Suspicious ^80% wolfi Download

rabbitmq-cluster-operator-iamguarded-compat 2.20.0-r3

Archive contains escaping symlink

Archive contains symlink that may escape extraction directoryFile starts with

SHA-25699b3b72e1e6466155a9102ebbf403bb0b39180bfd3aa26ab5f208a2c2ec3ae91

URLhttps://packages.wolfi.dev/os/x86_64/rabbitmq-cluster-operator-iamguarded-compat-2.20.0-r3.apk

MaleculeO(Er)

Evidence

SPDX license identifier run-script · lines 1–24

1#!/bin/sh
2# Copyright Broadcom, Inc. All Rights Reserved.
3# SPDX-License-Identifier: APACHE-2.0
4set -u
5
⋯8 lines
14
15if test -f "$script"; then
16  sh $script
17
18  if [ $? -ne 0 ]; then
⋯6 lines

Alpine/Wolfi package info metadata .PKGINFO · lines 1–12

1# Generated by melange
2pkgname = rabbitmq-cluster-operator-iamguarded-compat
3pkgver = 2.20.0-r3
4arch = x86_64
5size = 61058
6origin = rabbitmq-cluster-operator
7pkgdesc = compat package for iamguarded
8url = 
9commit = 3f7f2780162ee15eb47ba90d507acf7ce1665a70
10maintainer = wolfi
11builddate = 1775248161
12license = MPL-2.0

Melange-generated SPDX SBOM rabbitmq-cluster-operator-iamguarded-compat-2.20.0-r3.spdx.json · lines 8–12

  "licenseListVersion": "3.22",
  "creators": [
    "Tool: melange (v0.48.1)",
    "Organization: Chainguard, Inc"
  ],

Wolfi APK SPDX SBOM rabbitmq-cluster-operator-iamguarded-compat-2.20.0-r3.spdx.json · lines 41–45

        "referenceCategory": "PACKAGE-MANAGER",
        "referenceType": "purl",
        "referenceLocator": "pkg:apk/wolfi/[email protected]?arch=x86_64\u0026distro=wolfi"
      }
    ],

No evidence locations were recorded for this file. Raw result