{
 "arch": "arm64",
 "findings": [],
 "findings_changed_at": "2026-08-20T16:49:35Z",
 "image": "zip",
 "inputs": {
  "sbom_sha256": "5e9c52fed4067967e78c1fd37a8f054bfa1cec6c1574e60ac07fd6f2b524432a"
 },
 "platform_digest": "sha256:ba550becf15ff1c61825b394de03211e084f09db2f54deda810e1c92edba9eb3",
 "project": "zip",
 "receipt_sha256": "e1c597e0ebe5f04a9b810c5b346dd76ddfd96998a46e808e3166af12569d5d64",
 "scanner": "grype",
 "severity_counts": {
  "critical": 0,
  "high": 0,
  "low": 0,
  "medium": 0,
  "unknown": 0
 },
 "suppressed": [
  {
   "affects": [
    "bzip2"
   ],
   "by": "vex",
   "id": "CVE-2026-42250"
  }
 ],
 "version": "3.0",
 "vex_applied": [
  "zip-3.0-arm64.vex.json",
  "zip-3.0-arm64.ubuntu-vex.json"
 ]
}