{
 "arch": "arm64",
 "findings": [],
 "findings_changed_at": "2026-08-26T12:56:45Z",
 "image": "zip",
 "inputs": {
  "sbom_sha256": "7a06801651f2d94654ee6faf1b1bd0e6dc7ab1171387c6949e624fb72aaec2eb"
 },
 "platform_digest": "sha256:693688bee0d5545a402c035fa203c82b2ea98af21e526421e7edb8ddecc18fb7",
 "project": "zip",
 "receipt_sha256": "7d733225362d2b80db28da03ddcf46ef5b5adc9e63c38bc3b1b638801d8d00c9",
 "scanner": "grype",
 "severity_counts": {
  "critical": 0,
  "high": 0,
  "low": 0,
  "medium": 0,
  "unknown": 0
 },
 "suppressed": [
  {
   "affects": [
    "bzip2"
   ],
   "by": "vex",
   "id": "CVE-2026-42250"
  }
 ],
 "version": "3.0",
 "vex_applied": [
  "zip-3.0-arm64.vex.json",
  "zip-3.0-arm64.ubuntu-vex.json"
 ]
}