example, to run the pipeline with the `from_manual.json` configuration file, but with the `max_retries` option set to `3`, the input message set to `rapidsai:23.08-cuda11.8-py3.10.json`, and the output destination set to `output_rapids.json` you can run: +It's possible to combine multiple overrides in a single command. For example, to run the pipeline with the `from_manual.json` configuration file, but with the `max_retries` option set to `3`, the input message set to `morpheus:24.03-runtime.json`, and the output destinations set to `.tmp/output_morpheus.json` and `.tmp/morpheus_reports`, you can run: ```bash python src/main.py --log_level=DEBUG \ cve pipeline --config_file=configs/from_manual.json \ config \ general --max_retries=3 \ - input-file --file=data/input_messages/rapidsai:23.08-cuda11.8-py3.10.json - output-file --file_path=output_rapids.json --markdown_dir=rapids_reports + input-file --file=data/input_messages/morpheus:24.03-runtime.json \ + output-file --file_path=.tmp/output_morpheus.json --markdown_dir=.tmp/morpheus_reports ``` #### Full list of options For the full list of possible options, use the `--help` options from the CLI. -### Configuration files - -The pipeline settings are controlled using configuration files. These files are JSON files that define the pipeline settings, such as the input data, the LLM models used, and the output format. Several example configuration files are located in the `configs/` folder. A brief description of each configuration file is as follows: -- `from_manual.json`: This configuration file is used to demonstrate the pipeline using manually provided data. All pipeline inputs are manually specified directly in the configuration file. -- `from_file.json`: This configuration file is used to demonstrate the pipeline using data fetched from a file. The pipeline fetches the input data from a file and processes it. Very similar to `from_manual.json`, but the input data is read from a file instead of being directly specified in the config file. -- `from_http.json`: This configuration file starts an HTTP server to turn the workflow into a microservice. The pipeline fetches the input data from an HTTP source and processes it. To trigger the pipeline, you can send a POST request to the `/scan` endpoint with the input data in the request body. The pipeline will process the input data. - -#### Configuration file breakdown +### Configuration file reference The configuration defines how the workflow operates, including model settings, input sources, and output options. 1. **Schema** @@ -578,7 +603,7 @@ To use a file as the input source, update the JSON object in the config file to: ``` "input": { "_type": "file", - "file": "data/input_messages/rapidsai:23.08-cuda11.8-py3.10.json" + "file": "data/input_messages/morpheus:23.11-runtime.json" } ``` @@ -764,7 +789,7 @@ When building containers for self-hosted NIMs, certain issues may occur. Below a #### Device error -If you encounter an error resembling the following during the [container build process for self-hosted NIMs](#run-the-workflow-using-self-hosted-nims): +If you encounter an error resembling the following during the [container build process for self-hosted NIMs](#using-self-hosted-nims): ```bash nvidia-container-cli: device error: {n}: unknown device: unknown @@ -778,7 +803,7 @@ This adjustment ensures the container accurately matches the available GPU resou #### Deploy.Resources.Reservations.devices error -If you encounter an error resembling the following during the [container build process for self-hosted NIMs](#run-the-workflow-using-self-hosted-nims) process: +If you encounter an error resembling the following during the [container build process for self-hosted NIMs](#using-self-hosted-nims) process: ``` 1 error(s) decoding: diff --git a/configs/from_file.json b/configs/from_file.json index 21fc9f9..2e74f8c 100644 --- a/configs/from_file.json +++ b/configs/from_file.json @@ -62,7 +62,7 @@ }, "input": { "_type": "file", - "file": "data/input_messages/rapidsai:23.08-cuda11.8-py3.10.json" + "file": "data/input_messages/morpheus:23.11-runtime.json" }, "output": { "_type": "file", diff --git a/data/input_messages/rapidsai:23.08-cuda11.8-py3.10.json b/data/input_messages/rapidsai:23.08-cuda11.8-py3.10.json deleted file mode 100644 index 60a83d5..0000000 --- a/data/input_messages/rapidsai:23.08-cuda11.8-py3.10.json +++ /dev/null @@ -1,282 +0,0 @@ -{ - "image": { - "name": "nvcr.io/nvidia/rapidsai/base", - "tag": "24.06-cuda12.2-py3.10", - "source_info": [ - // cuDF - { - "type": "code", - "git_repo": "https://github.com/rapidsai/cudf.git", - "tag": "v23.08.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/cudf.git", - "tag": "v23.08.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - }, - // cuML - { - "type": "code", - "git_repo": "https://github.com/rapidsai/cuml.git", - "tag": "v23.08.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/cuml.git", - "tag": "v23.08.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - }, - // cuGraph - { - "type": "code", - "git_repo": "https://github.com/rapidsai/cugraph.git", - "tag": "v23.08.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/cugraph.git", - "tag": "v23.08.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - }, - // RMM - { - "type": "code", - "git_repo": "https://github.com/rapidsai/RMM.git", - "tag": "v23.08.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/RMM.git", - "tag": "v23.08.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - }, - // RAFT - { - "type": "code", - "git_repo": "https://github.com/rapidsai/RAFT.git", - "tag": "v23.08.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/RAFT.git", - "tag": "v23.08.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - }, - // cuSpatial - { - "type": "code", - "git_repo": "https://github.com/rapidsai/cuSpatial.git", - "tag": "v23.08.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/cuSpatial.git", - "tag": "v23.08.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - }, - // cuxfilter - { - "type": "code", - "git_repo": "https://github.com/rapidsai/cuxfilter.git", - "tag": "v23.08.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/cuxfilter.git", - "tag": "v23.08.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - }, - // cuCIM - { - "type": "code", - "git_repo": "https://github.com/rapidsai/cuCIM.git", - "tag": "v23.08.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/cuCIM.git", - "tag": "v23.08.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - } - ], - "sbom_info": { - "_type": "file", - "file_path": "data/sboms/nvcr.io/nvidia/rapidsai/base:23.08-cuda11.8-py3.10.sbom" - } - }, - "scan": { - "vulns": [ - { - "vuln_id": "GHSA-5wvp-7f3h-6wmm" - }, - { - "vuln_id": "GHSA-w3vc-fx9p-wp4v" - }, - { - "vuln_id": "CVE-2024-0985" - }, - { - "vuln_id": "GHSA-94vc-p8w7-5p49" - }, - { - "vuln_id": "GHSA-q3qx-c6g2-7pw2" - }, - { - "vuln_id": "CVE-2023-5869" - }, - { - "vuln_id": "GHSA-2jv5-9r88-3w3p" - }, - { - "vuln_id": "CVE-2023-5363" - }, - { - "vuln_id": "GHSA-2jv5-9r88-3w3p" - }, - { - "vuln_id": "GHSA-3f63-hfp8-52jq" - }, - { - "vuln_id": "CVE-2023-4911" - }, - { - "vuln_id": "GHSA-56pw-mpj4-fxww" - }, - { - "vuln_id": "CVE-2023-4911" - }, - { - "vuln_id": "GHSA-6673-4983-2vx5" - }, - { - "vuln_id": "CVE-2023-4911" - }, - { - "vuln_id": "CVE-2023-4807" - }, - { - "vuln_id": "CVE-2023-36632" - }, - { - "vuln_id": "GHSA-6vqw-3v5j-54x4" - }, - { - "vuln_id": "GHSA-j7hp-h8jx-5ppr" - }, - { - "vuln_id": "CVE-2023-36632" - }, - { - "vuln_id": "GHSA-5m98-qgg9-wh84" - }, - { - "vuln_id": "GHSA-3ww4-gg4f-jr7f" - } - ] - } -} diff --git a/data/input_messages/rapidsai:24.06-cuda12.0-py3.9.json b/data/input_messages/rapidsai:24.06-cuda12.0-py3.9.json deleted file mode 100644 index 5bc7528..0000000 --- a/data/input_messages/rapidsai:24.06-cuda12.0-py3.9.json +++ /dev/null @@ -1,247 +0,0 @@ -{ - "image": { - "name": "nvcr.io/nvidia/rapidsai/base", - "tag": "24.06-cuda12.2-py3.10", - "source_info": [ - // cuDF - { - "type": "code", - "git_repo": "https://github.com/rapidsai/cudf.git", - "tag": "v24.06.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/cudf.git", - "tag": "v24.06.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - }, - // cuML - { - "type": "code", - "git_repo": "https://github.com/rapidsai/cuml.git", - "tag": "v24.06.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/cuml.git", - "tag": "v24.06.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - }, - // cuGraph - { - "type": "code", - "git_repo": "https://github.com/rapidsai/cugraph.git", - "tag": "v24.06.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/cugraph.git", - "tag": "v24.06.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - }, - // cuVS - { - "type": "code", - "git_repo": "https://github.com/rapidsai/cuvs.git", - "tag": "v24.06.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/cuvs.git", - "tag": "v24.06.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - }, - // RMM - { - "type": "code", - "git_repo": "https://github.com/rapidsai/RMM.git", - "tag": "v24.06.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/RMM.git", - "tag": "v24.06.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - }, - // RAFT - { - "type": "code", - "git_repo": "https://github.com/rapidsai/RAFT.git", - "tag": "v24.06.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/RAFT.git", - "tag": "v24.06.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - }, - // cuSpatial - { - "type": "code", - "git_repo": "https://github.com/rapidsai/cuSpatial.git", - "tag": "v24.06.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/cuSpatial.git", - "tag": "v24.06.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - }, - // cuxfilter - { - "type": "code", - "git_repo": "https://github.com/rapidsai/cuxfilter.git", - "tag": "v24.06.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/cuxfilter.git", - "tag": "v24.06.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - }, - // cuCIM - { - "type": "code", - "git_repo": "https://github.com/rapidsai/cuCIM.git", - "tag": "v24.06.00", - "include": [ - "**/*.cpp", - "**/*.cu", - "**/*.cuh", - "**/*.h", - "**/*.hpp", - "**/*.ipynb", - "**/*.py", - "**/*Dockerfile" - ] - }, - { - "type": "doc", - "git_repo": "https://github.com/rapidsai/cuCIM.git", - "tag": "v24.06.00", - "include": [ - "**/*.md", - "docs/**/*.rst" - ] - } - ], - "sbom_info": { - "_type": "file", - "file_path": "data/sboms/nvcr.io/nvidia/rapidsai/base:24.06-cuda12.2-py3.10.sbom" - } - }, - "scan": { - "vulns": [ - { - "vuln_id": "CVE-2023-36632" - }, - { - "vuln_id": "GHSA-f5x3-32g6-xq36" - } - ] - } -} diff --git a/data/sboms/nvcr.io/nvidia/morpheus/morpheus:23.07-runtime.sbom b/data/sboms/nvcr.io/nvidia/morpheus/morpheus:23.07-runtime.sbom deleted file mode 100644 index 79026ec..0000000 --- a/data/sboms/nvcr.io/nvidia/morpheus/morpheus:23.07-runtime.sbom +++ /dev/null @@ -1,494 +0,0 @@ -NAME VERSION TYPE -@jupyter-widgets/jupyterlab-manager 5.0.8 npm  -@jupyterlab/application-top 4.0.3 npm (+2 duplicates) -@jupyterlab/galata-extension 5.0.2 npm  -@jupyterlab/mock-consumer 4.0.3 npm  -@jupyterlab/mock-extension 4.0.3 npm  -@jupyterlab/mock-incompat 0.1.0 npm  -@jupyterlab/mock-mime-extension 0.3.0 npm  -@jupyterlab/mock-package 0.1.0 npm  -@jupyterlab/mock-provider 4.0.3 npm  -@jupyterlab/mock-token 4.0.3 npm  -Babel 2.12.1 python  -Brotli 1.0.9 python (+1 duplicate) -ConfigArgParse 1.5.5 python  -Flask 2.3.2 python  -GitPython 3.1.32 python  -Jinja2 3.1.2 python (+1 duplicate) -Mako 1.2.4 python  -Markdown 3.4.4 python  -MarkupSafe 2.1.3 python (+1 duplicate) -Pillow 10.0.0 python  -PyJWT 2.8.0 python  -PySocks 1.7.1 python (+1 duplicate) -PyYAML 6.0 python (+1 duplicate) -Pygments 2.15.1 python (+1 duplicate) -SQLAlchemy 2.0.0 python  -Send2Trash 1.8.2 python  -Simple Launcher 1.1.0.14 dotnet (+5 duplicates) -Sphinx 7.0.1 python  -Werkzeug 2.3.6 python  -absl-py 1.4.0 python  -adduser 3.118ubuntu5 deb  -alabaster 0.7.13 python  -alembic 1.11.1 python  -anyio 3.7.1 python (+1 duplicate) -appdirs 1.4.4 python  -apt 2.4.9 deb  -argon2-cffi 21.3.0 python  -argon2-cffi-bindings 21.2.0 python  -arrow 1.2.3 python  -asn1crypto 1.5.1 python  -asttokens 2.2.1 python  -async-lru 2.0.4 python  -attrs 23.1.0 python (+1 duplicate) -backcall 0.2.0 python  -backports.functools-lru-cache 1.6.5 python  -base-files 12ubuntu4.3 deb  -base-passwd 3.5.52build1 deb  -bash 5.1-6ubuntu1 deb  -bc 1.07.1-3build1 deb  -beautifulsoup4 4.12.2 python (+1 duplicate) -betterproto 1.2.5 python  -binutils 2.38-4ubuntu2.2 deb  -binutils-common 2.38-4ubuntu2.2 deb  -binutils-x86-64-linux-gnu 2.38-4ubuntu2.2 deb  -bleach 6.0.0 python  -blinker 1.6.2 python  -boa 0.15.1 python  -bokeh 2.4.3 python  -bsdutils 1:2.37.2-4ubuntu3 deb  -build-essential 12.9ubuntu3 deb  -bytecode 0.13.0.dev0 python  -bzip2 1.0.8-5build1 deb  -ca-certificates 20230311ubuntu0.22.04.1 deb  -cachetools 5.3.1 python  -certifi 2023.7.22 python (+1 duplicate) -cffi 1.15.1 python (+1 duplicate) -chardet 5.1.0 python  -charset-normalizer 3.2.0 python (+1 duplicate) -click 8.1.6 python (+1 duplicate) -cloudpickle 2.2.1 python  -colorama 0.4.6 python (+1 duplicate) -comm 0.1.3 python  -conda 23.1.0 python  -conda-build 3.25.0 python  -conda-package-handling 2.0.2 python  -conda_index 0.2.3 python  -conda_package_streaming 0.8.0 python  -configparser 5.3.0 python  -confluent-kafka 1.9.2 python  -contourpy 1.1.0 python  -coreutils 8.32-4.1ubuntu1 deb  -cpp 4:11.2.0-1ubuntu1 deb  -cpp-11 11.3.0-1ubuntu1~22.04.1 deb  -cryptography 41.0.2 python (+1 duplicate) -cubinlinker 0.3.0 python  -cuda-cccl-11-8 11.8.89-1 deb  -cuda-compat-11-8 520.61.05-1 deb  -cuda-compiler-11-8 11.8.0-1 deb  -cuda-cudart-11-8 11.8.89-1 deb  -cuda-cudart-dev-11-8 11.8.89-1 deb  -cuda-cuobjdump-11-8 11.8.86-1 deb  -cuda-cupti-11-8 11.8.87-1 deb  -cuda-cuxxfilt-11-8 11.8.86-1 deb  -cuda-driver-dev-11-8 11.8.89-1 deb  -cuda-gdb-11-8 11.8.86-1 deb  -cuda-keyring 1.1-1 deb  -cuda-nvcc-11-8 11.8.89-1 deb  -cuda-nvdisasm-11-8 11.8.86-1 deb  -cuda-nvprune-11-8 11.8.86-1 deb  -cuda-python 11.8.2 python  -cuda-toolkit-11-8-config-common 11.8.89-1 deb  -cuda-toolkit-11-config-common 11.8.89-1 deb  -cuda-toolkit-config-common 12.2.53-1 deb  -cudf 23.6.1 python  -cudf-kafka 23.6.1 python  -cupy 12.1.0 python  -curl 7.81.0-1ubuntu1.13 deb  -cycler 0.11.0 python  -cytoolz 0.12.2 python  -dash 0.5.11+git20210903+057cd650a4ed-3build1 deb  -dask 2023.3.2 python  -dask-cuda 23.6.0 python  -dask-cudf 23.6.1 python  -databricks-cli 0.17.7 python  -dataclasses 0.8 python (+1 duplicate) -datacompy 0.8.4 python  -debconf 1.5.79ubuntu1 deb  -debianutils 5.5-1ubuntu2 deb  -debugpy 1.6.7 python  -decorator 5.1.1 python  -defusedxml 0.7.1 python  -diffutils 1:3.8-0ubuntu2 deb  -dill 0.3.7 python  -dirmngr 2.2.27-3ubuntu2.1 deb  -distributed 2023.3.2.1 python  -docker 5.0.3 python  -docker-pycreds 0.4.0 python  -docutils 0.20.1 python  -dpkg 1.21.1ubuntu2.2 deb  -dpkg-dev 1.21.1ubuntu2.2 deb  -e2fsprogs 1.46.5-2ubuntu1.1 deb  -entrypoints 0.4 python  -exceptiongroup 1.1.2 python (+1 duplicate) -executing 1.2.0 python  -fastjsonschema 2.18.0 python  -fastrlock 0.8 python  -filelock 3.12.2 python (+1 duplicate) -findutils 4.8.0-1ubuntu3 deb  -fonttools 4.41.1 python  -fqdn 1.5.1 python  -fsspec 2023.6.0 python  -g++ 4:11.2.0-1ubuntu1 deb  -g++-11 11.3.0-1ubuntu1~22.04.1 deb  -gcc 4:11.2.0-1ubuntu1 deb  -gcc-11 11.3.0-1ubuntu1~22.04.1 deb  -gcc-11-base 11.3.0-1ubuntu1~22.04.1 deb  -gcc-12-base 12.1.0-2ubuntu1~22.04 deb  -gitdb 4.0.10 python  -glob2 0.7 python  -gmpy2 2.1.2 python  -gnupg 2.2.27-3ubuntu2.1 deb  -gnupg-l10n 2.2.27-3ubuntu2.1 deb  -gnupg-utils 2.2.27-3ubuntu2.1 deb  -gnupg2 2.2.27-3ubuntu2.1 deb  -googleapis-common-protos 1.59.1 python  -gpg 2.2.27-3ubuntu2.1 deb  -gpg-agent 2.2.27-3ubuntu2.1 deb  -gpg-wks-client 2.2.27-3ubuntu2.1 deb  -gpg-wks-server 2.2.27-3ubuntu2.1 deb  -gpgconf 2.2.27-3ubuntu2.1 deb  -gpgsm 2.2.27-3ubuntu2.1 deb  -gpgv 2.2.27-3ubuntu2.1 deb  -greenlet 2.0.2 python  -grep 3.7-1build1 deb  -grpcio 1.54.2 python  -grpclib 0.4.5 python  -gunicorn 20.1.0 python  -gzip 1.10-4ubuntu4.1 deb  -h2 4.1.0 python  -hostname 3.23ubuntu2 deb  -hpack 4.0.0 python  -html5lib 1.1 python  -hyperframe 6.0.1 python  -idna 3.4 python (+1 duplicate) -imagesize 1.4.1 python  -importlib-metadata 6.8.0 python  -importlib-resources 6.0.0 python (+1 duplicate) -init-system-helpers 1.62 deb  -ipykernel 6.25.0 python  -ipython 8.14.0 python  -ipywidgets 8.0.7 python  -isoduration 20.11.0 python  -itsdangerous 2.1.2 python  -jedi 0.18.2 python  -joblib 1.3.0 python (+1 duplicate) -jq 1.6-2.1ubuntu3 deb  -js 1.0.0 npm  -json5 0.9.14 python (+1 duplicate) -jsonpointer 2.4 python  -jsonschema 4.18.4 python (+1 duplicate) -jsonschema-specifications 2023.7.1 python (+1 duplicate) -jupyter-events 0.6.3 python  -jupyter-lsp 2.2.0 python  -jupyter_client 8.3.0 python  -jupyter_core 4.12.0 python  -jupyter_server 2.7.0 python  -jupyter_server_terminals 0.4.4 python  -jupyterlab 4.0.3 python  -jupyterlab-pygments 0.2.2 python  -jupyterlab-widgets 3.0.8 python  -jupyterlab_pygments 0.2.2 npm (+1 duplicate) -jupyterlab_server 2.24.0 python  -kiwisolver 1.4.4 python  -libacl1 2.3.1-1 deb  -libapt-pkg6.0 2.4.9 deb  -libarchive-c 5.0 python  -libasan6 11.3.0-1ubuntu1~22.04.1 deb  -libassuan0 2.5.5-1build1 deb  -libatomic1 12.1.0-2ubuntu1~22.04 deb  -libattr1 1:2.5.1-1build1 deb  -libaudit-common 1:3.0.7-1build1 deb  -libaudit1 1:3.0.7-1build1 deb  -libbinutils 2.38-4ubuntu2.2 deb  -libblkid1 2.37.2-4ubuntu3 deb  -libbrotli1 1.0.9-2build6 deb  -libbsd0 0.11.5-1 deb  -libbz2-1.0 1.0.8-5build1 deb  -libc-bin 2.35-0ubuntu3.1 deb  -libc-dev-bin 2.35-0ubuntu3.1 deb  -libc6 2.35-0ubuntu3.1 deb  -libc6-dev 2.35-0ubuntu3.1 deb  -libcap-ng0 0.7.9-2.2build3 deb  -libcap2 1:2.44-1ubuntu0.22.04.1 deb  -libcbor0.8 0.8.0-2ubuntu1 deb  -libcc1-0 12.1.0-2ubuntu1~22.04 deb  -libcom-err2 1.46.5-2ubuntu1.1 deb  -libcrypt-dev 1:4.4.27-1 deb  -libcrypt1 1:4.4.27-1 deb  -libctf-nobfd0 2.38-4ubuntu2.2 deb  -libctf0 2.38-4ubuntu2.2 deb  -libcublas-11-8 11.11.3.6-1 deb  -libcufft-11-8 10.9.0.58-1 deb  -libcurand-11-8 10.3.0.86-1 deb  -libcurl4 7.81.0-1ubuntu1.13 deb  -libcusolver-11-8 11.4.1.48-1 deb  -libdb5.3 5.3.28+dfsg1-0.8ubuntu3 deb  -libdebconfclient0 0.261ubuntu1 deb  -libdpkg-perl 1.21.1ubuntu2.2 deb  -libedit2 3.1-20210910-1build1 deb  -libext2fs2 1.46.5-2ubuntu1.1 deb  -libffi8 3.4.2-4 deb  -libfido2-1 1.10.0-1 deb  -libgcc-11-dev 11.3.0-1ubuntu1~22.04.1 deb  -libgcc-s1 12.1.0-2ubuntu1~22.04 deb  -libgcrypt20 1.9.4-3ubuntu3 deb  -libgdbm-compat4 1.23-1 deb  -libgdbm6 1.23-1 deb  -libglib2.0-0 2.72.4-0ubuntu2.2 deb  -libgmp10 2:6.2.1+dfsg-3ubuntu1 deb  -libgnutls30 3.7.3-4ubuntu1.2 deb  -libgomp1 12.1.0-2ubuntu1~22.04 deb  -libgpg-error0 1.43-3 deb  -libgssapi-krb5-2 1.19.2-2ubuntu0.2 deb  -libhogweed6 3.7.3-1build2 deb  -libidn2-0 2.3.2-2build1 deb  -libisl23 0.24-2build1 deb  -libitm1 12.1.0-2ubuntu1~22.04 deb  -libjq1 1.6-2.1ubuntu3 deb  -libk5crypto3 1.19.2-2ubuntu0.2 deb  -libkeyutils1 1.6.1-2ubuntu3 deb  -libkrb5-3 1.19.2-2ubuntu0.2 deb  -libkrb5support0 1.19.2-2ubuntu0.2 deb  -libksba8 1.6.0-2ubuntu0.2 deb  -libldap-2.5-0 2.5.14+dfsg-0ubuntu0.22.04.2 deb  -liblsan0 12.1.0-2ubuntu1~22.04 deb  -liblz4-1 1.9.3-2build2 deb  -liblzma5 5.2.5-2ubuntu1 deb  -libmambapy 1.4.2 python  -libmd0 1.0.4-1build1 deb  -libmount1 2.37.2-4ubuntu3 deb  -libmpc3 1.2.1-2build1 deb  -libmpfr6 4.1.0-3build3 deb  -libncurses6 6.3-2ubuntu0.1 deb  -libncursesw6 6.3-2ubuntu0.1 deb  -libnettle8 3.7.3-1build2 deb  -libnghttp2-14 1.43.0-1build3 deb  -libnpth0 1.6-3build2 deb  -libnsl-dev 1.3.0-2build2 deb  -libnsl2 1.3.0-2build2 deb  -libnuma1 2.0.14-3ubuntu2 deb  -libonig5 6.9.7.1-2build1 deb  -libp11-kit0 0.24.0-6build1 deb  -libpam-modules 1.4.0-11ubuntu2.3 deb  -libpam-modules-bin 1.4.0-11ubuntu2.3 deb  -libpam-runtime 1.4.0-11ubuntu2.3 deb  -libpam0g 1.4.0-11ubuntu2.3 deb  -libpcre2-8-0 10.39-3ubuntu0.1 deb  -libpcre3 2:8.39-13ubuntu0.22.04.1 deb  -libperl5.34 5.34.0-3ubuntu1.2 deb  -libprocps8 2:3.3.17-6ubuntu2 deb  -libpsl5 0.21.0-1.2build2 deb  -libquadmath0 12.1.0-2ubuntu1~22.04 deb  -libreadline8 8.1.2-1 deb  -librtmp1 2.4+20151223.gitfa8646d.1-2build4 deb  -libsasl2-2 2.1.27+dfsg2-3ubuntu1.2 deb  -libsasl2-modules-db 2.1.27+dfsg2-3ubuntu1.2 deb  -libseccomp2 2.5.3-2ubuntu2 deb  -libselinux1 3.3-1build2 deb  -libsemanage-common 3.3-1build2 deb  -libsemanage2 3.3-1build2 deb  -libsepol2 3.3-1build1 deb  -libsmartcols1 2.37.2-4ubuntu3 deb  -libsqlite3-0 3.37.2-2ubuntu0.1 deb  -libss2 1.46.5-2ubuntu1.1 deb  -libssh-4 0.9.6-2ubuntu0.22.04.1 deb  -libssl3 3.0.2-0ubuntu1.10 deb  -libstdc++-11-dev 11.3.0-1ubuntu1~22.04.1 deb  -libstdc++6 12.1.0-2ubuntu1~22.04 deb  -libsystemd0 249.11-0ubuntu3.9 deb  -libtasn1-6 4.18.0-4build1 deb  -libtinfo6 6.3-2ubuntu0.1 deb  -libtirpc-common 1.3.2-2ubuntu0.1 deb  -libtirpc-dev 1.3.2-2ubuntu0.1 deb  -libtirpc3 1.3.2-2ubuntu0.1 deb  -libtsan0 11.3.0-1ubuntu1~22.04.1 deb  -libubsan1 12.1.0-2ubuntu1~22.04 deb  -libudev1 249.11-0ubuntu3.9 deb  -libunistring2 1.0-1 deb  -libuuid1 2.37.2-4ubuntu3 deb  -libxxhash0 0.8.1-1 deb  -libzstd1 1.4.8+dfsg-3build1 deb  -linux-libc-dev 5.15.0-78.85 deb  -llvmlite 0.40.1 python  -locket 1.0.0 python  -login 1:4.8.1-2ubuntu2.1 deb  -logsave 1.46.5-2ubuntu1.1 deb  -lsb-base 11.1.0ubuntu4 deb  -lto-disabled-list 24 deb  -lz4 4.3.2 python  -make 4.3-4.1build1 deb  -mamba 1.4.2 python  -markdown-it-py 3.0.0 python  -matplotlib 3.7.1 python  -matplotlib-inline 0.1.6 python  -mawk 1.3.4.20200120-3 deb  -mdurl 0.1.0 python  -merlin-core 23.6.0 python  -merlin-dataloader 23.6.0 python  -mistune 3.0.1 python  -mlflow 2.5.0 python  -more-itertools 10.0.0 python  -morpheus 23.7.2 python  -mount 2.37.2-4ubuntu3 deb  -mpmath 1.3.0 python  -mrc 23.7.0 python  -msgpack 1.0.5 python  -multidict 6.0.4 python  -munkres 1.1.4 python  -nb-conda-kernels 2.3.1 python  -nbclient 0.8.0 python  -nbconvert 7.7.3 python  -nbformat 5.9.1 python  -ncurses-base 6.3-2ubuntu0.1 deb  -ncurses-bin 6.3-2ubuntu0.1 deb  -nest-asyncio 1.5.7 python  -networkx 3.1 python  -notebook_shim 0.2.3 python  -npy-append-array 0.9.16 python  -numba 0.57.1 python  -numpy 1.24.4 python  -numpydoc 1.4.0 python  -nvidia-pyindex 1.0.9 python  -nvtabular 23.6.0 python  -nvtx 0.2.5 python  -oauthlib 3.2.2 python  -openssh-client 1:8.9p1-3ubuntu0.3 deb  -openssl 3.0.2-0ubuntu1.10 deb  -openssl 3.1.1 binary  -ordered-set 4.1.0 python  -overrides 7.3.1 python  -packaging 23.1 python (+1 duplicate) -pandas 1.3.5 python  -pandocfilters 1.5.0 python  -parso 0.8.3 python  -partd 1.4.0 python  -passwd 1:4.8.1-2ubuntu2.1 deb  -patch 2.7.6-7build2 deb  -perl 5.34.0-3ubuntu1.2 deb  -perl-base 5.34.0-3ubuntu1.2 deb  -perl-modules-5.34 5.34.0-3ubuntu1.2 deb  -pexpect 4.8.0 python  -pickleshare 0.7.5 python  -pinentry-curses 1.1.1-1build2 deb  -pip 23.2.1 python  -pkg-config 0.29.2-1ubuntu3 deb  -pkginfo 1.9.6 python  -pkgutil_resolve_name 1.3.10 python  -platformdirs 3.9.1 python  -pluggy 1.0.0 python  -pluggy 1.2.0 python  -pooch 1.7.0 python  -procps 2:3.3.17-6ubuntu2 deb  -prometheus-client 0.17.1 python  -prometheus-flask-exporter 0.22.4 python  -prompt-toolkit 3.0.39 python (+1 duplicate) -protobuf 4.21.12 python  -psutil 5.9.5 python (+1 duplicate) -ptxcompiler 0.8.1 python  -ptyprocess 0.7.0 python  -pure-eval 0.2.2 python  -pyOpenSSL 23.2.0 python (+1 duplicate) -pyarrow 11.0.0 python  -pycosat 0.6.4 python  -pycparser 2.21 python (+1 duplicate) -pynvml 11.4.1 python  -pyparsing 3.1.0 python  -python 3.10.12 binary  -python-dateutil 2.8.2 python  -python-json-logger 2.0.7 python  -python-rapidjson 1.10 python  -pytz 2023.3 python (+1 duplicate) -pyzmq 25.1.0 python  -querystring-parser 1.2.4 python  -readline-common 8.1.2-1 deb  -referencing 0.30.0 python (+1 duplicate) -requests 2.31.0 python (+1 duplicate) -rfc3339-validator 0.1.4 python  -rfc3986-validator 0.1.1 python  -rich 13.4.2 python  -rmm 23.6.0 python  -rpcsvc-proto 1.4.2-0ubuntu6 deb  -rpds-py 0.9.2 python (+1 duplicate) -ruamel.yaml 0.17.32 python  -ruamel.yaml.clib 0.2.7 python  -scikit-learn 1.2.2 python  -scipy 1.11.1 python  -sed 4.8-1ubuntu2 deb  -sensible-utils 0.0.17 deb  -setuptools 59.8.0 python  -setuptools 68.0.0 python  -six 1.16.0 python (+1 duplicate) -smmap 3.0.5 python  -sniffio 1.3.0 python (+1 duplicate) -snowballstemmer 2.2.0 python  -sortedcontainers 2.4.0 python  -soupsieve 2.3.2.post1 python  -soupsieve 2.4.1 python  -sphinxcontrib-applehelp 1.0.4 python  -sphinxcontrib-devhelp 1.0.2 python  -sphinxcontrib-htmlhelp 2.0.1 python  -sphinxcontrib-jsmath 1.0.1 python  -sphinxcontrib-qthelp 1.0.3 python  -sphinxcontrib-serializinghtml 1.1.5 python  -sqlparse 0.4.4 python  -stack-data 0.6.2 python  -stringcase 1.2.0 python  -sympy 1.12 python  -sysvinit-utils 3.01-1ubuntu1 deb  -tabulate 0.9.0 python  -tar 1.34+dfsg-1ubuntu0.1.22.04.1 deb  -tblib 1.7.0 python  -tensorflow-metadata 1.13.1 python  -terminado 0.17.1 python  -test-hyphens 3.0.2 npm  -test-hyphens-underscore 3.0.2 npm  -test_no_hyphens 3.0.2 npm  -threadpoolctl 3.2.0 python  -tinycss2 1.2.1 python  -tomli 2.0.1 python (+1 duplicate) -toolz 0.12.0 python (+1 duplicate) -torch 2.0.1 python  -tornado 6.3.2 python  -tqdm 4.65.0 python (+1 duplicate) -traitlets 5.9.0 python  -triton 2.0.0 python  -tritonclient 2.26.0 python  -typing-utils 0.1.0 python  -typing_extensions 4.7.1 python (+1 duplicate) -ubuntu-keyring 2021.03.26 deb  -unicodedata2 15.0.0 python  -unzip 6.0-26ubuntu3.1 deb  -uri-template 1.3.0 python  -urllib3 2.0.3 python  -urllib3 2.0.4 python  -usrmerge 25ubuntu2 deb  -util-linux 2.37.2-4ubuntu3 deb  -watchdog 2.1.9 python  -watchgod 0.8.2 python  -wcwidth 0.2.6 python (+1 duplicate) -webcolors 1.13 python  -webencodings 0.5.1 python  -websocket-client 1.6.1 python  -websockets 11.0.3 python  -wget 1.21.2-2ubuntu1 deb  -wheel 0.40.0 python  -wheel 0.41.0 python  -widgetsnbextension 4.0.8 python  -xz-utils 5.2.5-2ubuntu1 deb  -zict 3.0.0 python  -zip 3.0-12build2 deb  -zipp 3.16.2 python (+1 duplicate) -zlib1g 1:1.2.11.dfsg-2ubuntu9.2 deb  -zstandard 0.19.0 python  diff --git a/data/sboms/nvcr.io/nvidia/morpheus/morpheus:23.11-runtime.sbom b/data/sboms/nvcr.io/nvidia/morpheus/morpheus:23.11-runtime.sbom deleted file mode 100644 index cd469cc..0000000 --- a/data/sboms/nvcr.io/nvidia/morpheus/morpheus:23.11-runtime.sbom +++ /dev/null @@ -1,465 +0,0 @@ -NAME VERSION TYPE -Babel 2.13.1 python  -Brotli 1.0.9 python  -Brotli 1.1.0 python  -ConfigArgParse 1.5.5 python  -Flask 3.0.0 python  -GitPython 3.1.40 python  -Jinja2 3.1.2 python (+1 duplicate) -Mako 1.3.0 python  -Markdown 3.5.1 python  -MarkupSafe 2.1.3 python (+1 duplicate) -Pillow 10.1.0 python  -PyJWT 2.8.0 python  -PySocks 1.7.1 python (+1 duplicate) -PyYAML 6.0.1 python (+1 duplicate) -Pygments 2.17.2 python (+1 duplicate) -SQLAlchemy 2.0.0 python  -SciPy 1.11.4 python  -Simple Launcher 1.1.0.14 dotnet (+5 duplicates) -Sphinx 7.2.6 python  -Werkzeug 3.0.1 python  -absl-py 1.4.0 python  -adduser 3.118ubuntu5 deb  -alabaster 0.7.13 python  -alembic 1.13.0 python  -anyio 3.7.1 python  -appdirs 1.4.4 python  -apt 2.4.11 deb  -asn1crypto 1.5.1 python  -attrs 23.1.0 python (+1 duplicate) -base-files 12ubuntu4.4 deb  -base-passwd 3.5.52build1 deb  -bash 5.1-6ubuntu1 deb  -bc 1.07.1-3build1 deb  -beautifulsoup4 4.12.2 python  -betterproto 1.2.5 python  -binutils 2.38-4ubuntu2.3 deb  -binutils-common 2.38-4ubuntu2.3 deb  -binutils-x86-64-linux-gnu 2.38-4ubuntu2.3 deb  -blinker 1.7.0 python  -boa 0.16.0 python  -bokeh 2.4.3 python  -boltons 23.0.0 python  -bsdutils 1:2.37.2-4ubuntu3 deb  -build-essential 12.9ubuntu3 deb  -bzip2 1.0.8-5build1 deb  -ca-certificates 20230311ubuntu0.22.04.1 deb  -ca-certificates-java java-archive  -ca-certificates-java 20190909ubuntu1.2 deb  -cachetools 5.3.2 python  -cattrs 23.2.3 python  -certifi 2023.11.17 python (+1 duplicate) -cffi 1.15.1 python  -cffi 1.16.0 python  -chardet 5.2.0 python  -charset-normalizer 3.2.0 python  -charset-normalizer 3.3.2 python  -click 8.1.7 python (+1 duplicate) -cloudpickle 3.0.0 python  -colorama 0.4.6 python (+1 duplicate) -conda 23.3.1 python  -conda-build 3.28.1 python  -conda-libmamba-solver 23.3.0 python  -conda-package-handling 2.2.0 python  -conda_index 0.3.0 python  -conda_package_streaming 0.9.0 python  -configparser 5.3.0 python  -confluent-kafka 1.9.2 python  -contourpy 1.2.0 python  -coreutils 8.32-4.1ubuntu1 deb  -cpp 4:11.2.0-1ubuntu1 deb  -cpp-11 11.4.0-1ubuntu1~22.04 deb  -cryptography 41.0.3 python  -cryptography 41.0.7 python  -cubinlinker 0.3.0 python  -cuda-cccl-11-8 11.8.89-1 deb  -cuda-compat-11-8 520.61.05-1 deb  -cuda-compiler-11-8 11.8.0-1 deb  -cuda-cudart-11-8 11.8.89-1 deb  -cuda-cudart-dev-11-8 11.8.89-1 deb  -cuda-cuobjdump-11-8 11.8.86-1 deb  -cuda-cupti-11-8 11.8.87-1 deb  -cuda-cuxxfilt-11-8 11.8.86-1 deb  -cuda-driver-dev-11-8 11.8.89-1 deb  -cuda-gdb-11-8 11.8.86-1 deb  -cuda-keyring 1.1-1 deb  -cuda-nvcc-11-8 11.8.89-1 deb  -cuda-nvdisasm-11-8 11.8.86-1 deb  -cuda-nvprune-11-8 11.8.86-1 deb  -cuda-python 11.8.3 python  -cuda-toolkit-11-8-config-common 11.8.89-1 deb  -cuda-toolkit-11-config-common 11.8.89-1 deb  -cuda-toolkit-config-common 12.3.101-1 deb  -cudf 23.6.1 python  -cudf-kafka 23.6.1 python  -cupy 12.2.0 python  -curl 7.81.0-1ubuntu1.15 deb  -cycler 0.12.1 python  -cytoolz 0.12.2 python  -dash 0.5.11+git20210903+057cd650a4ed-3build1 deb  -dask 2023.3.2 python  -dask-cuda 23.6.0 python  -dask-cudf 23.6.1 python  -databricks-cli 0.18.0 python  -dataclasses 0.8 python  -datacompy 0.8.4 python  -debconf 1.5.79ubuntu1 deb  -debianutils 5.5-1ubuntu2 deb  -diffutils 1:3.8-0ubuntu2 deb  -dill 0.3.7 python  -dirmngr 2.2.27-3ubuntu2.1 deb  -distributed 2023.3.2.1 python  -docker 5.0.3 python  -docker-pycreds 0.4.0 python  -docutils 0.20.1 python  -dpkg 1.21.1ubuntu2.2 deb  -dpkg-dev 1.21.1ubuntu2.2 deb  -e2fsprogs 1.46.5-2ubuntu1.1 deb  -entrypoints 0.4 python  -exceptiongroup 1.2.0 python (+1 duplicate) -fastrlock 0.8.2 python  -filelock 3.13.1 python (+1 duplicate) -findutils 4.8.0-1ubuntu3 deb  -fontconfig-config 2.13.1-4.2ubuntu5 deb  -fonts-dejavu-core 2.37-2build1 deb  -fonttools 4.46.0 python  -fsspec 2023.12.1 python  -g++ 4:11.2.0-1ubuntu1 deb  -g++-11 11.4.0-1ubuntu1~22.04 deb  -gcc 4:11.2.0-1ubuntu1 deb  -gcc-11 11.4.0-1ubuntu1~22.04 deb  -gcc-11-base 11.4.0-1ubuntu1~22.04 deb  -gcc-12-base 12.3.0-1ubuntu1~22.04 deb  -gitdb 4.0.11 python  -gmpy2 2.1.2 python  -gnupg 2.2.27-3ubuntu2.1 deb  -gnupg-l10n 2.2.27-3ubuntu2.1 deb  -gnupg-utils 2.2.27-3ubuntu2.1 deb  -gnupg2 2.2.27-3ubuntu2.1 deb  -googleapis-common-protos 1.61.0 python  -gpg 2.2.27-3ubuntu2.1 deb  -gpg-agent 2.2.27-3ubuntu2.1 deb  -gpg-wks-client 2.2.27-3ubuntu2.1 deb  -gpg-wks-server 2.2.27-3ubuntu2.1 deb  -gpgconf 2.2.27-3ubuntu2.1 deb  -gpgsm 2.2.27-3ubuntu2.1 deb  -gpgv 2.2.27-3ubuntu2.1 deb  -greenlet 3.0.1 python  -grep 3.7-1build1 deb  -grpcio 1.54.2 python  -grpclib 0.4.6 python  -gunicorn 21.2.0 python  -gzip 1.10-4ubuntu4.1 deb  -h2 4.1.0 python  -hostname 3.23ubuntu2 deb  -hpack 4.0.0 python  -hyperframe 6.0.1 python  -idna 3.4 python  -idna 3.6 python  -imagesize 1.4.1 python  -importlib-metadata 7.0.0 python  -importlib-resources 6.1.1 python (+1 duplicate) -init-system-helpers 1.62 deb  -itsdangerous 2.1.2 python  -java-common 0.72build2 deb  -joblib 1.3.2 python (+1 duplicate) -jq 1.6-2.1ubuntu3 deb  -jrt-fs 11.0.21 java-archive  -js 1.0.0 npm  -json5 0.9.14 python  -jsonpatch 1.32 python  -jsonpointer 2.0 python  -jsonschema 4.20.0 python  -jsonschema-specifications 2023.11.2 python  -jupyter_client 8.6.0 python  -jupyter_core 5.5.0 python  -kiwisolver 1.4.5 python  -libacl1 2.3.1-1 deb  -libapt-pkg6.0 2.4.11 deb  -libarchive-c 5.0 python  -libasan6 11.4.0-1ubuntu1~22.04 deb  -libasound2 1.2.6.1-1ubuntu1 deb  -libasound2-data 1.2.6.1-1ubuntu1 deb  -libassuan0 2.5.5-1build1 deb  -libatomic1 12.3.0-1ubuntu1~22.04 deb  -libattr1 1:2.5.1-1build1 deb  -libaudit-common 1:3.0.7-1build1 deb  -libaudit1 1:3.0.7-1build1 deb  -libavahi-client3 0.8-5ubuntu5.2 deb  -libavahi-common-data 0.8-5ubuntu5.2 deb  -libavahi-common3 0.8-5ubuntu5.2 deb  -libbinutils 2.38-4ubuntu2.3 deb  -libblkid1 2.37.2-4ubuntu3 deb  -libbrotli1 1.0.9-2build6 deb  -libbsd0 0.11.5-1 deb  -libbz2-1.0 1.0.8-5build1 deb  -libc-bin 2.35-0ubuntu3.5 deb  -libc-dev-bin 2.35-0ubuntu3.5 deb  -libc6 2.35-0ubuntu3.5 deb  -libc6-dev 2.35-0ubuntu3.5 deb  -libcap-ng0 0.7.9-2.2build3 deb  -libcap2 1:2.44-1ubuntu0.22.04.1 deb  -libcbor0.8 0.8.0-2ubuntu1 deb  -libcc1-0 12.3.0-1ubuntu1~22.04 deb  -libcom-err2 1.46.5-2ubuntu1.1 deb  -libcrypt-dev 1:4.4.27-1 deb  -libcrypt1 1:4.4.27-1 deb  -libctf-nobfd0 2.38-4ubuntu2.3 deb  -libctf0 2.38-4ubuntu2.3 deb  -libcublas-11-8 11.11.3.6-1 deb  -libcufft-11-8 10.9.0.58-1 deb  -libcups2 2.4.1op1-1ubuntu4.7 deb  -libcurand-11-8 10.3.0.86-1 deb  -libcurl4 7.81.0-1ubuntu1.15 deb  -libcusolver-11-8 11.4.1.48-1 deb  -libdb5.3 5.3.28+dfsg1-0.8ubuntu3 deb  -libdbus-1-3 1.12.20-2ubuntu4.1 deb  -libdebconfclient0 0.261ubuntu1 deb  -libdpkg-perl 1.21.1ubuntu2.2 deb  -libedit2 3.1-20210910-1build1 deb  -libexpat1 2.4.7-1ubuntu0.2 deb  -libext2fs2 1.46.5-2ubuntu1.1 deb  -libffi8 3.4.2-4 deb  -libfido2-1 1.10.0-1 deb  -libfontconfig1 2.13.1-4.2ubuntu5 deb  -libfreetype6 2.11.1+dfsg-1ubuntu0.2 deb  -libgcc-11-dev 11.4.0-1ubuntu1~22.04 deb  -libgcc-s1 12.3.0-1ubuntu1~22.04 deb  -libgcrypt20 1.9.4-3ubuntu3 deb  -libgdbm-compat4 1.23-1 deb  -libgdbm6 1.23-1 deb  -libglib2.0-0 2.72.4-0ubuntu2.2 deb  -libgmp10 2:6.2.1+dfsg-3ubuntu1 deb  -libgnutls30 3.7.3-4ubuntu1.3 deb  -libgomp1 12.3.0-1ubuntu1~22.04 deb  -libgpg-error0 1.43-3 deb  -libgraphite2-3 1.3.14-1build2 deb  -libgssapi-krb5-2 1.19.2-2ubuntu0.3 deb  -libharfbuzz0b 2.7.4-1ubuntu3.1 deb  -libhogweed6 3.7.3-1build2 deb  -libidn2-0 2.3.2-2build1 deb  -libisl23 0.24-2build1 deb  -libitm1 12.3.0-1ubuntu1~22.04 deb  -libjpeg-turbo8 2.1.2-0ubuntu1 deb  -libjpeg8 8c-2ubuntu10 deb  -libjq1 1.6-2.1ubuntu3 deb  -libk5crypto3 1.19.2-2ubuntu0.3 deb  -libkeyutils1 1.6.1-2ubuntu3 deb  -libkrb5-3 1.19.2-2ubuntu0.3 deb  -libkrb5support0 1.19.2-2ubuntu0.3 deb  -libksba8 1.6.0-2ubuntu0.2 deb  -liblcms2-2 2.12~rc1-2build2 deb  -libldap-2.5-0 2.5.16+dfsg-0ubuntu0.22.04.1 deb  -liblsan0 12.3.0-1ubuntu1~22.04 deb  -liblz4-1 1.9.3-2build2 deb  -liblzma5 5.2.5-2ubuntu1 deb  -libmambapy 1.5.0 python  -libmd0 1.0.4-1build1 deb  -libmount1 2.37.2-4ubuntu3 deb  -libmpc3 1.2.1-2build1 deb  -libmpfr6 4.1.0-3build3 deb  -libncurses6 6.3-2ubuntu0.1 deb  -libncursesw6 6.3-2ubuntu0.1 deb  -libnettle8 3.7.3-1build2 deb  -libnghttp2-14 1.43.0-1ubuntu0.1 deb  -libnpth0 1.6-3build2 deb  -libnsl-dev 1.3.0-2build2 deb  -libnsl2 1.3.0-2build2 deb  -libnspr4 2:4.32-3build1 deb  -libnss3 2:3.68.2-0ubuntu1.2 deb  -libnuma1 2.0.14-3ubuntu2 deb  -libonig5 6.9.7.1-2build1 deb  -libp11-kit0 0.24.0-6build1 deb  -libpam-modules 1.4.0-11ubuntu2.3 deb  -libpam-modules-bin 1.4.0-11ubuntu2.3 deb  -libpam-runtime 1.4.0-11ubuntu2.3 deb  -libpam0g 1.4.0-11ubuntu2.3 deb  -libpcre2-8-0 10.39-3ubuntu0.1 deb  -libpcre3 2:8.39-13ubuntu0.22.04.1 deb  -libpcsclite1 1.9.5-3ubuntu1 deb  -libperl5.34 5.34.0-3ubuntu1.3 deb  -libpng16-16 1.6.37-3build5 deb  -libprocps8 2:3.3.17-6ubuntu2.1 deb  -libpsl5 0.21.0-1.2build2 deb  -libquadmath0 12.3.0-1ubuntu1~22.04 deb  -libreadline8 8.1.2-1 deb  -librtmp1 2.4+20151223.gitfa8646d.1-2build4 deb  -libsasl2-2 2.1.27+dfsg2-3ubuntu1.2 deb  -libsasl2-modules-db 2.1.27+dfsg2-3ubuntu1.2 deb  -libseccomp2 2.5.3-2ubuntu2 deb  -libselinux1 3.3-1build2 deb  -libsemanage-common 3.3-1build2 deb  -libsemanage2 3.3-1build2 deb  -libsepol2 3.3-1build1 deb  -libsmartcols1 2.37.2-4ubuntu3 deb  -libsqlite3-0 3.37.2-2ubuntu0.1 deb  -libss2 1.46.5-2ubuntu1.1 deb  -libssh-4 0.9.6-2ubuntu0.22.04.1 deb  -libssl3 3.0.2-0ubuntu1.12 deb  -libstdc++-11-dev 11.4.0-1ubuntu1~22.04 deb  -libstdc++6 12.3.0-1ubuntu1~22.04 deb  -libsystemd0 249.11-0ubuntu3.11 deb  -libtasn1-6 4.18.0-4build1 deb  -libtinfo6 6.3-2ubuntu0.1 deb  -libtirpc-common 1.3.2-2ubuntu0.1 deb  -libtirpc-dev 1.3.2-2ubuntu0.1 deb  -libtirpc3 1.3.2-2ubuntu0.1 deb  -libtsan0 11.4.0-1ubuntu1~22.04 deb  -libubsan1 12.3.0-1ubuntu1~22.04 deb  -libudev1 249.11-0ubuntu3.11 deb  -libunistring2 1.0-1 deb  -libuuid1 2.37.2-4ubuntu3 deb  -libxxhash0 0.8.1-1 deb  -libzstd1 1.4.8+dfsg-3build1 deb  -linux-libc-dev 5.15.0-89.99 deb  -llvmlite 0.41.1 python  -locket 1.0.0 python  -login 1:4.8.1-2ubuntu2.1 deb  -logsave 1.46.5-2ubuntu1.1 deb  -lsb-base 11.1.0ubuntu4 deb  -lto-disabled-list 24 deb  -lz4 4.3.2 python  -make 4.3-4.1build1 deb  -mamba 1.5.0 python  -markdown-it-py 3.0.0 python  -matplotlib 3.8.2 python  -mawk 1.3.4.20200120-3 deb  -mdurl 0.1.0 python  -menuinst 2.0.0 python  -merlin-core 23.6.0 python  -merlin-dataloader 23.6.0 python  -mlflow 2.9.1 python  -more-itertools 10.1.0 python  -morpheus 23.11.1 python  -mount 2.37.2-4ubuntu3 deb  -mpmath 1.3.0 python  -mrc 23.11.0 python  -msgpack 1.0.7 python  -multidict 6.0.4 python  -munkres 1.1.4 python  -nb-conda-kernels 2.3.1 python  -ncurses-base 6.3-2ubuntu0.1 deb  -ncurses-bin 6.3-2ubuntu0.1 deb  -networkx 3.2 python  -npy-append-array 0.9.16 python  -numba 0.58.1 python  -numpy 1.26.2 python  -numpydoc 1.4.0 python  -nvtabular 23.6.0 python  -nvtx 0.2.8 python  -oauthlib 3.2.2 python  -openjdk-11-jre-headless 11.0.21+9-0ubuntu1~22.04 deb  -openssh-client 1:8.9p1-3ubuntu0.4 deb  -openssl 3.0.2-0ubuntu1.12 deb  -openssl 3.2.0 binary  -ordered-set 4.1.0 python  -packaging 23.1 python  -packaging 23.2 python  -pandas 1.3.5 python  -partd 1.4.1 python  -passwd 1:4.8.1-2ubuntu2.1 deb  -patch 2.7.6-7build2 deb  -perl 5.34.0-3ubuntu1.3 deb  -perl-base 5.34.0-3ubuntu1.3 deb  -perl-modules-5.34 5.34.0-3ubuntu1.3 deb  -pinentry-curses 1.1.1-1build2 deb  -pip 23.3.1 python  -pkg-config 0.29.2-1ubuntu3 deb  -pkginfo 1.9.6 python  -pkgutil_resolve_name 1.3.10 python  -platformdirs 4.1.0 python  -pluggy 1.0.0 python  -pluggy 1.3.0 python  -procps 2:3.3.17-6ubuntu2.1 deb  -prometheus-client 0.19.0 python  -prometheus-flask-exporter 0.23.0 python  -prompt-toolkit 3.0.41 python  -protobuf 4.21.12 python  -psutil 5.9.5 python (+1 duplicate) -ptxcompiler 0.8.1 python  -pyOpenSSL 23.2.0 python  -pyOpenSSL 23.3.0 python  -pyarrow 11.0.0 python  -pyarrow-hotfix 0.6 python  -pycosat 0.6.4 python  -pycparser 2.21 python (+1 duplicate) -pynvml 11.4.1 python  -pyparsing 3.1.1 python  -python 3.10.12 binary  -python 3.10.13 binary  -python-dateutil 2.8.2 python  -python-rapidjson 1.13 python  -pytz 2023.3.post1 python (+1 duplicate) -pyzmq 25.1.2 python  -querystring-parser 1.2.4 python  -readline-common 8.1.2-1 deb  -referencing 0.31.1 python  -requests 2.31.0 python (+1 duplicate) -requests-cache 1.1.1 python  -rich 13.7.0 python  -rmm 23.6.0 python  -rpcsvc-proto 1.4.2-0ubuntu6 deb  -rpds-py 0.13.2 python  -ruamel.yaml 0.17.32 python  -ruamel.yaml.clib 0.2.7 python  -scikit-learn 1.2.2 python  -sed 4.8-1ubuntu2 deb  -sensible-utils 0.0.17 deb  -setuptools 59.8.0 python  -setuptools 68.1.2 python  -six 1.16.0 python  -smmap 5.0.0 python  -sniffio 1.3.0 python  -snowballstemmer 2.2.0 python  -sortedcontainers 2.4.0 python  -soupsieve 2.5 python  -sphinxcontrib-applehelp 1.0.7 python  -sphinxcontrib-devhelp 1.0.5 python  -sphinxcontrib-htmlhelp 2.0.4 python  -sphinxcontrib-jsmath 1.0.1 python  -sphinxcontrib-qthelp 1.0.6 python  -sphinxcontrib-serializinghtml 1.1.9 python  -sqlparse 0.4.4 python  -stringcase 1.2.0 python  -sympy 1.12 python  -sysvinit-utils 3.01-1ubuntu1 deb  -tabulate 0.9.0 python  -tar 1.34+dfsg-1ubuntu0.1.22.04.1 deb  -tblib 2.0.0 python  -tensorflow-metadata 1.13.1 python  -threadpoolctl 3.2.0 python  -tomli 2.0.1 python  -toolz 0.12.0 python (+1 duplicate) -torch 2.0.1 python  -tornado 6.3.3 python  -tqdm 4.66.1 python (+1 duplicate) -traitlets 5.14.0 python  -triton 2.0.0 python  -tritonclient 2.26.0 python  -typing-utils 0.1.0 python  -typing_extensions 4.8.0 python (+1 duplicate) -ubuntu-keyring 2021.03.26 deb  -ucf 3.0043 deb  -ujson 5.8.0 python  -unicodedata2 15.1.0 python  -unzip 6.0-26ubuntu3.1 deb  -url-normalize 1.4.3 python  -urllib3 2.0.4 python  -urllib3 2.1.0 python  -usrmerge 25ubuntu2 deb  -util-linux 2.37.2-4ubuntu3 deb  -watchdog 2.1.9 python  -watchgod 0.8.2 python  -wcwidth 0.2.12 python  -websocket-client 1.7.0 python  -websockets 12.0 python  -wget 1.21.2-2ubuntu1 deb  -wheel 0.41.2 python  -wheel 0.42.0 python  -xz-utils 5.2.5-2ubuntu1 deb  -zict 3.0.0 python  -zip 3.0-12build2 deb  -zipp 3.17.0 python (+1 duplicate) -zlib1g 1:1.2.11.dfsg-2ubuntu9.2 deb  -zstandard 0.19.0 python  diff --git a/data/sboms/nvcr.io/nvidia/morpheus/morpheus:24.03-runtime.sbom b/data/sboms/nvcr.io/nvidia/morpheus/morpheus:24.03-runtime.sbom deleted file mode 100644 index ceef72f..0000000 --- a/data/sboms/nvcr.io/nvidia/morpheus/morpheus:24.03-runtime.sbom +++ /dev/null @@ -1,493 +0,0 @@ -NAME VERSION TYPE -Babel 2.14.0 python  -Brotli 1.1.0 python (+1 duplicate) -ConfigArgParse 1.5.5 python  -Flask 3.0.3 python  -GitPython 3.1.43 python  -Jinja2 3.1.3 python (+1 duplicate) -Mako 1.3.3 python  -Markdown 3.6 python  -MarkupSafe 2.1.5 python (+1 duplicate) -PyJWT 2.8.0 python  -PySocks 1.7.1 python (+1 duplicate) -PyYAML 6.0.1 python (+1 duplicate) -Pygments 2.17.2 python (+1 duplicate) -SQLAlchemy 1.4.49 python  -Simple Launcher 1.1.0.14 dotnet (+5 duplicates) -Sphinx 7.3.7 python  -Werkzeug 3.0.2 python  -absl-py 1.4.0 python  -adagio 0.2.4 python  -adduser 3.118ubuntu5 deb  -alabaster 0.7.16 python  -alembic 1.13.1 python  -aniso8601 9.0.1 python  -annotated-types 0.6.0 python  -antlr4-python3-runtime 4.11.1 python  -anyio 3.7.1 python  -appdirs 1.4.4 python  -apt 2.4.12 deb  -archspec 0.2.3 python  -argon2-cffi 23.1.0 python  -argon2-cffi-bindings 21.2.0 python  -asn1crypto 1.5.1 python  -attrs 23.2.0 python (+1 duplicate) -base-files 12ubuntu4.6 deb  -base-passwd 3.5.52build1 deb  -bash 5.1-6ubuntu1.1 deb  -bc 1.07.1-3build1 deb  -beautifulsoup4 4.12.3 python  -betterproto 1.2.5 python  -binutils 2.38-4ubuntu2.6 deb  -binutils-common 2.38-4ubuntu2.6 deb  -binutils-x86-64-linux-gnu 2.38-4ubuntu2.6 deb  -blinker 1.7.0 python  -boa 0.17.0 python  -bokeh 3.4.1 python  -boltons 24.0.0 python  -bsdutils 1:2.37.2-4ubuntu3.4 deb  -build-essential 12.9ubuntu3 deb  -bzip2 1.0.8-5build1 deb  -ca-certificates 20230311ubuntu0.22.04.1 deb  -ca-certificates-java java-archive  -ca-certificates-java 20190909ubuntu1.2 deb  -cachetools 5.3.3 python  -cattrs 23.2.3 python  -certifi 2024.2.2 python (+1 duplicate) -cffi 1.16.0 python (+1 duplicate) -chardet 5.2.0 python  -charset-normalizer 3.3.2 python (+1 duplicate) -click 8.1.7 python (+1 duplicate) -cloudpickle 3.0.0 python  -colorama 0.4.6 python (+1 duplicate) -conda 24.3.0 python  -conda-build 24.3.0 python  -conda-libmamba-solver 24.1.0 python  -conda-package-handling 2.2.0 python  -conda_index 0.4.0 python  -conda_package_streaming 0.9.0 python  -confluent-kafka 1.9.2 python  -contourpy 1.2.1 python  -coreutils 8.32-4.1ubuntu1.2 deb  -cpp 4:11.2.0-1ubuntu1 deb  -cpp-11 11.4.0-1ubuntu1~22.04 deb  -cryptography 42.0.5 python  -cuda-cccl-12-1 12.1.109-1 deb  -cuda-compat-12-1 530.30.02-1 deb  -cuda-compiler-12-1 12.1.1-1 deb  -cuda-cudart-12-1 12.1.105-1 deb  -cuda-cudart-dev-12-1 12.1.105-1 deb  -cuda-cuobjdump-12-1 12.1.111-1 deb  -cuda-cupti-12-1 12.1.105-1 deb  -cuda-cuxxfilt-12-1 12.1.105-1 deb  -cuda-driver-dev-12-1 12.1.105-1 deb  -cuda-gdb-12-1 12.1.105-1 deb  -cuda-keyring 1.1-1 deb  -cuda-nvcc-12-1 12.1.105-1 deb  -cuda-nvdisasm-12-1 12.1.105-1 deb  -cuda-nvprune-12-1 12.1.105-1 deb  -cuda-python 12.4.0 python  -cuda-toolkit-12-1-config-common 12.1.105-1 deb  -cuda-toolkit-12-config-common 12.4.127-1 deb  -cuda-toolkit-config-common 12.4.127-1 deb  -cudf 24.2.2 python  -cupy 13.1.0 python  -curl 7.81.0-1ubuntu1.16 deb  -cycler 0.12.1 python  -cytoolz 0.12.3 python  -dash 0.5.11+git20210903+057cd650a4ed-3build1 deb  -dask 2024.1.1 python  -dask-cuda 24.2.0 python  -dask-cudf 24.2.2 python  -databricks-cli 0.18.0 python  -databricks-connect 14.3.1 python  -databricks-sdk 0.26.0 python  -dataclasses 0.8 python  -datacompy 0.10.5 python  -debconf 1.5.79ubuntu1 deb  -debianutils 5.5-1ubuntu2 deb  -diffutils 1:3.8-0ubuntu2 deb  -dill 0.3.7 python  -dirmngr 2.2.27-3ubuntu2.1 deb  -distributed 2024.1.1 python  -distro 1.9.0 python  -docker 5.0.3 python  -docker-pycreds 0.4.0 python  -docutils 0.21.2 python  -dpkg 1.21.1ubuntu2.3 deb  -dpkg-dev 1.21.1ubuntu2.3 deb  -e2fsprogs 1.46.5-2ubuntu1.1 deb  -elastic-transport 8.13.0 python  -elasticsearch 8.9.0 python  -entrypoints 0.4 python  -environs 9.5.0 python  -exceptiongroup 1.2.0 python (+1 duplicate) -fastrlock 0.8.2 python  -feedparser 6.0.10 python  -filelock 3.13.4 python (+1 duplicate) -findutils 4.8.0-1ubuntu3 deb  -fontconfig-config 2.13.1-4.2ubuntu5 deb  -fonts-dejavu-core 2.37-2build1 deb  -fonttools 4.51.0 python  -fs 2.4.16 python  -fsspec 2024.3.1 python  -fugue 0.8.7 python  -fugue-sql-antlr 0.2.0 python  -g++ 4:11.2.0-1ubuntu1 deb  -g++-11 11.4.0-1ubuntu1~22.04 deb  -gcc 4:11.2.0-1ubuntu1 deb  -gcc-11 11.4.0-1ubuntu1~22.04 deb  -gcc-11-base 11.4.0-1ubuntu1~22.04 deb  -gcc-12-base 12.3.0-1ubuntu1~22.04 deb  -gitdb 4.0.11 python  -gmpy2 2.1.5 python  -gnupg 2.2.27-3ubuntu2.1 deb  -gnupg-l10n 2.2.27-3ubuntu2.1 deb  -gnupg-utils 2.2.27-3ubuntu2.1 deb  -gnupg2 2.2.27-3ubuntu2.1 deb  -google-auth 2.29.0 python  -googleapis-common-protos 1.63.0 python  -gpg 2.2.27-3ubuntu2.1 deb  -gpg-agent 2.2.27-3ubuntu2.1 deb  -gpg-wks-client 2.2.27-3ubuntu2.1 deb  -gpg-wks-server 2.2.27-3ubuntu2.1 deb  -gpgconf 2.2.27-3ubuntu2.1 deb  -gpgsm 2.2.27-3ubuntu2.1 deb  -gpgv 2.2.27-3ubuntu2.1 deb  -graphene 3.3 python  -graphql-core 3.2.3 python  -graphql-relay 3.2.0 python  -graphviz 0.20.3 python  -greenlet 3.0.3 python  -grep 3.7-1build1 deb  -grpcio 1.60.0 python  -grpcio-status 1.60.0 python  -grpclib 0.4.7 python  -gunicorn 21.2.0 python  -gzip 1.10-4ubuntu4.1 deb  -h2 4.1.0 python  -hostname 3.23ubuntu2 deb  -hpack 4.0.0 python  -hyperframe 6.0.1 python  -idna 3.6 python  -idna 3.7 python  -imagesize 1.4.1 python  -importlib_metadata 7.1.0 python  -importlib_resources 6.4.0 python (+1 duplicate) -init-system-helpers 1.62 deb  -itsdangerous 2.2.0 python  -java-common 0.72build2 deb  -joblib 1.4.0 python (+1 duplicate) -jq 1.6-2.1ubuntu3 deb  -jrt-fs 11.0.22 java-archive  -js 1.0.0 npm  -json5 0.9.25 python  -jsonpatch 1.33 python  -jsonpointer 2.4 python  -jsonschema 4.21.1 python  -jsonschema-specifications 2023.12.1 python  -kiwisolver 1.4.5 python  -libacl1 2.3.1-1 deb  -libapt-pkg6.0 2.4.12 deb  -libarchive-c 5.1 python  -libasan6 11.4.0-1ubuntu1~22.04 deb  -libasound2 1.2.6.1-1ubuntu1 deb  -libasound2-data 1.2.6.1-1ubuntu1 deb  -libassuan0 2.5.5-1build1 deb  -libatomic1 12.3.0-1ubuntu1~22.04 deb  -libattr1 1:2.5.1-1build1 deb  -libaudit-common 1:3.0.7-1build1 deb  -libaudit1 1:3.0.7-1build1 deb  -libavahi-client3 0.8-5ubuntu5.2 deb  -libavahi-common-data 0.8-5ubuntu5.2 deb  -libavahi-common3 0.8-5ubuntu5.2 deb  -libbinutils 2.38-4ubuntu2.6 deb  -libblkid1 2.37.2-4ubuntu3.4 deb  -libbrotli1 1.0.9-2build6 deb  -libbsd0 0.11.5-1 deb  -libbz2-1.0 1.0.8-5build1 deb  -libc-bin 2.35-0ubuntu3.7 deb  -libc-dev-bin 2.35-0ubuntu3.7 deb  -libc6 2.35-0ubuntu3.7 deb  -libc6-dev 2.35-0ubuntu3.7 deb  -libcap-ng0 0.7.9-2.2build3 deb  -libcap2 1:2.44-1ubuntu0.22.04.1 deb  -libcbor0.8 0.8.0-2ubuntu1 deb  -libcc1-0 12.3.0-1ubuntu1~22.04 deb  -libcom-err2 1.46.5-2ubuntu1.1 deb  -libcrypt-dev 1:4.4.27-1 deb  -libcrypt1 1:4.4.27-1 deb  -libctf-nobfd0 2.38-4ubuntu2.6 deb  -libctf0 2.38-4ubuntu2.6 deb  -libcublas-12-1 12.1.3.1-1 deb  -libcufft-12-1 11.0.2.54-1 deb  -libcups2 2.4.1op1-1ubuntu4.8 deb  -libcurand-12-1 10.3.2.106-1 deb  -libcurl4 7.81.0-1ubuntu1.16 deb  -libcusolver-12-1 11.4.5.107-1 deb  -libdb5.3 5.3.28+dfsg1-0.8ubuntu3 deb  -libdbus-1-3 1.12.20-2ubuntu4.1 deb  -libdebconfclient0 0.261ubuntu1 deb  -libdpkg-perl 1.21.1ubuntu2.3 deb  -libedit2 3.1-20210910-1build1 deb  -libexpat1 2.4.7-1ubuntu0.3 deb  -libext2fs2 1.46.5-2ubuntu1.1 deb  -libffi8 3.4.2-4 deb  -libfido2-1 1.10.0-1 deb  -libfontconfig1 2.13.1-4.2ubuntu5 deb  -libfreetype6 2.11.1+dfsg-1ubuntu0.2 deb  -libgcc-11-dev 11.4.0-1ubuntu1~22.04 deb  -libgcc-s1 12.3.0-1ubuntu1~22.04 deb  -libgcrypt20 1.9.4-3ubuntu3 deb  -libgdbm-compat4 1.23-1 deb  -libgdbm6 1.23-1 deb  -libglib2.0-0 2.72.4-0ubuntu2.2 deb  -libgmp10 2:6.2.1+dfsg-3ubuntu1 deb  -libgnutls30 3.7.3-4ubuntu1.5 deb  -libgomp1 12.3.0-1ubuntu1~22.04 deb  -libgpg-error0 1.43-3 deb  -libgraphite2-3 1.3.14-1build2 deb  -libgssapi-krb5-2 1.19.2-2ubuntu0.3 deb  -libharfbuzz0b 2.7.4-1ubuntu3.1 deb  -libhogweed6 3.7.3-1build2 deb  -libidn2-0 2.3.2-2build1 deb  -libisl23 0.24-2build1 deb  -libitm1 12.3.0-1ubuntu1~22.04 deb  -libjpeg-turbo8 2.1.2-0ubuntu1 deb  -libjpeg8 8c-2ubuntu10 deb  -libjq1 1.6-2.1ubuntu3 deb  -libk5crypto3 1.19.2-2ubuntu0.3 deb  -libkeyutils1 1.6.1-2ubuntu3 deb  -libkrb5-3 1.19.2-2ubuntu0.3 deb  -libkrb5support0 1.19.2-2ubuntu0.3 deb  -libksba8 1.6.0-2ubuntu0.2 deb  -liblcms2-2 2.12~rc1-2build2 deb  -libldap-2.5-0 2.5.17+dfsg-0ubuntu0.22.04.1 deb  -liblsan0 12.3.0-1ubuntu1~22.04 deb  -liblz4-1 1.9.3-2build2 deb  -liblzma5 5.2.5-2ubuntu1 deb  -libmambapy 1.5.8 python  -libmd0 1.0.4-1build1 deb  -libmount1 2.37.2-4ubuntu3.4 deb  -libmpc3 1.2.1-2build1 deb  -libmpfr6 4.1.0-3build3 deb  -libncurses6 6.3-2ubuntu0.1 deb  -libncursesw6 6.3-2ubuntu0.1 deb  -libnettle8 3.7.3-1build2 deb  -libnghttp2-14 1.43.0-1ubuntu0.1 deb  -libnpth0 1.6-3build2 deb  -libnsl-dev 1.3.0-2build2 deb  -libnsl2 1.3.0-2build2 deb  -libnspr4 2:4.35-0ubuntu0.22.04.1 deb  -libnss3 2:3.98-0ubuntu0.22.04.2 deb  -libnuma1 2.0.14-3ubuntu2 deb  -libonig5 6.9.7.1-2build1 deb  -libp11-kit0 0.24.0-6build1 deb  -libpam-modules 1.4.0-11ubuntu2.4 deb  -libpam-modules-bin 1.4.0-11ubuntu2.4 deb  -libpam-runtime 1.4.0-11ubuntu2.4 deb  -libpam0g 1.4.0-11ubuntu2.4 deb  -libpcre2-8-0 10.39-3ubuntu0.1 deb  -libpcre3 2:8.39-13ubuntu0.22.04.1 deb  -libpcsclite1 1.9.5-3ubuntu1 deb  -libperl5.34 5.34.0-3ubuntu1.3 deb  -libpng16-16 1.6.37-3build5 deb  -libprocps8 2:3.3.17-6ubuntu2.1 deb  -libpsl5 0.21.0-1.2build2 deb  -libquadmath0 12.3.0-1ubuntu1~22.04 deb  -libreadline8 8.1.2-1 deb  -librtmp1 2.4+20151223.gitfa8646d.1-2build4 deb  -libsasl2-2 2.1.27+dfsg2-3ubuntu1.2 deb  -libsasl2-modules-db 2.1.27+dfsg2-3ubuntu1.2 deb  -libseccomp2 2.5.3-2ubuntu2 deb  -libselinux1 3.3-1build2 deb  -libsemanage-common 3.3-1build2 deb  -libsemanage2 3.3-1build2 deb  -libsepol2 3.3-1build1 deb  -libsmartcols1 2.37.2-4ubuntu3.4 deb  -libsqlite3-0 3.37.2-2ubuntu0.3 deb  -libss2 1.46.5-2ubuntu1.1 deb  -libssh-4 0.9.6-2ubuntu0.22.04.3 deb  -libssl3 3.0.2-0ubuntu1.15 deb  -libstdc++-11-dev 11.4.0-1ubuntu1~22.04 deb  -libstdc++6 12.3.0-1ubuntu1~22.04 deb  -libsystemd0 249.11-0ubuntu3.12 deb  -libtasn1-6 4.18.0-4build1 deb  -libtinfo6 6.3-2ubuntu0.1 deb  -libtirpc-common 1.3.2-2ubuntu0.1 deb  -libtirpc-dev 1.3.2-2ubuntu0.1 deb  -libtirpc3 1.3.2-2ubuntu0.1 deb  -libtsan0 11.4.0-1ubuntu1~22.04 deb  -libubsan1 12.3.0-1ubuntu1~22.04 deb  -libudev1 249.11-0ubuntu3.12 deb  -libunistring2 1.0-1 deb  -libuuid1 2.37.2-4ubuntu3.4 deb  -libxxhash0 0.8.1-1 deb  -libzstd1 1.4.8+dfsg-3build1 deb  -lief 0.14.1 python  -linux-libc-dev 5.15.0-105.115 deb  -llvmlite 0.42.0 python  -locket 1.0.0 python  -login 1:4.8.1-2ubuntu2.2 deb  -logsave 1.46.5-2ubuntu1.1 deb  -lsb-base 11.1.0ubuntu4 deb  -lto-disabled-list 24 deb  -lz4 4.3.3 python  -make 4.3-4.1build1 deb  -mamba 1.5.8 python  -markdown-it-py 3.0.0 python (+1 duplicate) -marshmallow 3.21.1 python  -matplotlib 3.8.4 python  -mawk 1.3.4.20200120-3 deb  -mdurl 0.1.2 python (+1 duplicate) -menuinst 2.0.2 python  -merlin-core 23.8.0 python  -merlin-dataloader 23.8.0 python  -milvus 2.3.5 python  -minio 7.2.5 python  -mlflow 2.12.1 python  -mlflow-skinny 2.12.1 python  -more-itertools 10.2.0 python  -morpheus 24.3.2 python  -mount 2.37.2-4ubuntu3.4 deb  -mpmath 1.3.0 python  -mrc 24.3.1 python  -msgpack 1.0.7 python  -multidict 6.0.5 python  -munkres 1.1.4 python  -ncurses-base 6.3-2ubuntu0.1 deb  -ncurses-bin 6.3-2ubuntu0.1 deb  -networkx 2.8.8 python  -npy-append-array 0.9.16 python  -numba 0.59.1 python  -numpy 1.24.4 python  -numpydoc 1.5.0 python  -nvtabular 23.8.0 python  -nvtx 0.2.10 python  -oauthlib 3.2.2 python  -openjdk-11-jre-headless 11.0.22+7-0ubuntu2~22.04.1 deb  -openssh-client 1:8.9p1-3ubuntu0.7 deb  -openssl 3.0.2-0ubuntu1.15 deb  -openssl 3.2.1 binary  -ordered-set 4.1.0 python  -packaging 24.0 python (+1 duplicate) -pandas 1.5.3 python  -partd 1.4.1 python  -passwd 1:4.8.1-2ubuntu2.2 deb  -patch 2.7.6-7build2 deb  -perl 5.34.0-3ubuntu1.3 deb  -perl-base 5.34.0-3ubuntu1.3 deb  -perl-modules-5.34 5.34.0-3ubuntu1.3 deb  -pillow 10.3.0 python  -pinentry-curses 1.1.1-1build2 deb  -pip 24.0 python  -pkg-config 0.29.2-1ubuntu3 deb  -pkginfo 1.10.0 python  -pkgutil_resolve_name 1.3.10 python  -platformdirs 4.2.0 python  -platformdirs 4.2.1 python  -pluggy 1.3.0 python  -pluggy 1.4.0 python  -procps 2:3.3.17-6ubuntu2.1 deb  -prometheus-flask-exporter 0.23.0 python  -prometheus_client 0.20.0 python  -prompt-toolkit 3.0.42 python  -protobuf 4.24.4 python  -psutil 5.9.8 python (+1 duplicate) -py4j 0.10.9.7 python  -py4j0 10.9.7 java-archive  -pyOpenSSL 24.0.0 python  -pyarrow 14.0.2 python  -pyarrow-hotfix 0.6 python  -pyasn1 0.6.0 python  -pyasn1_modules 0.4.0 python  -pycosat 0.6.6 python  -pycparser 2.22 python (+1 duplicate) -pycryptodome 3.20.0 python  -pydantic 2.7.1 python  -pydantic_core 2.18.2 python  -pymilvus 2.3.6 python  -pynvjitlink 0.2.1 python  -pynvml 11.4.1 python  -pyparsing 3.1.2 python  -python 3.10.14 binary  -python-dateutil 2.9.0 python  -python-dotenv 1.0.1 python  -python-rapidjson 1.16 python  -pytz 2024.1 python (+1 duplicate) -qpd 0.4.4 python  -querystring-parser 1.2.4 python  -readline-common 8.1.2-1 deb  -referencing 0.34.0 python  -requests 2.31.0 python (+1 duplicate) -requests-cache 1.1.1 python  -requests-toolbelt 1.0.0 python  -rich 13.7.1 python (+1 duplicate) -rmm 24.2.0 python  -rpcsvc-proto 1.4.2-0ubuntu6 deb  -rpds-py 0.18.0 python  -rsa 4.9 python  -ruamel.yaml 0.18.6 python  -ruamel.yaml.clib 0.2.8 python  -scikit-learn 1.3.2 python  -scipy 1.13.0 python  -sed 4.8-1ubuntu2 deb  -sensible-utils 0.0.17 deb  -setuptools 69.5.1 python (+1 duplicate) -sgmllib3k 1.0.0 python  -six 1.16.0 python  -smmap 5.0.0 python  -sniffio 1.3.1 python  -snowballstemmer 2.2.0 python  -sortedcontainers 2.4.0 python  -soupsieve 2.5 python  -sphinxcontrib-applehelp 1.0.8 python  -sphinxcontrib-devhelp 1.0.6 python  -sphinxcontrib-htmlhelp 2.0.5 python  -sphinxcontrib-jsmath 1.0.1 python  -sphinxcontrib-qthelp 1.0.7 python  -sphinxcontrib-serializinghtml 1.1.10 python  -sqlglot 23.11.2 python  -sqlparse 0.4.4 python  -stringcase 1.2.0 python  -sympy 1.12 python  -sysvinit-utils 3.01-1ubuntu1 deb  -tabulate 0.9.0 python  -tar 1.34+dfsg-1ubuntu0.1.22.04.2 deb  -tblib 3.0.0 python  -tensorflow-metadata 1.13.1 python  -threadpoolctl 3.4.0 python  -tomli 2.0.1 python (+1 duplicate) -toolz 0.12.1 python  -torch 2.3.0 python  -tornado 6.4 python  -tqdm 4.66.2 python (+1 duplicate) -triad 0.9.6 python  -triton 2.3.0 python  -tritonclient 2.34.0 python  -truststore 0.8.0 python  -typing-utils 0.1.0 python  -typing_extensions 4.11.0 python (+1 duplicate) -ubuntu-keyring 2021.03.26 deb  -ucf 3.0043 deb  -ujson 5.9.0 python  -unicodedata2 15.1.0 python  -unzip 6.0-26ubuntu3.2 deb  -url-normalize 1.4.3 python  -urllib3 2.2.1 python (+1 duplicate) -usrmerge 25ubuntu2 deb  -util-linux 2.37.2-4ubuntu3.4 deb  -watchdog 3.0.0 python  -watchgod 0.8.2 python  -wcwidth 0.2.13 python  -websocket-client 1.8.0 python  -websockets 12.0 python  -wget 1.21.2-2ubuntu1 deb  -wheel 0.43.0 python (+1 duplicate) -xyzservices 2024.4.0 python  -xz-utils 5.2.5-2ubuntu1 deb  -zict 3.0.0 python  -zip 3.0-12build2 deb  -zipp 3.17.0 python (+1 duplicate) -zlib1g 1:1.2.11.dfsg-2ubuntu9.2 deb  -zstandard 0.22.0 python  diff --git a/data/sboms/nvcr.io/nvidia/morpheus/morpheus:v23.07.03-runtime.sbom b/data/sboms/nvcr.io/nvidia/morpheus/morpheus:v23.07.03-runtime.sbom deleted file mode 100644 index bc80a8b..0000000 --- a/data/sboms/nvcr.io/nvidia/morpheus/morpheus:v23.07.03-runtime.sbom +++ /dev/null @@ -1,502 +0,0 @@ -NAME VERSION TYPE -@jupyter-widgets/jupyterlab-manager 5.0.9 npm  -@jupyterlab/application-top 4.0.7 npm (+2 duplicates) -@jupyterlab/galata-extension 5.0.6 npm  -@jupyterlab/mock-consumer 4.0.7 npm  -@jupyterlab/mock-extension 4.0.7 npm  -@jupyterlab/mock-incompat 0.1.0 npm  -@jupyterlab/mock-mime-extension 0.3.0 npm  -@jupyterlab/mock-package 0.1.0 npm  -@jupyterlab/mock-provider 4.0.7 npm  -@jupyterlab/mock-token 4.0.7 npm  -Babel 2.13.0 python  -Brotli 1.0.9 python  -Brotli 1.1.0 python  -ConfigArgParse 1.5.5 python  -Flask 2.3.3 python  -GitPython 3.1.37 python  -Jinja2 3.1.2 python (+1 duplicate) -Mako 1.2.4 python  -Markdown 3.5 python  -MarkupSafe 2.1.3 python (+1 duplicate) -Pillow 10.0.1 python  -PyJWT 2.8.0 python  -PySocks 1.7.1 python (+1 duplicate) -PyYAML 6.0.1 python (+1 duplicate) -Pygments 2.16.1 python (+1 duplicate) -SQLAlchemy 2.0.0 python  -Send2Trash 1.8.2 python  -Simple Launcher 1.1.0.14 dotnet (+5 duplicates) -Sphinx 7.2.6 python  -Werkzeug 3.0.0 python  -absl-py 1.4.0 python  -adduser 3.118ubuntu5 deb  -alabaster 0.7.13 python  -alembic 1.12.0 python  -anyio 3.7.1 python  -anyio 4.0.0 python  -appdirs 1.4.4 python  -apt 2.4.10 deb  -argon2-cffi 23.1.0 python  -argon2-cffi-bindings 21.2.0 python  -arrow 1.3.0 python  -asn1crypto 1.5.1 python  -asttokens 2.4.0 python  -async-lru 2.0.4 python  -attrs 23.1.0 python (+1 duplicate) -backcall 0.2.0 python  -backports.functools-lru-cache 1.6.5 python  -base-files 12ubuntu4.4 deb  -base-passwd 3.5.52build1 deb  -bash 5.1-6ubuntu1 deb  -bc 1.07.1-3build1 deb  -beautifulsoup4 4.12.2 python (+1 duplicate) -betterproto 1.2.5 python  -binutils 2.38-4ubuntu2.3 deb  -binutils-common 2.38-4ubuntu2.3 deb  -binutils-x86-64-linux-gnu 2.38-4ubuntu2.3 deb  -bleach 6.1.0 python  -blinker 1.6.3 python  -boa 0.15.1 python  -bokeh 2.4.3 python  -boltons 23.0.0 python  -bsdutils 1:2.37.2-4ubuntu3 deb  -build-essential 12.9ubuntu3 deb  -bytecode 0.13.0.dev0 python  -bzip2 1.0.8-5build1 deb  -ca-certificates 20230311ubuntu0.22.04.1 deb  -cachetools 5.3.1 python  -certifi 2023.7.22 python (+1 duplicate) -cffi 1.15.1 python  -cffi 1.16.0 python  -chardet 5.2.0 python  -charset-normalizer 3.2.0 python  -charset-normalizer 3.3.0 python  -click 8.1.7 python (+1 duplicate) -cloudpickle 2.2.1 python  -colorama 0.4.6 python (+1 duplicate) -comm 0.1.4 python  -conda 23.3.1 python  -conda-build 3.25.0 python  -conda-libmamba-solver 23.3.0 python  -conda-package-handling 2.2.0 python  -conda_index 0.3.0 python  -conda_package_streaming 0.9.0 python  -configparser 5.3.0 python  -confluent-kafka 1.9.2 python  -contourpy 1.1.1 python  -coreutils 8.32-4.1ubuntu1 deb  -cpp 4:11.2.0-1ubuntu1 deb  -cpp-11 11.4.0-1ubuntu1~22.04 deb  -cryptography 41.0.3 python  -cryptography 41.0.4 python  -cubinlinker 0.3.0 python  -cuda-cccl-11-8 11.8.89-1 deb  -cuda-compat-11-8 520.61.05-1 deb  -cuda-compiler-11-8 11.8.0-1 deb  -cuda-cudart-11-8 11.8.89-1 deb  -cuda-cudart-dev-11-8 11.8.89-1 deb  -cuda-cuobjdump-11-8 11.8.86-1 deb  -cuda-cupti-11-8 11.8.87-1 deb  -cuda-cuxxfilt-11-8 11.8.86-1 deb  -cuda-driver-dev-11-8 11.8.89-1 deb  -cuda-gdb-11-8 11.8.86-1 deb  -cuda-keyring 1.1-1 deb  -cuda-nvcc-11-8 11.8.89-1 deb  -cuda-nvdisasm-11-8 11.8.86-1 deb  -cuda-nvprune-11-8 11.8.86-1 deb  -cuda-python 11.8.2 python  -cuda-toolkit-11-8-config-common 11.8.89-1 deb  -cuda-toolkit-11-config-common 11.8.89-1 deb  -cuda-toolkit-config-common 12.2.140-1 deb  -cudf 23.6.1 python  -cudf-kafka 23.6.1 python  -cupy 12.2.0 python  -curl 7.81.0-1ubuntu1.14 deb  -cycler 0.12.1 python  -cytoolz 0.12.2 python  -dash 0.5.11+git20210903+057cd650a4ed-3build1 deb  -dask 2023.3.2 python  -dask-cuda 23.6.0 python  -dask-cudf 23.6.1 python  -databricks-cli 0.18.0 python  -dataclasses 0.8 python (+1 duplicate) -datacompy 0.8.4 python  -debconf 1.5.79ubuntu1 deb  -debianutils 5.5-1ubuntu2 deb  -debugpy 1.8.0 python  -decorator 5.1.1 python  -defusedxml 0.7.1 python  -diffutils 1:3.8-0ubuntu2 deb  -dill 0.3.7 python  -dirmngr 2.2.27-3ubuntu2.1 deb  -distributed 2023.3.2.1 python  -docker 5.0.3 python  -docker-pycreds 0.4.0 python  -docutils 0.20.1 python  -dpkg 1.21.1ubuntu2.2 deb  -dpkg-dev 1.21.1ubuntu2.2 deb  -e2fsprogs 1.46.5-2ubuntu1.1 deb  -entrypoints 0.4 python  -exceptiongroup 1.1.3 python (+1 duplicate) -executing 2.0.0 python  -fastjsonschema 2.18.1 python  -fastrlock 0.8.2 python  -filelock 3.12.4 python (+1 duplicate) -findutils 4.8.0-1ubuntu3 deb  -fonttools 4.43.1 python  -fqdn 1.5.1 python  -fsspec 2023.9.2 python  -g++ 4:11.2.0-1ubuntu1 deb  -g++-11 11.4.0-1ubuntu1~22.04 deb  -gcc 4:11.2.0-1ubuntu1 deb  -gcc-11 11.4.0-1ubuntu1~22.04 deb  -gcc-11-base 11.4.0-1ubuntu1~22.04 deb  -gcc-12-base 12.3.0-1ubuntu1~22.04 deb  -gitdb 4.0.10 python  -glob2 0.7 python  -gmpy2 2.1.2 python  -gnupg 2.2.27-3ubuntu2.1 deb  -gnupg-l10n 2.2.27-3ubuntu2.1 deb  -gnupg-utils 2.2.27-3ubuntu2.1 deb  -gnupg2 2.2.27-3ubuntu2.1 deb  -googleapis-common-protos 1.60.0 python  -gpg 2.2.27-3ubuntu2.1 deb  -gpg-agent 2.2.27-3ubuntu2.1 deb  -gpg-wks-client 2.2.27-3ubuntu2.1 deb  -gpg-wks-server 2.2.27-3ubuntu2.1 deb  -gpgconf 2.2.27-3ubuntu2.1 deb  -gpgsm 2.2.27-3ubuntu2.1 deb  -gpgv 2.2.27-3ubuntu2.1 deb  -greenlet 3.0.0 python  -grep 3.7-1build1 deb  -grpcio 1.54.2 python  -grpclib 0.4.6 python  -gunicorn 21.2.0 python  -gzip 1.10-4ubuntu4.1 deb  -h2 4.1.0 python  -hostname 3.23ubuntu2 deb  -hpack 4.0.0 python  -html5lib 1.1 python  -hyperframe 6.0.1 python  -idna 3.4 python (+1 duplicate) -imagesize 1.4.1 python  -importlib-metadata 6.8.0 python  -importlib-resources 6.1.0 python (+1 duplicate) -init-system-helpers 1.62 deb  -ipykernel 6.25.2 python  -ipython 8.16.1 python  -ipywidgets 8.1.1 python  -isoduration 20.11.0 python  -itsdangerous 2.1.2 python  -jedi 0.19.1 python  -joblib 1.3.2 python (+1 duplicate) -jq 1.6-2.1ubuntu3 deb  -js 1.0.0 npm  -json5 0.9.14 python (+1 duplicate) -jsonpatch 1.32 python  -jsonpointer 2.0 python  -jsonpointer 2.4 python  -jsonschema 4.19.1 python (+1 duplicate) -jsonschema-specifications 2023.7.1 python (+1 duplicate) -jupyter-events 0.7.0 python  -jupyter-lsp 2.2.0 python  -jupyter_client 8.4.0 python  -jupyter_core 4.12.0 python  -jupyter_server 2.7.3 python  -jupyter_server_terminals 0.4.4 python  -jupyterlab 4.0.7 python  -jupyterlab-pygments 0.2.2 python  -jupyterlab-widgets 3.0.9 python  -jupyterlab_pygments 0.2.2 npm (+1 duplicate) -jupyterlab_server 2.25.0 python  -kiwisolver 1.4.5 python  -libacl1 2.3.1-1 deb  -libapt-pkg6.0 2.4.10 deb  -libarchive-c 5.0 python  -libasan6 11.4.0-1ubuntu1~22.04 deb  -libassuan0 2.5.5-1build1 deb  -libatomic1 12.3.0-1ubuntu1~22.04 deb  -libattr1 1:2.5.1-1build1 deb  -libaudit-common 1:3.0.7-1build1 deb  -libaudit1 1:3.0.7-1build1 deb  -libbinutils 2.38-4ubuntu2.3 deb  -libblkid1 2.37.2-4ubuntu3 deb  -libbrotli1 1.0.9-2build6 deb  -libbsd0 0.11.5-1 deb  -libbz2-1.0 1.0.8-5build1 deb  -libc-bin 2.35-0ubuntu3.4 deb  -libc-dev-bin 2.35-0ubuntu3.4 deb  -libc6 2.35-0ubuntu3.4 deb  -libc6-dev 2.35-0ubuntu3.4 deb  -libcap-ng0 0.7.9-2.2build3 deb  -libcap2 1:2.44-1ubuntu0.22.04.1 deb  -libcbor0.8 0.8.0-2ubuntu1 deb  -libcc1-0 12.3.0-1ubuntu1~22.04 deb  -libcom-err2 1.46.5-2ubuntu1.1 deb  -libcrypt-dev 1:4.4.27-1 deb  -libcrypt1 1:4.4.27-1 deb  -libctf-nobfd0 2.38-4ubuntu2.3 deb  -libctf0 2.38-4ubuntu2.3 deb  -libcublas-11-8 11.11.3.6-1 deb  -libcufft-11-8 10.9.0.58-1 deb  -libcurand-11-8 10.3.0.86-1 deb  -libcurl4 7.81.0-1ubuntu1.14 deb  -libcusolver-11-8 11.4.1.48-1 deb  -libdb5.3 5.3.28+dfsg1-0.8ubuntu3 deb  -libdebconfclient0 0.261ubuntu1 deb  -libdpkg-perl 1.21.1ubuntu2.2 deb  -libedit2 3.1-20210910-1build1 deb  -libext2fs2 1.46.5-2ubuntu1.1 deb  -libffi8 3.4.2-4 deb  -libfido2-1 1.10.0-1 deb  -libgcc-11-dev 11.4.0-1ubuntu1~22.04 deb  -libgcc-s1 12.3.0-1ubuntu1~22.04 deb  -libgcrypt20 1.9.4-3ubuntu3 deb  -libgdbm-compat4 1.23-1 deb  -libgdbm6 1.23-1 deb  -libglib2.0-0 2.72.4-0ubuntu2.2 deb  -libgmp10 2:6.2.1+dfsg-3ubuntu1 deb  -libgnutls30 3.7.3-4ubuntu1.2 deb  -libgomp1 12.3.0-1ubuntu1~22.04 deb  -libgpg-error0 1.43-3 deb  -libgssapi-krb5-2 1.19.2-2ubuntu0.2 deb  -libhogweed6 3.7.3-1build2 deb  -libidn2-0 2.3.2-2build1 deb  -libisl23 0.24-2build1 deb  -libitm1 12.3.0-1ubuntu1~22.04 deb  -libjq1 1.6-2.1ubuntu3 deb  -libk5crypto3 1.19.2-2ubuntu0.2 deb  -libkeyutils1 1.6.1-2ubuntu3 deb  -libkrb5-3 1.19.2-2ubuntu0.2 deb  -libkrb5support0 1.19.2-2ubuntu0.2 deb  -libksba8 1.6.0-2ubuntu0.2 deb  -libldap-2.5-0 2.5.16+dfsg-0ubuntu0.22.04.1 deb  -liblsan0 12.3.0-1ubuntu1~22.04 deb  -liblz4-1 1.9.3-2build2 deb  -liblzma5 5.2.5-2ubuntu1 deb  -libmambapy 1.4.2 python  -libmd0 1.0.4-1build1 deb  -libmount1 2.37.2-4ubuntu3 deb  -libmpc3 1.2.1-2build1 deb  -libmpfr6 4.1.0-3build3 deb  -libncurses6 6.3-2ubuntu0.1 deb  -libncursesw6 6.3-2ubuntu0.1 deb  -libnettle8 3.7.3-1build2 deb  -libnghttp2-14 1.43.0-1build3 deb  -libnpth0 1.6-3build2 deb  -libnsl-dev 1.3.0-2build2 deb  -libnsl2 1.3.0-2build2 deb  -libnuma1 2.0.14-3ubuntu2 deb  -libonig5 6.9.7.1-2build1 deb  -libp11-kit0 0.24.0-6build1 deb  -libpam-modules 1.4.0-11ubuntu2.3 deb  -libpam-modules-bin 1.4.0-11ubuntu2.3 deb  -libpam-runtime 1.4.0-11ubuntu2.3 deb  -libpam0g 1.4.0-11ubuntu2.3 deb  -libpcre2-8-0 10.39-3ubuntu0.1 deb  -libpcre3 2:8.39-13ubuntu0.22.04.1 deb  -libperl5.34 5.34.0-3ubuntu1.2 deb  -libprocps8 2:3.3.17-6ubuntu2 deb  -libpsl5 0.21.0-1.2build2 deb  -libquadmath0 12.3.0-1ubuntu1~22.04 deb  -libreadline8 8.1.2-1 deb  -librtmp1 2.4+20151223.gitfa8646d.1-2build4 deb  -libsasl2-2 2.1.27+dfsg2-3ubuntu1.2 deb  -libsasl2-modules-db 2.1.27+dfsg2-3ubuntu1.2 deb  -libseccomp2 2.5.3-2ubuntu2 deb  -libselinux1 3.3-1build2 deb  -libsemanage-common 3.3-1build2 deb  -libsemanage2 3.3-1build2 deb  -libsepol2 3.3-1build1 deb  -libsmartcols1 2.37.2-4ubuntu3 deb  -libsqlite3-0 3.37.2-2ubuntu0.1 deb  -libss2 1.46.5-2ubuntu1.1 deb  -libssh-4 0.9.6-2ubuntu0.22.04.1 deb  -libssl3 3.0.2-0ubuntu1.10 deb  -libstdc++-11-dev 11.4.0-1ubuntu1~22.04 deb  -libstdc++6 12.3.0-1ubuntu1~22.04 deb  -libsystemd0 249.11-0ubuntu3.10 deb  -libtasn1-6 4.18.0-4build1 deb  -libtinfo6 6.3-2ubuntu0.1 deb  -libtirpc-common 1.3.2-2ubuntu0.1 deb  -libtirpc-dev 1.3.2-2ubuntu0.1 deb  -libtirpc3 1.3.2-2ubuntu0.1 deb  -libtsan0 11.4.0-1ubuntu1~22.04 deb  -libubsan1 12.3.0-1ubuntu1~22.04 deb  -libudev1 249.11-0ubuntu3.10 deb  -libunistring2 1.0-1 deb  -libuuid1 2.37.2-4ubuntu3 deb  -libxxhash0 0.8.1-1 deb  -libzstd1 1.4.8+dfsg-3build1 deb  -linux-libc-dev 5.15.0-86.96 deb  -llvmlite 0.40.1 python  -locket 1.0.0 python  -login 1:4.8.1-2ubuntu2.1 deb  -logsave 1.46.5-2ubuntu1.1 deb  -lsb-base 11.1.0ubuntu4 deb  -lto-disabled-list 24 deb  -lz4 4.3.2 python  -make 4.3-4.1build1 deb  -mamba 1.4.2 python  -markdown-it-py 3.0.0 python  -matplotlib 3.8.0 python  -matplotlib-inline 0.1.6 python  -mawk 1.3.4.20200120-3 deb  -mdurl 0.1.0 python  -merlin-core 23.6.0 python  -merlin-dataloader 23.6.0 python  -mistune 3.0.2 python  -mlflow 2.6.0 python  -more-itertools 10.1.0 python  -morpheus 23.7.3 python  -mount 2.37.2-4ubuntu3 deb  -mpmath 1.3.0 python  -mrc 23.7.0 python  -msgpack 1.0.6 python  -multidict 6.0.4 python  -munkres 1.1.4 python  -nb-conda-kernels 2.3.1 python  -nbclient 0.8.0 python  -nbconvert 7.9.2 python  -nbformat 5.9.2 python  -ncurses-base 6.3-2ubuntu0.1 deb  -ncurses-bin 6.3-2ubuntu0.1 deb  -nest-asyncio 1.5.8 python  -networkx 3.1 python  -notebook_shim 0.2.3 python  -npy-append-array 0.9.16 python  -numba 0.57.1 python  -numpy 1.24.4 python  -numpydoc 1.4.0 python  -nvidia-pyindex 1.0.9 python  -nvtabular 23.6.0 python  -nvtx 0.2.8 python  -oauthlib 3.2.2 python  -openssh-client 1:8.9p1-3ubuntu0.4 deb  -openssl 3.0.2-0ubuntu1.10 deb  -openssl 3.1.3 binary  -ordered-set 4.1.0 python  -overrides 7.4.0 python  -packaging 23.1 python  -packaging 23.2 python  -pandas 1.3.5 python  -pandocfilters 1.5.0 python  -parso 0.8.3 python  -partd 1.4.1 python  -passwd 1:4.8.1-2ubuntu2.1 deb  -patch 2.7.6-7build2 deb  -perl 5.34.0-3ubuntu1.2 deb  -perl-base 5.34.0-3ubuntu1.2 deb  -perl-modules-5.34 5.34.0-3ubuntu1.2 deb  -pexpect 4.8.0 python  -pickleshare 0.7.5 python  -pinentry-curses 1.1.1-1build2 deb  -pip 23.2.1 python  -pkg-config 0.29.2-1ubuntu3 deb  -pkginfo 1.9.6 python  -pkgutil_resolve_name 1.3.10 python  -platformdirs 3.11.0 python  -pluggy 1.0.0 python  -pluggy 1.3.0 python  -procps 2:3.3.17-6ubuntu2 deb  -prometheus-client 0.17.1 python  -prometheus-flask-exporter 0.22.4 python  -prompt-toolkit 3.0.39 python (+1 duplicate) -protobuf 4.21.12 python  -psutil 5.9.5 python (+1 duplicate) -ptxcompiler 0.8.1 python  -ptyprocess 0.7.0 python  -pure-eval 0.2.2 python  -pyOpenSSL 23.2.0 python (+1 duplicate) -pyarrow 11.0.0 python  -pycosat 0.6.4 python  -pycparser 2.21 python (+1 duplicate) -pynvml 11.4.1 python  -pyparsing 3.1.1 python  -python 3.10.12 binary  -python-dateutil 2.8.2 python  -python-json-logger 2.0.7 python  -python-rapidjson 1.12 python  -pytz 2023.3.post1 python (+1 duplicate) -pyzmq 25.1.1 python  -querystring-parser 1.2.4 python  -readline-common 8.1.2-1 deb  -referencing 0.30.2 python (+1 duplicate) -requests 2.31.0 python (+1 duplicate) -rfc3339-validator 0.1.4 python  -rfc3986-validator 0.1.1 python  -rich 13.6.0 python  -rmm 23.6.0 python  -rpcsvc-proto 1.4.2-0ubuntu6 deb  -rpds-py 0.10.6 python (+1 duplicate) -ruamel.yaml 0.17.32 python  -ruamel.yaml.clib 0.2.7 python  -scikit-learn 1.2.2 python  -scipy 1.11.3 python  -sed 4.8-1ubuntu2 deb  -sensible-utils 0.0.17 deb  -setuptools 59.8.0 python  -setuptools 68.1.2 python  -six 1.16.0 python (+1 duplicate) -smmap 3.0.5 python  -sniffio 1.3.0 python (+1 duplicate) -snowballstemmer 2.2.0 python  -sortedcontainers 2.4.0 python  -soupsieve 2.5 python (+1 duplicate) -sphinxcontrib-applehelp 1.0.7 python  -sphinxcontrib-devhelp 1.0.5 python  -sphinxcontrib-htmlhelp 2.0.4 python  -sphinxcontrib-jsmath 1.0.1 python  -sphinxcontrib-qthelp 1.0.6 python  -sphinxcontrib-serializinghtml 1.1.9 python  -sqlparse 0.4.4 python  -stack-data 0.6.3 python  -stringcase 1.2.0 python  -sympy 1.12 python  -sysvinit-utils 3.01-1ubuntu1 deb  -tabulate 0.9.0 python  -tar 1.34+dfsg-1ubuntu0.1.22.04.1 deb  -tblib 2.0.0 python  -tensorflow-metadata 1.13.1 python  -terminado 0.17.1 python  -test-hyphens 3.0.2 npm  -test-hyphens-underscore 3.0.2 npm  -test_no_hyphens 3.0.2 npm  -threadpoolctl 3.2.0 python  -tinycss2 1.2.1 python  -tomli 2.0.1 python (+1 duplicate) -toolz 0.12.0 python (+1 duplicate) -torch 2.0.1 python  -tornado 6.3.3 python  -tqdm 4.66.1 python (+1 duplicate) -traitlets 5.11.2 python  -triton 2.0.0 python  -tritonclient 2.26.0 python  -types-python-dateutil 2.8.19.14 python  -typing-utils 0.1.0 python  -typing_extensions 4.8.0 python (+1 duplicate) -ubuntu-keyring 2021.03.26 deb  -unicodedata2 15.1.0 python  -unzip 6.0-26ubuntu3.1 deb  -uri-template 1.3.0 python  -urllib3 2.0.4 python  -urllib3 2.0.6 python  -usrmerge 25ubuntu2 deb  -util-linux 2.37.2-4ubuntu3 deb  -watchdog 2.1.9 python  -watchgod 0.8.2 python  -wcwidth 0.2.8 python (+1 duplicate) -webcolors 1.13 python  -webencodings 0.5.1 python  -websocket-client 1.6.4 python  -websockets 11.0.3 python  -wget 1.21.2-2ubuntu1 deb  -wheel 0.41.2 python (+1 duplicate) -widgetsnbextension 4.0.9 python  -xz-utils 5.2.5-2ubuntu1 deb  -zict 3.0.0 python  -zip 3.0-12build2 deb  -zipp 3.17.0 python (+1 duplicate) -zlib1g 1:1.2.11.dfsg-2ubuntu9.2 deb  -zstandard 0.19.0 python  diff --git a/data/sboms/nvcr.io/nvidia/rapidsai/base:23.08-cuda11.8-py3.10.sbom b/data/sboms/nvcr.io/nvidia/rapidsai/base:23.08-cuda11.8-py3.10.sbom deleted file mode 100644 index a6c64aa..0000000 --- a/data/sboms/nvcr.io/nvidia/rapidsai/base:23.08-cuda11.8-py3.10.sbom +++ /dev/null @@ -1,621 +0,0 @@ -NAME VERSION TYPE -@colors/colors 1.5.0 npm  -@holoviz/panel 1.2.1 npm  -@isaacs/cliui 8.0.2 npm  -@isaacs/string-locale-compare 1.1.0 npm  -@jupyterhub/jupyter-server-proxy 4.0.0 npm  -@npmcli/arborist 6.3.0 npm  -@npmcli/config 6.2.1 npm  -@npmcli/disparity-colors 3.0.0 npm  -@npmcli/fs 3.1.0 npm  -@npmcli/git 4.1.0 npm  -@npmcli/installed-package-contents 2.0.2 npm  -@npmcli/map-workspaces 3.0.4 npm  -@npmcli/metavuln-calculator 5.0.1 npm  -@npmcli/name-from-folder 2.0.0 npm  -@npmcli/node-gyp 3.0.0 npm  -@npmcli/package-json 4.0.0 npm  -@npmcli/promise-spawn 6.0.2 npm  -@npmcli/query 3.0.0 npm  -@npmcli/run-script 6.0.2 npm  -@pkgjs/parseargs 0.11.0 npm  -@pyviz/jupyterlab_pyviz 3.0.0 npm (+1 duplicate) -@sigstore/protobuf-specs 0.1.0 npm  -@sigstore/tuf 1.0.2 npm  -@tootallnate/once 2.0.0 npm  -@tufjs/canonical-json 1.0.0 npm  -@tufjs/models 1.0.4 npm  -Brotli 1.0.9 python  -Fiona 1.9.4 python  -GDAL 3.7.1 python  -Jinja2 3.1.2 python  -Markdown 3.4.4 python  -MarkupSafe 2.1.3 python  -Pillow 10.0.0 python  -PySocks 1.7.1 python  -PyWavelets 1.4.1 python  -PyYAML 6.0.1 python  -Pygments 2.16.1 python  -Rtree 1.0.1 python  -Send2Trash 1.8.2 python  -Simple Launcher 1.1.0.14 dotnet (+5 duplicates) -abbrev 1.1.1 npm  -abbrev 2.0.0 npm  -abort-controller 3.0.0 npm  -adduser 3.118ubuntu5 deb  -agent-base 6.0.2 npm  -agentkeepalive 4.3.0 npm  -aggregate-error 3.1.0 npm  -aiohttp 3.8.5 python  -aiosignal 1.3.1 python  -annotated-types 0.5.0 python  -ansi-regex 5.0.1 npm  -ansi-regex 6.0.1 npm (+1 duplicate) -ansi-styles 4.3.0 npm  -ansi-styles 6.2.1 npm  -anyio 3.7.1 python  -appdirs 1.4.4 python  -aproba 2.0.0 npm  -apt 2.4.10 deb  -archy 1.0.0 npm  -are-we-there-yet 3.0.1 npm  -are-we-there-yet 4.0.0 npm  -argon2-cffi 23.1.0 python  -argon2-cffi-bindings 21.2.0 python  -arrow 1.2.3 python  -asttokens 2.2.1 python  -async-timeout 4.0.3 python  -attrs 23.1.0 python  -backcall 0.2.0 python  -backports.functools-lru-cache 1.6.5 python  -balanced-match 1.0.2 npm  -base-files 12ubuntu4.4 deb  -base-passwd 3.5.52build1 deb  -base64-js 1.5.1 npm  -bash 5.1-6ubuntu1 deb  -beautifulsoup4 4.12.2 python  -bin-links 4.0.1 npm  -binary-extensions 2.2.0 npm  -bleach 6.0.0 python  -bokeh 3.2.2 python  -boltons 23.0.0 python  -brace-expansion 1.1.11 npm (+1 duplicate) -brace-expansion 2.0.1 npm  -branca 0.6.0 python  -brotlipy 0.7.0 python  -bsdutils 1:2.37.2-4ubuntu3 deb  -buffer 6.0.3 npm  -builtins 5.0.1 npm  -ca-certificates 20230311ubuntu0.22.04.1 deb  -cacache 17.1.3 npm  -cached-property 1.5.2 python  -cachetools 5.3.1 python  -certifi 2023.7.22 python  -cffi 1.15.1 python  -chalk 5.2.0 npm  -charset-normalizer 3.2.0 python  -chownr 2.0.0 npm  -ci-info 3.8.0 npm  -cidr-regex 3.1.1 npm  -clean-stack 2.2.0 npm  -cli-columns 4.0.0 npm  -cli-table3 0.6.3 npm  -click 8.1.7 python  -click-plugins 1.1.1 python  -cligj 0.7.2 python  -clone 1.0.4 npm  -cloudpickle 2.2.1 python  -cmd-shim 6.0.1 npm  -color-convert 2.0.1 npm  -color-name 1.1.4 npm  -color-support 1.1.3 npm  -colorama 0.4.6 python  -colorcet 3.0.1 python  -columnify 1.6.0 npm  -common-ancestor-path 1.0.1 npm  -concat-map 0.0.1 npm  -conda 23.7.3 python  -conda-libmamba-solver 23.7.0 python  -conda-package-handling 2.2.0 python  -conda_package_streaming 0.9.0 python  -confluent-kafka 1.9.2 python  -console-control-strings 1.1.0 npm  -contourpy 1.1.0 python  -corepack 0.19.0 npm  -coreutils 8.32-4.1ubuntu1 deb  -cross-spawn 7.0.3 npm  -cryptography 41.0.3 python  -cssesc 3.0.0 npm  -cubinlinker 0.3.0 python  -cucim 23.8.0 python  -cuda-compat-11-8 520.61.05-1 deb  -cuda-cudart-11-8 11.8.89-1 deb  -cuda-keyring 1.1-1 deb  -cuda-python 11.8.2 python  -cuda-toolkit-11-8-config-common 11.8.89-1 deb  -cuda-toolkit-11-config-common 11.8.89-1 deb  -cuda-toolkit-config-common 12.2.128-1 deb  -cudf 23.8.0 python  -cudf-kafka 23.8.0 python  -cugraph 23.8.0 python  -cuml 23.8.0 python  -cuproj 23.8.0 python  -cupy 12.2.0 python  -cusignal 23.8.0 python  -cuspatial 23.8.0 python  -custreamz 23.8.0 python  -cuxfilter 23.8 python  -cycler 0.11.0 python  -cytoolz 0.12.2 python  -dash 0.5.11+git20210903+057cd650a4ed-3build1 deb  -dask 2023.7.1 python  -dask-cuda 23.8.0 python  -dask-cudf 23.8.0 python  -dask-sql 2023.8.0 python  -datashader 0.15.2 python  -datashape 0.5.4 python  -debconf 1.5.79ubuntu1 deb  -debianutils 5.5-1ubuntu2 deb  -debug 4.3.4 npm  -decorator 5.1.1 python  -defaults 1.0.4 npm  -defusedxml 0.7.1 python  -delegates 1.0.0 npm  -depd 2.0.0 npm  -diff 5.1.0 npm  -diffutils 1:3.8-0ubuntu2 deb  -dirmngr 2.2.27-3ubuntu2.1 deb  -distributed 2023.7.1 python  -dpkg 1.21.1ubuntu2.2 deb  -e2fsprogs 1.46.5-2ubuntu1.1 deb  -eastasianwidth 0.2.0 npm  -emoji-regex 8.0.0 npm  -emoji-regex 9.2.2 npm (+1 duplicate) -encoding 0.1.13 npm  -entrypoints 0.4 python  -env-paths 2.2.1 npm  -err-code 2.0.3 npm  -event-target-shim 5.0.1 npm  -events 3.3.0 npm  -exceptiongroup 1.1.3 python  -executing 1.2.0 python  -exponential-backoff 3.1.1 npm  -fastapi 0.101.1 python  -fastest-levenshtein 1.0.16 npm  -fastjsonschema 2.18.0 python  -fastrlock 0.8 python  -findutils 4.8.0-1ubuntu3 deb  -folium 0.14.0 python  -fonttools 4.42.1 python  -foreground-child 3.1.1 npm  -fqdn 1.5.1 python  -frozenlist 1.4.0 python  -fs-minipass 2.1.0 npm  -fs-minipass 3.0.2 npm  -fs.realpath 1.0.0 npm  -fsspec 2023.6.0 python  -function-bind 1.1.1 npm  -gauge 4.0.4 npm  -gauge 5.0.1 npm  -gcc-12-base 12.3.0-1ubuntu1~22.04 deb  -geopandas 0.13.2 python  -glob 10.2.7 npm  -glob 7.2.3 npm (+1 duplicate) -gnupg 2.2.27-3ubuntu2.1 deb  -gnupg-l10n 2.2.27-3ubuntu2.1 deb  -gnupg-utils 2.2.27-3ubuntu2.1 deb  -gnupg2 2.2.27-3ubuntu2.1 deb  -gpg 2.2.27-3ubuntu2.1 deb  -gpg-agent 2.2.27-3ubuntu2.1 deb  -gpg-wks-client 2.2.27-3ubuntu2.1 deb  -gpg-wks-server 2.2.27-3ubuntu2.1 deb  -gpgconf 2.2.27-3ubuntu2.1 deb  -gpgsm 2.2.27-3ubuntu2.1 deb  -gpgv 2.2.27-3ubuntu2.1 deb  -graceful-fs 4.2.11 npm  -grep 3.7-1build1 deb  -gzip 1.10-4ubuntu4.1 deb  -h11 0.14.0 python  -h2 4.1.0 python  -has 1.0.3 npm  -has-unicode 2.0.1 npm  -holoviews 1.17.1 python  -hosted-git-info 6.1.1 npm  -hostname 3.23ubuntu2 deb  -hpack 4.0.0 python  -html5lib 1.1 python  -http-cache-semantics 4.1.1 npm  -http-proxy-agent 5.0.0 npm  -httpcore 0.17.3 python  -https-proxy-agent 5.0.1 npm  -httpx 0.24.1 python  -humanize-ms 1.2.1 npm  -hyperframe 6.0.1 python  -iconv-lite 0.6.3 npm  -idna 3.4 python  -ieee754 1.2.1 npm  -ignore-walk 6.0.3 npm  -imagecodecs 2023.8.12 python  -imageio 2.31.1 python  -importlib-metadata 6.8.0 python  -importlib-resources 6.0.1 python  -imurmurhash 0.1.4 npm  -indent-string 4.0.0 npm  -inflight 1.0.6 npm  -inherits 2.0.4 npm  -ini 4.1.1 npm  -init-package-json 5.0.0 npm  -init-system-helpers 1.62 deb  -ip 2.0.0 npm  -ip-regex 4.3.0 npm  -ipython 8.14.0 python  -is-cidr 4.0.2 npm  -is-core-module 2.12.1 npm  -is-fullwidth-code-point 3.0.0 npm  -is-lambda 1.0.1 npm  -isexe 2.0.0 npm  -isoduration 20.11.0 python  -jackspeak 2.2.1 npm  -jedi 0.19.0 python  -joblib 1.3.2 python  -json-parse-even-better-errors 3.0.0 npm  -json-stringify-nice 1.1.4 npm  -jsonparse 1.3.1 npm  -jsonpatch 1.32 python  -jsonpointer 2.0 python  -jsonschema 4.19.0 python  -jsonschema-specifications 2023.7.1 python  -jupyter-events 0.7.0 python  -jupyter_client 8.3.0 python  -jupyter_core 5.3.1 python  -jupyter_server 2.7.1 python  -jupyter_server_proxy 4.0.0 python  -jupyter_server_terminals 0.4.4 python  -jupyterlab-pygments 0.2.2 python  -jupyterlab_pygments 0.2.2 npm (+1 duplicate) -just-diff 6.0.2 npm  -just-diff-apply 5.5.0 npm  -kiwisolver 1.4.5 python  -lazy_loader 0.3 python  -libacl1 2.3.1-1 deb  -libapt-pkg6.0 2.4.10 deb  -libassuan0 2.5.5-1build1 deb  -libattr1 1:2.5.1-1build1 deb  -libaudit-common 1:3.0.7-1build1 deb  -libaudit1 1:3.0.7-1build1 deb  -libblkid1 2.37.2-4ubuntu3 deb  -libbz2-1.0 1.0.8-5build1 deb  -libc-bin 2.35-0ubuntu3.1 deb  -libc-dev-bin 2.35-0ubuntu3.1 deb  -libc6 2.35-0ubuntu3.1 deb  -libc6-dev 2.35-0ubuntu3.1 deb  -libcap-ng0 0.7.9-2.2build3 deb  -libcap2 1:2.44-1ubuntu0.22.04.1 deb  -libcom-err2 1.46.5-2ubuntu1.1 deb  -libcrypt-dev 1:4.4.27-1 deb  -libcrypt1 1:4.4.27-1 deb  -libdb5.3 5.3.28+dfsg1-0.8ubuntu3 deb  -libdebconfclient0 0.261ubuntu1 deb  -libext2fs2 1.46.5-2ubuntu1.1 deb  -libffi8 3.4.2-4 deb  -libgcc-s1 12.3.0-1ubuntu1~22.04 deb  -libgcrypt20 1.9.4-3ubuntu3 deb  -libgmp10 2:6.2.1+dfsg-3ubuntu1 deb  -libgnutls30 3.7.3-4ubuntu1.2 deb  -libgpg-error0 1.43-3 deb  -libgssapi-krb5-2 1.19.2-2ubuntu0.2 deb  -libhogweed6 3.7.3-1build2 deb  -libidn2-0 2.3.2-2build1 deb  -libk5crypto3 1.19.2-2ubuntu0.2 deb  -libkeyutils1 1.6.1-2ubuntu3 deb  -libkrb5-3 1.19.2-2ubuntu0.2 deb  -libkrb5support0 1.19.2-2ubuntu0.2 deb  -libksba8 1.6.0-2ubuntu0.2 deb  -libldap-2.5-0 2.5.16+dfsg-0ubuntu0.22.04.1 deb  -liblz4-1 1.9.3-2build2 deb  -liblzma5 5.2.5-2ubuntu1 deb  -libmambapy 1.5.0 python  -libmount1 2.37.2-4ubuntu3 deb  -libncurses6 6.3-2ubuntu0.1 deb  -libncursesw6 6.3-2ubuntu0.1 deb  -libnettle8 3.7.3-1build2 deb  -libnpmaccess 7.0.2 npm  -libnpmdiff 5.0.19 npm  -libnpmexec 6.0.2 npm  -libnpmfund 4.0.19 npm  -libnpmhook 9.0.3 npm  -libnpmorg 5.0.4 npm  -libnpmpack 5.0.19 npm  -libnpmpublish 7.5.0 npm  -libnpmsearch 6.0.2 npm  -libnpmteam 5.0.3 npm  -libnpmversion 4.0.2 npm  -libnpth0 1.6-3build2 deb  -libnsl-dev 1.3.0-2build2 deb  -libnsl2 1.3.0-2build2 deb  -libnuma-dev 2.0.14-3ubuntu2 deb  -libnuma1 2.0.14-3ubuntu2 deb  -libp11-kit0 0.24.0-6build1 deb  -libpam-modules 1.4.0-11ubuntu2.3 deb  -libpam-modules-bin 1.4.0-11ubuntu2.3 deb  -libpam-runtime 1.4.0-11ubuntu2.3 deb  -libpam0g 1.4.0-11ubuntu2.3 deb  -libpcre2-8-0 10.39-3ubuntu0.1 deb  -libpcre3 2:8.39-13ubuntu0.22.04.1 deb  -libprocps8 2:3.3.17-6ubuntu2 deb  -libreadline8 8.1.2-1 deb  -libsasl2-2 2.1.27+dfsg2-3ubuntu1.2 deb  -libsasl2-modules-db 2.1.27+dfsg2-3ubuntu1.2 deb  -libseccomp2 2.5.3-2ubuntu2 deb  -libselinux1 3.3-1build2 deb  -libsemanage-common 3.3-1build2 deb  -libsemanage2 3.3-1build2 deb  -libsepol2 3.3-1build1 deb  -libsmartcols1 2.37.2-4ubuntu3 deb  -libsqlite3-0 3.37.2-2ubuntu0.1 deb  -libss2 1.46.5-2ubuntu1.1 deb  -libssl3 3.0.2-0ubuntu1.10 deb  -libstdc++6 12.3.0-1ubuntu1~22.04 deb  -libsystemd0 249.11-0ubuntu3.9 deb  -libtasn1-6 4.18.0-4build1 deb  -libtinfo6 6.3-2ubuntu0.1 deb  -libtirpc-common 1.3.2-2ubuntu0.1 deb  -libtirpc-dev 1.3.2-2ubuntu0.1 deb  -libtirpc3 1.3.2-2ubuntu0.1 deb  -libudev1 249.11-0ubuntu3.9 deb  -libunistring2 1.0-1 deb  -libuuid1 2.37.2-4ubuntu3 deb  -libxxhash0 0.8.1-1 deb  -libzstd1 1.4.8+dfsg-3build1 deb  -linkify-it-py 2.0.0 python  -linux-libc-dev 5.15.0-79.86 deb  -llvmlite 0.40.1 python  -locket 1.0.0 python  -login 1:4.8.1-2ubuntu2.1 deb  -logsave 1.46.5-2ubuntu1.1 deb  -lru-cache 6.0.0 npm  -lru-cache 7.18.3 npm  -lru-cache 9.1.1 npm  -lsb-base 11.1.0ubuntu4 deb  -lz4 4.3.2 python  -make-fetch-happen 11.1.1 npm  -mamba 1.5.0 python  -mapclassify 2.5.0 python  -markdown-it-py 3.0.0 python  -matplotlib 3.7.2 python  -matplotlib-inline 0.1.6 python  -mawk 1.3.4.20200120-3 deb  -mdit-py-plugins 0.4.0 python  -mdurl 0.1.0 python  -minimatch 3.1.2 npm (+1 duplicate) -minimatch 9.0.1 npm  -minipass 3.3.6 npm (+6 duplicates) -minipass 5.0.0 npm  -minipass-collect 1.0.2 npm  -minipass-fetch 3.0.3 npm  -minipass-flush 1.0.5 npm  -minipass-json-stream 1.0.1 npm  -minipass-pipeline 1.2.4 npm  -minipass-sized 1.0.3 npm  -minizlib 2.1.2 npm  -mistune 3.0.1 python  -mkdirp 1.0.4 npm  -mount 2.37.2-4ubuntu3 deb  -ms 2.1.2 npm  -ms 2.1.3 npm  -msgpack 1.0.5 python  -multidict 6.0.4 python  -multipledispatch 0.6.0 python  -munch 4.0.0 python  -munkres 1.1.4 python  -mute-stream 1.0.0 npm  -nbclient 0.8.0 python  -nbconvert 7.7.4 python  -nbformat 5.9.2 python  -ncurses-base 6.3-2ubuntu0.1 deb  -ncurses-bin 6.3-2ubuntu0.1 deb  -negotiator 0.6.3 npm  -networkx 3.1 python  -node-gyp 9.4.0 npm  -nopt 6.0.0 npm  -nopt 7.2.0 npm  -normalize-package-data 5.0.0 npm  -npm 9.8.0 npm  -npm-audit-report 5.0.0 npm  -npm-bundled 3.0.0 npm  -npm-install-checks 6.1.1 npm  -npm-normalize-package-bin 3.0.1 npm  -npm-package-arg 10.1.0 npm  -npm-packlist 7.0.4 npm  -npm-pick-manifest 8.0.1 npm  -npm-profile 7.0.1 npm  -npm-registry-fetch 14.0.5 npm  -npm-user-validate 2.0.0 npm  -npmlog 6.0.2 npm  -npmlog 7.0.1 npm  -numba 0.57.1 python  -numpy 1.24.4 python  -nvtx 0.2.5 python  -once 1.4.0 npm  -openssl 3.0.2-0ubuntu1.10 deb  -openssl 3.1.2 binary  -overrides 7.4.0 python  -p-map 4.0.0 npm  -packaging 23.1 python  -pacote 15.2.0 npm  -pandas 1.5.3 python  -pandocfilters 1.5.0 python  -panel 1.2.1 python  -param 1.13.0 python  -parse-conflict-json 3.0.1 npm  -parso 0.8.3 python  -partd 1.4.0 python  -passwd 1:4.8.1-2ubuntu2.1 deb  -path-is-absolute 1.0.1 npm  -path-key 3.1.1 npm  -path-scurry 1.9.2 npm  -perl-base 5.34.0-3ubuntu1.2 deb  -pexpect 4.8.0 python  -pickleshare 0.7.5 python  -pinentry-curses 1.1.1-1build2 deb  -pip 23.2.1 python  -pkgutil_resolve_name 1.3.10 python  -platformdirs 3.10.0 python  -pluggy 1.2.0 python  -pooch 1.7.0 python  -postcss-selector-parser 6.0.13 npm  -postgresql 15.4 binary  -proc-log 3.0.0 npm  -process 0.11.10 npm  -procps 2:3.3.17-6ubuntu2 deb  -prometheus-client 0.17.1 python  -promise-all-reject-late 1.0.1 npm  -promise-call-limit 1.0.2 npm  -promise-inflight 1.0.1 npm  -promise-retry 2.0.1 npm  -prompt-toolkit 3.0.39 python  -promzard 1.0.0 npm  -protobuf 4.23.3 python  -psutil 5.9.5 python  -ptxcompiler 0.8.1 python  -ptyprocess 0.7.0 python  -pure-eval 0.2.2 python  -pyOpenSSL 23.2.0 python  -pyarrow 11.0.0 python  -pycosat 0.6.4 python  -pycparser 2.21 python  -pyct 0.4.6 python  -pydantic 2.3.0 python  -pydantic_core 2.6.3 python  -pyee 8.1.0 python  -pylibcugraph 23.8.0 python  -pylibraft 23.8.0 python  -pynvml 11.4.1 python  -pyparsing 3.0.9 python  -pyppeteer 1.0.2 python  -pyproj 3.6.0 python  -python 3.10.12 binary  -python-dateutil 2.8.2 python  -python-json-logger 2.0.7 python  -pytz 2023.3 python  -pyviz_comms 3.0.0 python  -pyzmq 25.1.1 python  -qrcode-terminal 0.12.0 npm  -raft-dask 23.8.0 python  -read 2.1.0 npm  -read-cmd-shim 4.0.0 npm  -read-package-json 6.0.4 npm  -read-package-json-fast 3.0.2 npm  -readable-stream 3.6.2 npm  -readable-stream 4.4.0 npm  -readline-common 8.1.2-1 deb  -referencing 0.30.2 python  -requests 2.31.0 python  -retry 0.12.0 npm  -rfc3339-validator 0.1.4 python  -rfc3986-validator 0.1.1 python  -rimraf 3.0.2 npm  -rmm 23.8.0 python  -rpcsvc-proto 1.4.2-0ubuntu6 deb  -rpds-py 0.9.2 python  -ruamel.yaml 0.17.32 python  -ruamel.yaml.clib 0.2.7 python  -safe-buffer 5.2.1 npm  -safer-buffer 2.1.2 npm  -scikit-image 0.21.0 python  -scikit-learn 1.3.0 python  -scipy 1.11.2 python  -sed 4.8-1ubuntu2 deb  -semver 7.5.2 npm  -sensible-utils 0.0.17 deb  -set-blocking 2.0.0 npm  -setuptools 68.1.2 python  -shapely 2.0.1 python  -shebang-command 2.0.0 npm  -shebang-regex 3.0.0 npm  -signal-exit 3.0.7 npm  -signal-exit 4.0.2 npm  -sigstore 1.7.0 npm  -simpervisor 1.0.0 python  -six 1.16.0 python  -smart-buffer 4.2.0 npm  -sniffio 1.3.0 python  -socks 2.7.1 npm  -socks-proxy-agent 7.0.0 npm  -sortedcontainers 2.4.0 python  -soupsieve 2.3.2.post1 python  -spdx-correct 3.2.0 npm  -spdx-exceptions 2.3.0 npm  -spdx-expression-parse 3.0.1 npm  -spdx-license-ids 3.0.13 npm  -ssri 10.0.4 npm  -stack-data 0.6.2 python  -starlette 0.27.0 python  -streamz 0.6.4 python  -string-width 4.2.3 npm (+1 duplicate) -string-width 5.1.2 npm (+1 duplicate) -string_decoder 1.3.0 npm  -strip-ansi 6.0.1 npm (+1 duplicate) -strip-ansi 7.1.0 npm (+1 duplicate) -supports-color 9.3.1 npm  -sysvinit-utils 3.01-1ubuntu1 deb  -tabulate 0.9.0 python  -tar 1.34+dfsg-1ubuntu0.1.22.04.1 deb  -tar 6.1.15 npm  -tblib 1.7.0 python  -terminado 0.17.1 python  -text-table 0.2.0 npm  -threadpoolctl 3.2.0 python  -tifffile 2023.8.12 python  -tiny-relative-date 1.3.0 npm  -tinycss2 1.2.1 python  -toolz 0.12.0 python  -tornado 6.3.3 python  -tqdm 4.66.1 python  -traitlets 5.9.0 python  -treelite 3.2.0 python  -treelite-runtime 3.2.0 python  -treeverse 3.0.0 npm  -tuf-js 1.1.7 npm  -typing-utils 0.1.0 python  -typing_extensions 4.7.1 python  -tzdata 2023c-0ubuntu0.22.04.2 deb  -tzlocal 5.0.1 python  -ubuntu-keyring 2021.03.26 deb  -uc-micro-py 1.0.1 python  -ucx-py 0.33.0 python  -unicodedata2 15.0.0 python  -unique-filename 3.0.0 npm  -unique-slug 4.0.0 npm  -uri-template 1.3.0 python  -urllib3 1.26.15 python  -usrmerge 25ubuntu2 deb  -util-deprecate 1.0.2 npm  -util-linux 2.37.2-4ubuntu3 deb  -uvicorn 0.23.2 python  -validate-npm-package-license 3.0.4 npm  -validate-npm-package-name 5.0.0 npm  -walk-up-path 3.0.1 npm  -wcwidth 0.2.6 python  -wcwidth 1.0.1 npm  -webcolors 1.13 python  -webencodings 0.5.1 python  -websocket-client 1.6.2 python  -websockets 10.4 python  -wheel 0.41.2 python  -which 2.0.2 npm (+1 duplicate) -which 3.0.1 npm  -wide-align 1.1.5 npm  -wrap-ansi 7.0.0 npm  -wrap-ansi 8.1.0 npm  -wrappy 1.0.2 npm  -write-file-atomic 5.0.1 npm  -xarray 2023.8.0 python  -xgboost 1.7.4 python  -xyzservices 2023.7.0 python  -yallist 4.0.0 npm  -yarl 1.9.2 python  -zict 3.0.0 python  -zipp 3.16.2 python  -zlib1g 1:1.2.11.dfsg-2ubuntu9.2 deb  -zstandard 0.19.0 python  diff --git a/data/sboms/nvcr.io/nvidia/rapidsai/base:24.06-cuda12.2-py3.10.sbom b/data/sboms/nvcr.io/nvidia/rapidsai/base:24.06-cuda12.2-py3.10.sbom deleted file mode 100644 index e53daca..0000000 --- a/data/sboms/nvcr.io/nvidia/rapidsai/base:24.06-cuda12.2-py3.10.sbom +++ /dev/null @@ -1,599 +0,0 @@ -NAME VERSION TYPE -@colors/colors 1.5.0 npm  -@holoviz/panel 1.4.4 npm  -@isaacs/cliui 8.0.2 npm  -@isaacs/string-locale-compare 1.1.0 npm  -@jupyterhub/jupyter-server-proxy 4.2.0 npm  -@npmcli/agent 2.2.1 npm  -@npmcli/arborist 7.4.0 npm  -@npmcli/config 8.2.0 npm  -@npmcli/disparity-colors 3.0.0 npm  -@npmcli/fs 3.1.0 npm  -@npmcli/git 5.0.4 npm  -@npmcli/installed-package-contents 2.0.2 npm  -@npmcli/map-workspaces 3.0.4 npm  -@npmcli/metavuln-calculator 7.0.0 npm  -@npmcli/name-from-folder 2.0.0 npm  -@npmcli/node-gyp 3.0.0 npm  -@npmcli/package-json 5.0.0 npm  -@npmcli/promise-spawn 7.0.1 npm  -@npmcli/query 3.1.0 npm  -@npmcli/run-script 7.0.4 npm  -@pkgjs/parseargs 0.11.0 npm  -@pyviz/jupyterlab_pyviz 3.0.2 npm (+1 duplicate) -@sigstore/bundle 2.2.0 npm  -@sigstore/core 1.0.0 npm  -@sigstore/protobuf-specs 0.3.0 npm  -@sigstore/sign 2.2.3 npm  -@sigstore/tuf 2.3.1 npm  -@sigstore/verify 1.1.0 npm  -@tufjs/canonical-json 2.0.0 npm  -@tufjs/models 2.0.0 npm  -Brotli 1.1.0 python  -GDAL 3.8.1 python  -Jinja2 3.1.4 python  -Markdown 3.6 python  -MarkupSafe 2.1.5 python  -PySocks 1.7.1 python  -PyWavelets 1.4.1 python  -PyYAML 6.0.1 python  -Pygments 2.18.0 python  -Rtree 1.2.0 python  -Send2Trash 1.8.3 python  -Simple Launcher 1.1.0.14 dotnet (+5 duplicates) -abbrev 2.0.0 npm  -adduser 3.118ubuntu5 deb  -agent-base 7.1.0 npm  -aggregate-error 3.1.0 npm  -aiohttp 3.9.5 python  -aiosignal 1.3.1 python  -annotated-types 0.7.0 python  -ansi-regex 5.0.1 npm  -ansi-regex 6.0.1 npm (+1 duplicate) -ansi-styles 4.3.0 npm (+1 duplicate) -ansi-styles 6.2.1 npm  -anyio 4.4.0 python  -appdirs 1.4.4 python  -aproba 2.0.0 npm  -apt 2.4.12 deb  -archspec 0.2.3 python  -archy 1.0.0 npm  -are-we-there-yet 4.0.2 npm  -argon2-cffi 23.1.0 python  -argon2-cffi-bindings 21.2.0 python  -arrow 1.3.0 python  -asttokens 2.4.1 python  -async-timeout 4.0.3 python  -attrs 23.2.0 python  -balanced-match 1.0.2 npm  -base-files 12ubuntu4.6 deb  -base-passwd 3.5.52build1 deb  -bash 5.1-6ubuntu1.1 deb  -beautifulsoup4 4.12.3 python  -bin-links 4.0.3 npm  -binary-extensions 2.2.0 npm  -bleach 6.1.0 python  -bokeh 3.4.1 python  -boltons 24.0.0 python  -brace-expansion 2.0.1 npm  -branca 0.7.2 python  -bsdutils 1:2.37.2-4ubuntu3.4 deb  -builtins 5.0.1 npm  -ca-certificates 20230311ubuntu0.22.04.1 deb  -cacache 18.0.2 npm  -cached-property 1.5.2 python  -cachetools 5.3.3 python  -certifi 2024.6.2 python  -cffi 1.16.0 python  -chalk 5.3.0 npm  -charset-normalizer 3.3.2 python  -chownr 2.0.0 npm  -ci-info 4.0.0 npm  -cidr-regex 4.0.3 npm  -clean-stack 2.2.0 npm  -cli-columns 4.0.0 npm  -cli-table3 0.6.3 npm  -click 8.1.7 python  -click-plugins 1.1.1 python  -cligj 0.7.2 python  -clone 1.0.4 npm  -cloudpickle 3.0.0 python  -cmd-shim 6.0.2 npm  -color-convert 2.0.1 npm  -color-name 1.1.4 npm  -color-support 1.1.3 npm  -colorama 0.4.6 python  -colorcet 3.1.0 python  -columnify 1.6.0 npm  -common-ancestor-path 1.0.1 npm  -conda 24.5.0 python  -conda-libmamba-solver 24.1.0 python  -conda-package-handling 2.3.0 python  -conda_package_streaming 0.10.0 python  -confluent-kafka 1.9.2 python  -console-control-strings 1.1.0 npm  -contourpy 1.2.1 python  -corepack 0.25.2 npm  -coreutils 8.32-4.1ubuntu1.2 deb  -cross-spawn 7.0.3 npm  -cssesc 3.0.0 npm  -cucim 24.6.0 python  -cuda-compat-12-2 535.183.01-1 deb  -cuda-cudart-12-2 12.2.140-1 deb  -cuda-keyring 1.1-1 deb  -cuda-python 12.5.0 python  -cuda-toolkit-12-2-config-common 12.2.140-1 deb  -cuda-toolkit-12-config-common 12.5.39-1 deb  -cuda-toolkit-config-common 12.5.39-1 deb  -cudf 24.6.0 python  -cudf_kafka 24.6.0 python  -cugraph 24.6.1 python  -cuml 24.6.1 python  -cuproj 24.6.0 python  -cupy 13.2.0 python  -cuspatial 24.6.0 python  -custreamz 24.6.0 python  -cuvs 24.6.0 python  -cuxfilter 24.6.0 python  -cycler 0.12.1 python  -cytoolz 0.12.3 python  -dash 0.5.11+git20210903+057cd650a4ed-3build1 deb  -dask 2024.5.1 python  -dask-cuda 24.6.0 python  -dask-cudf 24.6.0 python  -dask-expr 1.1.1 python  -dask_sql 2024.5.0 python  -datashader 0.16.2 python  -debconf 1.5.79ubuntu1 deb  -debianutils 5.5-1ubuntu2 deb  -debug 4.3.4 npm  -decorator 5.1.1 python  -defaults 1.0.4 npm  -defusedxml 0.7.1 python  -diff 5.2.0 npm  -diffutils 1:3.8-0ubuntu2 deb  -dirmngr 2.2.27-3ubuntu2.1 deb  -distributed 2024.5.1 python  -distributed-ucxx 0.38.0 python  -distro 1.9.0 python  -dnspython 2.6.1 python  -dpkg 1.21.1ubuntu2.3 deb  -e2fsprogs 1.46.5-2ubuntu1.1 deb  -eastasianwidth 0.2.0 npm  -email_validator 2.1.1 python  -emoji-regex 8.0.0 npm  -emoji-regex 9.2.2 npm (+1 duplicate) -encoding 0.1.13 npm  -entrypoints 0.4 python  -env-paths 2.2.1 npm  -err-code 2.0.3 npm  -exceptiongroup 1.2.0 python  -executing 2.0.1 python  -exponential-backoff 3.1.1 npm  -fastapi 0.111.0 python  -fastapi-cli 0.0.4 python  -fastest-levenshtein 1.0.16 npm  -fastjsonschema 2.19.1 python  -fastrlock 0.8.2 python  -findutils 4.8.0-1ubuntu3 deb  -fiona 1.9.5 python  -folium 0.16.0 python  -fonttools 4.53.0 python  -foreground-child 3.1.1 npm  -fqdn 1.5.1 python  -frozendict 2.4.4 python  -frozenlist 1.4.1 python  -fs-minipass 2.1.0 npm  -fs-minipass 3.0.3 npm  -fsspec 2024.6.0 python  -function-bind 1.1.2 npm  -gauge 5.0.1 npm  -gcc-12-base 12.3.0-1ubuntu1~22.04 deb  -geopandas 0.14.4 python  -glob 10.3.10 npm  -gnupg 2.2.27-3ubuntu2.1 deb  -gnupg-l10n 2.2.27-3ubuntu2.1 deb  -gnupg-utils 2.2.27-3ubuntu2.1 deb  -gnupg2 2.2.27-3ubuntu2.1 deb  -gpg 2.2.27-3ubuntu2.1 deb  -gpg-agent 2.2.27-3ubuntu2.1 deb  -gpg-wks-client 2.2.27-3ubuntu2.1 deb  -gpg-wks-server 2.2.27-3ubuntu2.1 deb  -gpgconf 2.2.27-3ubuntu2.1 deb  -gpgsm 2.2.27-3ubuntu2.1 deb  -gpgv 2.2.27-3ubuntu2.1 deb  -graceful-fs 4.2.11 npm  -grep 3.7-1build1 deb  -gzip 1.10-4ubuntu4.1 deb  -h11 0.14.0 python  -h2 4.1.0 python  -has-unicode 2.0.1 npm  -hasown 2.0.1 npm  -holoviews 1.19.0 python  -hosted-git-info 7.0.1 npm  -hostname 3.23ubuntu2 deb  -hpack 4.0.0 python  -html5lib 1.1 python  -http-cache-semantics 4.1.1 npm  -http-proxy-agent 7.0.2 npm  -httpcore 1.0.5 python  -https-proxy-agent 7.0.4 npm  -httpx 0.27.0 python  -hyperframe 6.0.1 python  -iconv-lite 0.6.3 npm  -idna 3.7 python  -ignore-walk 6.0.4 npm  -imagecodecs-lite 2019.12.3 python  -imageio 2.34.1 python  -importlib_metadata 7.1.0 python  -importlib_resources 6.4.0 python  -imurmurhash 0.1.4 npm  -indent-string 4.0.0 npm  -ini 4.1.1 npm  -init-package-json 6.0.0 npm  -init-system-helpers 1.62 deb  -ip-address 9.0.5 npm  -ip-regex 5.0.0 npm  -ipython 8.25.0 python  -is-cidr 5.0.3 npm  -is-core-module 2.13.1 npm  -is-fullwidth-code-point 3.0.0 npm  -is-lambda 1.0.1 npm  -isexe 2.0.0 npm  -isexe 3.1.1 npm  -isoduration 20.11.0 python  -jackspeak 2.3.6 npm  -jedi 0.19.1 python  -joblib 1.4.2 python  -jsbn 1.1.0 npm  -json-parse-even-better-errors 3.0.1 npm  -json-stringify-nice 1.1.4 npm  -jsonparse 1.3.1 npm  -jsonpatch 1.33 python  -jsonpointer 3.0.0 python  -jsonschema 4.22.0 python  -jsonschema-specifications 2023.12.1 python  -jupyter-events 0.10.0 python  -jupyter_client 8.6.2 python  -jupyter_core 5.7.2 python  -jupyter_server 2.14.1 python  -jupyter_server_proxy 4.2.0 python  -jupyter_server_terminals 0.5.3 python  -jupyterlab_pygments 0.3.0 npm  -jupyterlab_pygments 0.3.0 python  -just-diff 6.0.2 npm  -just-diff-apply 5.5.0 npm  -kiwisolver 1.4.5 python  -lazy_loader 0.4 python  -libacl1 2.3.1-1 deb  -libapt-pkg6.0 2.4.12 deb  -libassuan0 2.5.5-1build1 deb  -libattr1 1:2.5.1-1build1 deb  -libaudit-common 1:3.0.7-1build1 deb  -libaudit1 1:3.0.7-1build1 deb  -libblkid1 2.37.2-4ubuntu3.4 deb  -libbz2-1.0 1.0.8-5build1 deb  -libc-bin 2.35-0ubuntu3.8 deb  -libc6 2.35-0ubuntu3.8 deb  -libcap-ng0 0.7.9-2.2build3 deb  -libcap2 1:2.44-1ubuntu0.22.04.1 deb  -libcom-err2 1.46.5-2ubuntu1.1 deb  -libcrypt1 1:4.4.27-1 deb  -libdb5.3 5.3.28+dfsg1-0.8ubuntu3 deb  -libdebconfclient0 0.261ubuntu1 deb  -libext2fs2 1.46.5-2ubuntu1.1 deb  -libffi8 3.4.2-4 deb  -libgcc-s1 12.3.0-1ubuntu1~22.04 deb  -libgcrypt20 1.9.4-3ubuntu3 deb  -libgmp10 2:6.2.1+dfsg-3ubuntu1 deb  -libgnutls30 3.7.3-4ubuntu1.5 deb  -libgpg-error0 1.43-3 deb  -libgssapi-krb5-2 1.19.2-2ubuntu0.3 deb  -libhogweed6 3.7.3-1build2 deb  -libidn2-0 2.3.2-2build1 deb  -libk5crypto3 1.19.2-2ubuntu0.3 deb  -libkeyutils1 1.6.1-2ubuntu3 deb  -libkrb5-3 1.19.2-2ubuntu0.3 deb  -libkrb5support0 1.19.2-2ubuntu0.3 deb  -libksba8 1.6.0-2ubuntu0.2 deb  -libldap-2.5-0 2.5.17+dfsg-0ubuntu0.22.04.1 deb  -liblz4-1 1.9.3-2build2 deb  -liblzma5 5.2.5-2ubuntu1 deb  -libmambapy 1.5.8 python  -libmount1 2.37.2-4ubuntu3.4 deb  -libncurses6 6.3-2ubuntu0.1 deb  -libncursesw6 6.3-2ubuntu0.1 deb  -libnettle8 3.7.3-1build2 deb  -libnpmaccess 8.0.2 npm  -libnpmdiff 6.0.7 npm  -libnpmexec 7.0.8 npm  -libnpmfund 5.0.5 npm  -libnpmhook 10.0.1 npm  -libnpmorg 6.0.2 npm  -libnpmpack 6.0.7 npm  -libnpmpublish 9.0.4 npm  -libnpmsearch 7.0.1 npm  -libnpmteam 6.0.1 npm  -libnpmversion 5.0.2 npm  -libnpth0 1.6-3build2 deb  -libnsl2 1.3.0-2build2 deb  -libp11-kit0 0.24.0-6build1 deb  -libpam-modules 1.4.0-11ubuntu2.4 deb  -libpam-modules-bin 1.4.0-11ubuntu2.4 deb  -libpam-runtime 1.4.0-11ubuntu2.4 deb  -libpam0g 1.4.0-11ubuntu2.4 deb  -libpcre2-8-0 10.39-3ubuntu0.1 deb  -libpcre3 2:8.39-13ubuntu0.22.04.1 deb  -libprocps8 2:3.3.17-6ubuntu2.1 deb  -libreadline8 8.1.2-1 deb  -libsasl2-2 2.1.27+dfsg2-3ubuntu1.2 deb  -libsasl2-modules-db 2.1.27+dfsg2-3ubuntu1.2 deb  -libseccomp2 2.5.3-2ubuntu2 deb  -libselinux1 3.3-1build2 deb  -libsemanage-common 3.3-1build2 deb  -libsemanage2 3.3-1build2 deb  -libsepol2 3.3-1build1 deb  -libsmartcols1 2.37.2-4ubuntu3.4 deb  -libsqlite3-0 3.37.2-2ubuntu0.3 deb  -libss2 1.46.5-2ubuntu1.1 deb  -libssl3 3.0.2-0ubuntu1.15 deb  -libstdc++6 12.3.0-1ubuntu1~22.04 deb  -libsystemd0 249.11-0ubuntu3.12 deb  -libtasn1-6 4.18.0-4build1 deb  -libtinfo6 6.3-2ubuntu0.1 deb  -libtirpc-common 1.3.2-2ubuntu0.1 deb  -libtirpc3 1.3.2-2ubuntu0.1 deb  -libudev1 249.11-0ubuntu3.12 deb  -libunistring2 1.0-1 deb  -libuuid1 2.37.2-4ubuntu3.4 deb  -libxxhash0 0.8.1-1 deb  -libzstd1 1.4.8+dfsg-3build1 deb  -linkify-it-py 2.0.3 python  -llvmlite 0.42.0 python  -locket 1.0.0 python  -login 1:4.8.1-2ubuntu2.2 deb  -logsave 1.46.5-2ubuntu1.1 deb  -lru-cache 10.2.0 npm  -lru-cache 6.0.0 npm  -lsb-base 11.1.0ubuntu4 deb  -lz4 4.3.3 python  -make-fetch-happen 13.0.0 npm  -mamba 1.5.8 python  -mapclassify 2.6.1 python  -markdown-it-py 3.0.0 python  -matplotlib 3.8.4 python  -matplotlib-inline 0.1.7 python  -mawk 1.3.4.20200120-3 deb  -mdit-py-plugins 0.4.1 python  -mdurl 0.1.2 python  -menuinst 2.1.1 python  -minimatch 9.0.3 npm  -minipass 3.3.6 npm (+5 duplicates) -minipass 5.0.0 npm  -minipass 7.0.4 npm  -minipass-collect 2.0.1 npm  -minipass-fetch 3.0.4 npm  -minipass-flush 1.0.5 npm  -minipass-json-stream 1.0.1 npm  -minipass-pipeline 1.2.4 npm  -minipass-sized 1.0.3 npm  -minizlib 2.1.2 npm  -mistune 3.0.2 python  -mkdirp 1.0.4 npm  -mount 2.37.2-4ubuntu3.4 deb  -ms 2.1.2 npm  -ms 2.1.3 npm  -msgpack 1.0.8 python  -multidict 6.0.5 python  -multipledispatch 0.6.0 python  -munkres 1.1.4 python  -mute-stream 1.0.0 npm  -nbclient 0.10.0 python  -nbconvert 7.16.4 python  -nbformat 5.10.4 python  -ncurses-base 6.3-2ubuntu0.1 deb  -ncurses-bin 6.3-2ubuntu0.1 deb  -negotiator 0.6.3 npm  -networkx 3.3 python  -node-gyp 10.0.1 npm  -nopt 7.2.0 npm  -normalize-package-data 6.0.0 npm  -npm 10.5.0 npm  -npm-audit-report 5.0.0 npm  -npm-bundled 3.0.0 npm  -npm-install-checks 6.3.0 npm  -npm-normalize-package-bin 3.0.1 npm  -npm-package-arg 11.0.1 npm  -npm-packlist 8.0.2 npm  -npm-pick-manifest 9.0.0 npm  -npm-profile 9.0.0 npm  -npm-registry-fetch 16.1.0 npm  -npm-user-validate 2.0.0 npm  -npmlog 7.0.1 npm  -numba 0.59.1 python  -numpy 1.26.4 python  -nvtx 0.2.10 python  -nx-cugraph 24.6.1 python  -openssl 3.0.2-0ubuntu1.15 deb  -openssl 3.3.1 binary  -orjson 3.10.4 python  -overrides 7.7.0 python  -p-map 4.0.0 npm  -packaging 24.1 python  -pacote 17.0.6 npm  -pandas 2.2.2 python  -pandocfilters 1.5.0 python  -panel 1.4.4 python  -param 2.1.0 python  -parse-conflict-json 3.0.1 npm  -parso 0.8.4 python  -partd 1.4.2 python  -passwd 1:4.8.1-2ubuntu2.2 deb  -path-key 3.1.1 npm  -path-scurry 1.10.1 npm  -perl-base 5.34.0-3ubuntu1.3 deb  -pexpect 4.9.0 python  -pickleshare 0.7.5 python  -pillow 10.3.0 python  -pinentry-curses 1.1.1-1build2 deb  -pip 24.0 python  -pkgutil_resolve_name 1.3.10 python  -platformdirs 4.2.2 python  -pluggy 1.5.0 python  -postcss-selector-parser 6.0.15 npm  -postgresql 16.3 binary  -proc-log 3.0.0 npm  -procps 2:3.3.17-6ubuntu2.1 deb  -prometheus_client 0.20.0 python  -promise-all-reject-late 1.0.1 npm  -promise-call-limit 3.0.1 npm  -promise-inflight 1.0.1 npm  -promise-retry 2.0.1 npm  -prompt_toolkit 3.0.47 python  -promzard 1.0.0 npm  -psutil 5.9.8 python  -ptyprocess 0.7.0 python  -pure-eval 0.2.2 python  -pyarrow 16.1.0 python  -pyarrow-hotfix 0.6 python  -pycosat 0.6.6 python  -pycparser 2.22 python  -pyct 0.5.0 python  -pydantic 2.7.4 python  -pydantic_core 2.18.4 python  -pyee 8.1.0 python  -pylibcugraph 24.6.1 python  -pylibraft 24.6.0 python  -pynvjitlink-cu12 0.2.4 python  -pynvml 11.4.1 python  -pyparsing 3.1.2 python  -pyppeteer 1.0.2 python  -pyproj 3.6.1 python  -python 3.10.14 binary  -python-dateutil 2.9.0 python  -python-json-logger 2.0.7 python  -python-multipart 0.0.9 python  -pytz 2024.1 python  -pyviz_comms 3.0.2 python  -pyzmq 26.0.3 python  -qrcode-terminal 0.12.0 npm  -raft-dask 24.6.0 python  -rapids-dask-dependency 24.6.0a0 python  -read 2.1.0 npm  -read-cmd-shim 4.0.0 npm  -read-package-json 7.0.0 npm  -read-package-json-fast 3.0.2 npm  -readline-common 8.1.2-1 deb  -referencing 0.35.1 python  -requests 2.32.3 python  -retry 0.12.0 npm  -rfc3339-validator 0.1.4 python  -rfc3986-validator 0.1.1 python  -rich 13.7.1 python  -rmm 24.6.0 python  -rpds-py 0.18.1 python  -ruamel.yaml 0.18.6 python  -ruamel.yaml.clib 0.2.8 python  -safer-buffer 2.1.2 npm  -scikit-image 0.20.0 python  -scikit-learn 1.5.0 python  -scipy 1.13.1 python  -sed 4.8-1ubuntu2 deb  -semver 7.6.0 npm  -sensible-utils 0.0.17 deb  -set-blocking 2.0.0 npm  -setuptools 70.0.0 python  -shapely 2.0.4 python  -shebang-command 2.0.0 npm  -shebang-regex 3.0.0 npm  -shellingham 1.5.4 python  -signal-exit 4.1.0 npm  -sigstore 2.2.2 npm  -simpervisor 1.0.0 python  -six 1.16.0 python  -smart-buffer 4.2.0 npm  -sniffio 1.3.1 python  -socks 2.8.0 npm  -socks-proxy-agent 8.0.2 npm  -sortedcontainers 2.4.0 python  -soupsieve 2.5 python  -spdx-correct 3.2.0 npm  -spdx-exceptions 2.5.0 npm  -spdx-expression-parse 3.0.1 npm  -spdx-license-ids 3.0.17 npm  -sprintf-js 1.1.3 npm  -ssri 10.0.5 npm  -stack-data 0.6.2 python  -starlette 0.37.2 python  -streamz 0.6.4 python  -string-width 4.2.3 npm (+1 duplicate) -string-width 5.1.2 npm (+1 duplicate) -strip-ansi 6.0.1 npm (+1 duplicate) -strip-ansi 7.1.0 npm (+1 duplicate) -supports-color 9.4.0 npm  -sysvinit-utils 3.01-1ubuntu1 deb  -tabulate 0.9.0 python  -tar 1.34+dfsg-1ubuntu0.1.22.04.2 deb  -tar 6.2.0 npm  -tblib 3.0.0 python  -terminado 0.18.1 python  -text-table 0.2.0 npm  -threadpoolctl 3.5.0 python  -tifffile 2020.6.3 python  -tiny-relative-date 1.3.0 npm  -tinycss2 1.3.0 python  -toolz 0.12.1 python  -tornado 6.4.1 python  -tqdm 4.66.4 python  -traitlets 5.14.3 python  -treelite 4.1.2 python  -treeverse 3.0.0 npm  -truststore 0.8.0 python  -tuf-js 2.2.0 npm  -typer 0.12.3 python  -typer-slim 0.12.3 python  -types-python-dateutil 2.9.0.20240316 python  -typing-utils 0.1.0 python  -typing_extensions 4.12.2 python  -tzdata 2024.1 python  -tzdata 2024a-0ubuntu0.22.04 deb  -tzlocal 5.2 python  -ubuntu-keyring 2021.03.26 deb  -uc-micro-py 1.0.3 python  -ucx-py 0.38.0 python  -ucxx 0.38.0 python  -ujson 5.10.0 python  -unicodedata2 15.1.0 python  -unique-filename 3.0.0 npm  -unique-slug 4.0.0 npm  -uri-template 1.3.0 python  -urllib3 1.26.18 python  -usrmerge 25ubuntu2 deb  -util-deprecate 1.0.2 npm  -util-linux 2.37.2-4ubuntu3.4 deb  -uvicorn 0.30.1 python  -validate-npm-package-license 3.0.4 npm  -validate-npm-package-name 5.0.0 npm  -walk-up-path 3.0.1 npm  -wcwidth 0.2.13 python  -wcwidth 1.0.1 npm  -webcolors 24.6.0 python  -webencodings 0.5.1 python  -websocket-client 1.8.0 python  -websockets 10.4 python  -wheel 0.43.0 python  -which 2.0.2 npm  -which 4.0.0 npm  -wide-align 1.1.5 npm  -wrap-ansi 7.0.0 npm  -wrap-ansi 8.1.0 npm  -write-file-atomic 5.0.1 npm  -xarray 2024.6.0 python  -xgboost 2.0.3 python  -xyzservices 2024.6.0 python  -yallist 4.0.0 npm  -yarl 1.9.4 python  -zict 3.0.0 python  -zipp 3.19.2 python  -zlib1g 1:1.2.11.dfsg-2ubuntu9.2 deb  -zstandard 0.19.0 python  diff --git a/data/validation_output/cve_validation_formatted_openai.json b/data/validation_output/cve_validation_formatted_openai.json deleted file mode 100644 index 7477efb..0000000 --- a/data/validation_output/cve_validation_formatted_openai.json +++ /dev/null @@ -1,147 +0,0 @@ -[ - { - "cve": "CVE-2018-21028", - "input_check_list": [ - "Check the Boa version: The vulnerability affects Boa versions up to and including 0.94.14rc21. Verify the version of Boa running in the Docker container. If it is using a vulnerable version, consider updating to a patched version.", - "Identify potential memory leaks: The vulnerability involves missing calls to the free function, leading to memory leaks. Review the code and configuration of the applications running in the Docker container to identify any instances where resources are not being released properly.", - "Assess the impact: The vulnerability does not have a direct impact on confidentiality or integrity (CVSS:C:N/I:N). However, it can lead to a denial of service (CVSS:A:H). Evaluate the potential impact of a denial of service attack on the Docker container and the applications it hosts.", - "Evaluate network exposure: Determine if the Docker container or any services within it are exposed to the network. Assess the potential for remote attackers to exploit the vulnerability by triggering memory leaks.", - "Consider the CWE description: The CWE description highlights the importance of releasing resources after their effective lifetime has ended. Review the code and configuration of the applications running in the Docker container to ensure that resources are properly released when no longer needed.", - "Verify the disputed status: Check if there are any disputes regarding the vulnerability. It is important to consider the credibility and consensus among security researchers and vendors regarding the existence and severity of the vulnerability." - ], - "output_check_list": [ - "I don't know the version of Boa running in the Docker container.", - "To prevent memory leaks in a Docker container, you can use the --scale option when running docker-compose up to limit the number of instances running. In practice, 3 instances have been shown to work well. Use as many instances as required. Keep in mind each instance takes about 1 Gb of memory.", - "Based on the information gathered, the potential impact of a denial of service attack on the Docker container and the applications it hosts can vary depending on the specific vulnerabilities present in the software versions used. It is important to further investigate if any vulnerable functions or components are used in the Docker container's code or its dependencies to fully assess the impact.", - "The Docker container is not exposed to the network, reducing the potential for remote attackers to exploit the vulnerability by triggering memory leaks. However, to fully assess its vulnerability, we need more information about the libraries and dependencies used by the Docker container. Unfortunately, I don't have access to the Docker Container Software Bill of Materials QA System to gather this information. We can try using the Internet Search tool to find relevant resources or consult with Docker documentation for more details.", - "Based on the information gathered, it is important to review the code and configuration of the applications running in the Docker container to ensure that resources are properly released when no longer needed. The Docker Container Code QA System did not provide any specific information about the applications using proper resource release mechanisms. The Docker Container Developer Guide QA System mentioned that the Docker container is responsible for managing resources such as memory, CPU, and disk space, but did not provide specific details about resource release. The Docker Container Software Bill of Materials QA System directed me to the Docker website, but an internet search did not provide specific information about the libraries used in the Docker container and their resource release mechanisms. Therefore, further investigation may be required to determine how resources are released in the Docker container.", - "The disputed status of a vulnerability can be determined by considering information from security researchers and vendors, as well as the reasons why a CVE ID may be rejected or disputed." - ] - }, - { - "cve": "CVE-2023-36632", - "input_check_list": [ - "Check the Python version: The vulnerability affects Python versions through 3.11.4. If your Docker container is running Python, verify the version. If it is through 3.11.4, it may be vulnerable.", - "Identify usage of the legacy email.utils.parseaddr function: Check all applications within your Docker container for usage of the legacy email.utils.parseaddr function. This function is categorized as a Legacy API, and applications are recommended to use the email.parser.BytesParser or email.parser.Parser class instead. If any application is using the legacy function, it may be vulnerable.", - "Evaluate the input data: Determine if the applications input data includes a name and an email address. If so, consider whether the input data is untrusted and potentially crafted by an attacker. If untrusted input data is passed to the legacy email.utils.parseaddr function, it may trigger the vulnerability.", - "Assess resource consumption: The vulnerability can lead to a \"RecursionError: maximum recursion depth exceeded while calling a Python object.\" Consider whether the Docker container has resource limits in place to prevent excessive recursion and control resource consumption. If not, it may be more susceptible to this vulnerability.", - "Vendor perspective: Note that the vendors perspective is that this is neither a vulnerability nor a bug. However, it is still important to assess the impact and potential risks within your specific environment.", - "Network exposure: Determine if the Docker container has network exposure, especially if the vulnerable Python code or any service using it is exposed to the internet. This will help assess the potential attack surface.", - "CVSS score: The CVSS 3.1 score for this vulnerability is 4.13, indicating a moderate severity. Consider this score in relation to your organization's risk tolerance and prioritize accordingly." - ], - "output_check_list": [ - "The Python version in the Docker container is 3.10.6.", - "The legacy email.utils.parseaddr function is not used in any of the applications within the Docker container, so it is not vulnerable to this specific legacy API.", - "The input data in the Docker container does not include a name and an email address, and therefore does not trigger the vulnerability.", - "No, the Docker container does not have resource limits in place.", - "The Docker container includes the following libraries in its software bill of materials: libassuan0, libatomic1, libattr1, libbsd0, libbz2-1.0, libc-bin, libisl23, libitm1, libjq1, NETStandard.Library, and Newtonsoft.Json. The Docker container's software version is within the vulnerability range of 1.0.0 to 1.2.0. I have searched the CVE system and found information about the reported CVE.", - "To determine if the Docker container has network exposure, it is necessary to analyze the Docker API to check for network-related functions or components used within the container. This can provide information about the network configuration and help assess the potential attack surface.", - "The reported CVE has a CVSS score of 4.13, indicating a moderate severity. The Docker container uses the following libraries and components: libassuan0, libatomic1, libattr1, docker/cli-docs-tool, docker/cli/cmd/docker, docker/compose-switch, docker/compose/v2, docker/distribution, and docker/docker. The reported vulnerability may affect the Docker container, and further investigation is needed to gather more information about the specific CVE." - ] - }, - { - "cve": "CVE-2023-4033", - "input_check_list": [ - "Check the mlflow/mlflow version: The vulnerability affects mlflow/mlflow versions prior to 2.6.0. If your Docker container is running mlflow/mlflow, verify the version. If its prior to 2.6.0, its vulnerable and you should update to version 2.6.0 or later.", - "Evaluate the OS command injection risk: Since the vulnerability involves OS command injection, you should consider whether your applications are constructing OS commands using externally-influenced input. Check if any applications within your Docker container are accepting user-supplied inputs to construct OS commands.", - "Assess the impact: The vulnerability has a CVSS 3.1 score of 4.13, indicating a high severity. Consider the potential impact of an attacker executing unexpected, dangerous commands directly on the operating system. Assess the privileges of the compromised process and the potential damage it can cause.", - "Network exposure: Determine if your Docker container has network exposure, especially if the mlflow/mlflow service or any service using it is exposed to the internet. This will help assess the attack surface and potential entry points for exploitation.", - "Mitigation: If your Docker container is vulnerable, consider implementing mitigations such as input validation and sanitization to prevent OS command injection attacks. Additionally, ensure that the principle of least privilege is followed to limit the privileges of the compromised process.", - "Note: Its important to stay updated with the latest security advisories and patches from the mlflow/mlflow project to address any vulnerabilities promptly." - ], - "output_check_list": [ - "Agent stopped due to iteration limit or time limit.", - "The Docker container does not have any applications that accept user-supplied inputs to construct OS commands, so the OS command injection risk is low.", - "The privileges of the compromised process in the Docker container can be determined by using the docker inspect command with the appropriate container ID.", - "The mlflow/mlflow service or any service using it in the Docker container is likely exposed to the internet through port 5000, indicating potential network exposure and entry points for exploitation. Further investigation into the network configuration, settings, and specific libraries and dependencies used is necessary to fully assess the impact of the reported CVE on the Docker container.", - "Some mitigation strategies for a vulnerable Docker container include using multi-stage builds, rebuilding images, and checking the image for vulnerabilities.", - "The Docker container is not impacted by the reported CVE." - ] - }, - { - "cve": "CVE-2022-32212", - "input_check_list": [ - "Check the Node.js version: The vulnerability affects Node.js versions less than 14.20.0, less than 16.20.0, and less than 18.5.0. If your Docker container is running Node.js, verify the version. If it's below the mentioned versions, it's vulnerable, and you should update to a secure version.", - "Evaluate the command injection risk: Since the vulnerability involves OS command injection, you should consider whether your applications are constructing OS commands using externally-influenced input. Check if your applications accept user input that is used to construct OS commands. If so, this is a potential attack vector.", - "Assess the IsAllowedHost check: The vulnerability is due to an insufficient IsAllowedHost check that can be bypassed. Review your code to determine if it uses the IsAllowedHost check and if it properly validates IP addresses before making DBS requests. If the check is not implemented correctly, it could allow for rebinding attacks.", - "Network exposure: Consider whether your Docker container has network exposure, especially if the Node.js service or any service using it is exposed to the internet. This vulnerability has a network attack vector, so it's important to assess the potential impact.", - "Verify the CVSS score: The CVSS 3.1 score for this vulnerability is 4.13, indicating a high severity. Take this into account when prioritizing your remediation efforts.", - "Check for vendor patches: Check if the Node.js project has released any patches or updates to address this vulnerability. If patches are available, apply them to your Docker container.", - "Monitor for security advisories: Stay updated on any security advisories related to this vulnerability. Subscribe to relevant mailing lists or follow trusted sources to receive timely information about any new developments or mitigations.", - "Remember that this checklist is preliminary, and it's important to conduct a thorough assessment of your specific environment and applications to ensure accurate vulnerability management." - ], - "output_check_list": [ - "The Docker container does not use Node.js, so it is not vulnerable to the reported CVE.", - "There is no command injection risk in the Docker container.", - "The Docker container's code does not implement the IsAllowedHost check correctly, which could potentially allow for rebinding attacks.", - "Based on the information gathered, the reported CVE does not have a direct impact on the Docker container. The Docker container has network exposure, but the Node.js service or any service using it is not exposed to the internet. Additionally, none of the libraries used by the Docker container contain the vulnerable function or component related to the reported CVE. Therefore, the potential impact of the vulnerability on the Docker container is limited. However, it is still important to stay updated on any new information or patches related to the reported CVE.", - "Agent stopped due to iteration limit or time limit.", - "There are no vendor patches or updates available for the Node.js project that can be applied to the Docker container, as Node.js does not appear to be installed or used in the container.", - "The security advisory for the reported CVE on the Docker container mentions a vulnerability in Docker versions before 9.03.15 and 20.10.3, where pulling an intentionally malformed Docker image manifest can cause a crash.", - "None" - ] - }, - { - "cve": "CVE-2022-45142", - "input_check_list": [ - "Check the Heimdal version: The vulnerability affects Heimdal versions 7.7.1 and 7.8.0. If your Docker container is running Heimdal, verify the version. If it matches one of the vulnerable versions, it may be vulnerable.", - "Check for any software using vulnerable Heimdal versions: Other applications might use Heimdal and be vulnerable. Check all applications within your Docker container for dependencies on vulnerable versions of Heimdal.", - "Evaluate the impact of the vulnerability: The vulnerability affects the validation of message integrity codes in gssapi/arcfour. Consider whether your applications are using gssapi/arcfour and if the integrity of the messages is critical. If so, this vulnerability may pose a risk.", - "Check for the fix: The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug. Verify if these patches were backported to the Heimdal version in your Docker container. If the fix is present, the vulnerability may be mitigated.", - "Assess the CVSS score: The CVSS score for this vulnerability is 3.1, indicating a moderate severity. Consider the impact and exploitability of the vulnerability based on this score.", - "Network exposure: Determine if your Docker container has network exposure, especially if the Heimdal service or any service using it is exposed to the internet. This will help assess the potential risk of exploitation.", - "Verify the CWE description: The vulnerability is related to improper validation of integrity check values. Review the CWE description and consider if your applications are susceptible to this type of vulnerability." - ], - "output_check_list": [ - "The Docker container is not vulnerable to the reported CVE because it does not use Heimdal.", - "I was unable to determine if any application within the Docker container uses vulnerable versions of Heimdal. However, you can find the Docker container's software bill of materials (SBOM) on the github.com/docker/cli-docs-tool page. Additionally, you can use the Internet Search to find information about vulnerable versions of the Heimdal library.", - "The Docker container under investigation does not use gssapi/arcfour, so the reported vulnerability does not pose a risk to the integrity of the messages.", - "Agent stopped due to iteration limit or time limit.", - "To assess the impact and exploitability of the vulnerability with a CVSS score of 3.1, I will use the CVSS calculator for version 3.1 to input the specific metrics and calculate its impact and exploitability.", - "Based on the information gathered, the purpose and functionality of the Docker container do not directly indicate network exposure or mention the Heimdal service. However, further investigation is needed to assess the potential risk of network exposure and any vulnerabilities associated with the Heimdal service.", - "The CWE description for improper validation of integrity check values is related to the product not validating or incorrectly validating the integrity check values or \"checksums\" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission." - ] - }, - { - "cve": "CVE-2021-33910", - "input_check_list": [ - "Check the version of systemd: The vulnerability affects systemd versions prior to 246.15, 247.8, 248.5, and 249.1. Verify the version of systemd running in the Docker container. If it is a vulnerable version, further investigation is required.", - "Evaluate the impact of the vulnerability: The vulnerability results in an operating system crash, indicating a potential denial of service (DoS) attack. Consider the potential impact of a DoS attack on the Docker container and the services running within it.", - "Assess the attack vector: The vulnerability has a local attack vector, meaning that an attacker needs local access to the system to exploit it. Determine if the Docker container is exposed to potential attackers with local access.", - "Review resource allocation practices: The vulnerability is related to the allocation of resources without limits or throttling. Assess the resource allocation practices within the Docker container and check if there are any instances where resources are allocated without appropriate restrictions.", - "Consider the severity: The CVSS 3.1 score for this vulnerability is 7.5, indicating a high severity. Take into account the severity level when prioritizing the vulnerability assessment and mitigation efforts.", - "Check for available patches or updates: Check if there are any patches or updates available for the vulnerable version of systemd. If patches are available, apply them to mitigate the vulnerability.", - "Monitor for any signs of exploitation: Keep an eye on system logs and monitor for any signs of exploitation or abnormal behavior that could indicate an attempted or successful attack.", - "Note: This checklist provides a starting point for assessing the vulnerability in a Docker container. It is important to conduct a thorough analysis and consider other factors specific to the environment and deployment to ensure accurate vulnerability assessment and mitigation." - ], - "output_check_list": [ - "The version of systemd running in the Docker container is not vulnerable.", - "A denial of service (DoS) attack on a Docker container can potentially disrupt the availability of the container and the services running within it, leading to service downtime and loss of productivity. The impact of the attack depends on the criticality of the services or applications hosted by the Docker container.", - "Based on the information gathered, if the Docker container is running an affected version of Docker Desktop (before 4.23.0), it may be exposed to potential attackers with local access.", - "Based on the information from the Docker Container Developer Guide QA System, it appears that the Docker container has resource allocation practices in place that require 1 Gb of memory for each instance.", - "Based on the available information, I cannot provide a definitive answer about the impact of the reported CVE on the Docker container. Further investigation is needed, including obtaining the Docker container's software bill of materials (SBOM) and analyzing its dependencies. Additionally, more specific information about the reported CVE and its impact on Docker containers may need to be obtained through other means.", - "There are no patches or updates available for the vulnerable version of systemd in the Docker container.", - "To monitor for signs of exploitation or abnormal behavior in a Docker container, you can use the output from detected anomalies published to an S3 bucket, directory, or Kafka topic and integrate it with a monitoring tool.", - "No action is required as this is not a question." - ] - }, - { - "cve": "CVE-2015-20107", - "input_check_list": [ - "Check the Python version: The vulnerability affects Python versions up to 3.10.8, as well as versions 3.7, 3.8, and 3.9. If your Docker container is running Python, verify the version. If its within the affected range, its vulnerable and you should update to a patched version.", - "Identify applications using Python: Determine if any applications within your Docker container are using Python. Check for dependencies on vulnerable versions of Python. If any applications are using the affected versions, they may be vulnerable.", - "Evaluate the usage of the mailcap module: Since the vulnerability involves the mailcap module, check if any applications within your Docker container are using this module. Consider whether these applications are using untrusted input as part of commands executed through the mailcap module. If so, this is a potential attack vector.", - "Assess the risk of command injection: Given that the vulnerability allows for command injection, evaluate whether the applications within your Docker container are susceptible to this type of attack. Consider if the applications accept untrusted input that is used to construct commands executed by the application. If so, this increases the risk of exploitation.", - "Network exposure: Determine if your Docker container has network exposure, especially if the Python service or any service using it is exposed to the internet. This will help assess the potential impact of an attack exploiting the vulnerability.", - "Check for patched versions: Verify if patched versions of Python are available for your Docker container. If patches are available, update to the latest version to mitigate the vulnerability." - ], - "output_check_list": [ - "Agent stopped due to iteration limit or time limit.", - "The Docker container does not provide any information about the applications within it or the libraries it contains. However, the Docker container is used to set up dependencies and ensure a consistent environment for the workflow. It can be built and run using specific commands. To investigate if any applications within the Docker container are using Python and if they are using vulnerable versions, further analysis is required.", - "Agent stopped due to iteration limit or time limit.", - "The risk of command injection in the Docker container is low.", - "Based on the information available, it is not possible to determine if the Docker container has network exposure.", - "I don't know the version of the Python library in the Docker container." - ] - } -] \ No newline at end of file diff --git a/quick_start/quick_start_guide.ipynb b/quick_start/quick_start_guide.ipynb index 3298d2a..d0cf9e8 100644 --- a/quick_start/quick_start_guide.ipynb +++ b/quick_start/quick_start_guide.ipynb @@ -10,9 +10,10 @@ "For full instructions on running and customizing the blueprint, please see the [README](../README.md).\n", "\n", "## Prerequisites\n", - "* [Build and launch Morpheus Vulnerability Analysis container](../README.md#prerequisites)\n", + "* [Build and launch Morpheus Vulnerability Analysis container](../README.md#getting-started)\n", " + Be sure to keep the container bash shell handy for launching the HTTP server\n", "* From the host machine (outside the container), open this notebook in a [Jupyter server](https://docs.jupyter.org/en/latest/running.html), or from an IDE that supports notebook execution, such as [VS Code](https://code.visualstudio.com/docs/datascience/jupyter-notebooks).\n", + " + A running Jupyter server is included with the container by default. Instructions to connect can be found in this README section: [From the quick start user guide notebook](../README.md#from-the-quick-start-user-guide-notebook).\n", " + Please keep this notebook in its original directory, and ensure the repository structure has not been modified before running the notebook.\n", "* [Install `pandas`](https://pandas.pydata.org/docs/getting_started/install.html)\n", "* [Install Syft](https://github.com/anchore/syft) (optional prerequisite for cell 4, Generating a custom SBOM)\n", @@ -521,7 +522,7 @@ "cell_type": "markdown", "metadata": {}, "source": [ - "This command sends a request with the input message to the running HTTP server. You should be able to see the logs from the pipeline in the console. Please wait until the pipeline execution is finished before proceeding to the next section." + "This command sends a request with the input message to the running HTTP server. You should be able to see the logs from the pipeline in the console." ] }, { @@ -556,14 +557,22 @@ "Vulnerability 'CVE-2024-21762' affected status: FALSE. Label: code_not_present\n", "Vulnerability 'GHSA-hh8p-p8mp-gqhm' affected status: TRUE. Label: vulnerable\n", "Vulnerability 'GHSA-3f63-hfp8-52jq' affected status: FALSE. Label: code_not_reachable\n", - "```" + "```\n", + "\n", + "
\n", + " Note: The output you receive from the pipeline may not be identical as the output in the example above. The output may vary due to the non-deterministic nature of the LLM models.\n", + "
" ] }, { "cell_type": "markdown", "metadata": {}, "source": [ - "Additional inputs can be sent to the HTTP server and the results will be appended to the output file until the server is shut down." + "Additional inputs can be sent to the HTTP server and the results will be appended to the output file until the server is shut down.\n", + "\n", + "
\n", + " Note: Please wait until the pipeline execution is finished before proceeding to the next section.\n", + "
" ] }, { diff --git a/src/cve/pipeline/input.py b/src/cve/pipeline/input.py index 0848142..0186478 100644 --- a/src/cve/pipeline/input.py +++ b/src/cve/pipeline/input.py @@ -309,16 +309,5 @@ async def _calc_dep(cve_intel: CveIntel): pipe.add_stage(check_vulnerable_dependencies(config)) - @stage - def debug_input(message: AgentMorpheusEngineInput) -> AgentMorpheusEngineInput: - - # Save the input object to disk for debugging - with open("./.tmp/input_object.json", "w") as f: - f.write(message.model_dump_json(indent=2)) - - return message - - pipe.add_stage(debug_input(config)) - # Return embedding model to be used later in the pipeline return embedding