Image
amazonlinux-tools:latest
ghcr.io/northcutted/images/amazonlinux-tools
Amazon Linux 2023 with git, jq, and kubectl
Verified. Meets every requirement in the policy.
Identity
- Digest
sha256:d2f9195b3966d6beebc5ebbf83c22a92eb719399aca923473516ceed01f517f2- Tags
latest- Created
- 2026-10-09 00:00 UTC
- Built by
clearcutt-factory(clearcutt-factory recipe)- Source
- https://github.com/northcutted/clearcutt-factory at
38f488213c03f7a5673c2d05d0b69e46864c7e6dFrom provenance. Read from build provenance that verified. - clearcutt-factory
- Image amazonlinux-tools; built with e07953d; pins 89 packages, 1 tool, 4 images; files clamped to 2026-10-09
Base
- Built on
docker.io/library/amazonlinux:2023(amazonlinux:2023)sha256:8ed3c0a996841537f75607e7d1de2114d8150391f75792e8da9268738547e73f- How it's known
- Proven. The image starts with the base's exact layer digests. This compares content, so it holds whatever the image says about itself. by layer digests, comparing the linux/amd64 images. The image starts with the base's exact layer digests. This compares content, so it holds whatever the image says about itself.
- Currency
- Current. On the newest version of its base observed in this run.Newest observed:
docker.io/library/amazonlinux:2023sha256:8ed3c0a99684Measured against the newest version observed in this run, not against upstream.
Evidence
| Evidence | Status | Signed by | Found as | When | Detail |
|---|---|---|---|---|---|
| Signature | Verified. Found, and checked against a trusted signer in the policy. | https://github.com/northcutted/clearcutt-factory/.github/workflows/images.yml@refs/heads/mainissuer https://token.actions.githubusercontent.com run in https://github.com/northcutted/clearcutt-factory | cosign signature | 2026-10-10 16:25 UTC | ghcr.io/northcutted/images/amazonlinux-tools@sha256:43ab7f6b41eb030f43806beb2adbb3a3bcfa1021925a26455d529d21b9f6c1f7 |
| SBOM | Verified. Found, and checked against a trusted signer in the policy. | https://github.com/northcutted/clearcutt-factory/.github/workflows/images.yml@refs/heads/mainissuer https://token.actions.githubusercontent.com run in https://github.com/northcutted/clearcutt-factory | cosign attestation | 2026-10-10 16:25 UTC |
ghcr.io/northcutted/images/amazonlinux-tools@sha256:94ce6d1ec0fbf7252b8404d80208049599106dabee28fcc44df5b26d0acd4194 |
| Vulnerability report | Verified. Found, and checked against a trusted signer in the policy. | https://github.com/northcutted/clearcutt-factory/.github/workflows/images.yml@refs/heads/mainissuer https://token.actions.githubusercontent.com run in https://github.com/northcutted/clearcutt-factory | cosign attestation | 2026-10-10 16:25 UTC |
ghcr.io/northcutted/images/amazonlinux-tools@sha256:97d9fde67ffa76a2dabdd1bfdd086c2ba73234ff82bca34576d2efc47b3ba999 |
| SLSA provenance | Verified. Found, and checked against a trusted signer in the policy. | https://github.com/northcutted/clearcutt-factory/.github/workflows/images.yml@refs/heads/mainissuer https://token.actions.githubusercontent.com run in https://github.com/northcutted/clearcutt-factory | cosign attestation | 2026-10-10 16:49 UTC | ghcr.io/northcutted/images/amazonlinux-tools@sha256:fff6c1f299d61fa38f9dcdeeef2ba433a6246da3c600f381a7f937aa5bfb66ed |
| Recipe | Verified. Found, and checked against a trusted signer in the policy. | https://github.com/northcutted/clearcutt-factory/.github/workflows/images.yml@refs/heads/mainissuer https://token.actions.githubusercontent.com run in https://github.com/northcutted/clearcutt-factory | cosign attestation | 2026-10-10 16:25 UTC | ghcr.io/northcutted/images/amazonlinux-tools@sha256:17b4d2f7251274ccc96d36794cfef838150d1347bb565e0bcce36a816ffe0a52 |
| Rebase record | Not applicable. Doesn't apply to this image. | — | — | — | No rebase record: the image was built, not rebased. |
| Tests | Declared in recipe. The image's verified recipe declares a smoke test, which clearcutt-factory runs on every platform before it pushes, and it pushes nothing that fails. Nothing attests that the test ran, so it is a claim, not proof. | — | declared in the recipe | — | The verified recipe declares a smoke test (/usr/bin/jq --version) that clearcutt-factory runs on every platform before it pushes; the result isn't separately attested. |
Check it yourself
Commands that check what this page says without trusting this site or the report: each signature and attestation the report says verified, against the signer the policy trusts, a rebuild, and the verdict. They name the image by its digest, ghcr.io/northcutted/images/amazonlinux-tools@sha256:d2f9195b3966d6beebc5ebbf83c22a92eb719399aca923473516ceed01f517f2, never by a tag that could move. Every value comes from the report and is quoted for a POSIX shell (sh, bash, zsh).
cosign verify \
--certificate-identity-regexp='^https://github\.com/northcutted/clearcutt-factory/' \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com \
--certificate-github-workflow-repository=northcutted/clearcutt-factory \
ghcr.io/northcutted/images/amazonlinux-tools@sha256:d2f9195b3966d6beebc5ebbf83c22a92eb719399aca923473516ceed01f517f2cosign verify-attestation \
--type=https://cyclonedx.org/bom \
--certificate-identity-regexp='^https://github\.com/northcutted/clearcutt-factory/' \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com \
--certificate-github-workflow-repository=northcutted/clearcutt-factory \
ghcr.io/northcutted/images/amazonlinux-tools@sha256:d762a56802e4025d8b6e166f915cd20d4f14d317fceef2e519e722fac5095520cosign verify-attestation \
--type=https://cyclonedx.org/bom \
--certificate-identity-regexp='^https://github\.com/northcutted/clearcutt-factory/' \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com \
--certificate-github-workflow-repository=northcutted/clearcutt-factory \
ghcr.io/northcutted/images/amazonlinux-tools@sha256:0b75c175e32399b45283c79af9c9ee3161ce24ddb00887fc42b5a839bec1dceecosign verify-attestation \
--type=https://cosign.sigstore.dev/attestation/vuln/v1 \
--certificate-identity-regexp='^https://github\.com/northcutted/clearcutt-factory/' \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com \
--certificate-github-workflow-repository=northcutted/clearcutt-factory \
ghcr.io/northcutted/images/amazonlinux-tools@sha256:d762a56802e4025d8b6e166f915cd20d4f14d317fceef2e519e722fac5095520cosign verify-attestation \
--type=https://cosign.sigstore.dev/attestation/vuln/v1 \
--certificate-identity-regexp='^https://github\.com/northcutted/clearcutt-factory/' \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com \
--certificate-github-workflow-repository=northcutted/clearcutt-factory \
ghcr.io/northcutted/images/amazonlinux-tools@sha256:0b75c175e32399b45283c79af9c9ee3161ce24ddb00887fc42b5a839bec1dceecosign verify-attestation \
--type=https://slsa.dev/provenance/v1 \
--certificate-identity-regexp='^https://github\.com/northcutted/clearcutt-factory/' \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com \
--certificate-github-workflow-repository=northcutted/clearcutt-factory \
ghcr.io/northcutted/images/amazonlinux-tools@sha256:d2f9195b3966d6beebc5ebbf83c22a92eb719399aca923473516ceed01f517f2cosign verify-attestation \
--type=https://github.com/northcutted/clearcutt-factory/recipe/v1 \
--certificate-identity-regexp='^https://github\.com/northcutted/clearcutt-factory/' \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com \
--certificate-github-workflow-repository=northcutted/clearcutt-factory \
ghcr.io/northcutted/images/amazonlinux-tools@sha256:d2f9195b3966d6beebc5ebbf83c22a92eb719399aca923473516ceed01f517f2clearcutt-factory verify \
--image=ghcr.io/northcutted/images/amazonlinux-tools@sha256:d2f9195b3966d6beebc5ebbf83c22a92eb719399aca923473516ceed01f517f2 \
--certificate-identity-regexp='^https://github\.com/northcutted/clearcutt-factory/' \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com \
--certificate-github-workflow-repository=northcutted/clearcutt-factorycd "$(mktemp -d)"
printf '%s\n' ghcr.io/northcutted/images/amazonlinux-tools@sha256:d2f9195b3966d6beebc5ebbf83c22a92eb719399aca923473516ceed01f517f2 > refs.txt
printf '%s\n' '{"apiVersion":"clearcutt.dev/v1","kind":"VerificationPolicy","required":["signature","sbom","provenance"],"trustedSigners":[{"identityRegexp":"^https://github\\.com/northcutted/clearcutt-factory/","issuer":"https://token.actions.githubusercontent.com","sourceRepository":"https://github.com/northcutted/clearcutt-factory"},{"identityRegexp":"^https://github\\.com/chainguard-images/images/","issuer":"https://token.actions.githubusercontent.com"}],"failOn":"critical","onlyFixed":true,"maxDaysBehind":30}' > policy.json
clearcutt-verify estate verify \
--refs=refs.txt \
--policy=policy.json \
--platforms=linux/amd64,linux/arm64 \
--out=estateNo command for Tests: it isn't verified, so there is no trusted signer to check it against.
Needs cosign, clearcutt-factory, clearcutt-verify, as of clearcutt-verify dev, which wrote this report.
Vulnerabilities
From the publisher's signed report (grype 0.118.0), made 2026-10-10 16:25 UTC. The findings describe that day. The report itself is Verified. Found, and checked against a trusted signer in the policy..
| critical | high | medium | low | negligible | unknown | |
|---|---|---|---|---|---|---|
| Findings | 0 | 12 | 0 | 1 | 0 | 4 |
| With a fix | 0 | 12 | 0 | 0 | 0 | 4 |
17 findings, fix first
| ID | Package | Version | Severity | Fixed in | Platforms |
|---|---|---|---|---|---|
| GO-2026-6603 | golang.org/x/net | v0.57.0 | high | 0.60.0 | linux/amd64, linux/arm64 |
| GO-2026-6603 | stdlib | go1.26.8 | high | 1.26.9 | linux/amd64, linux/arm64 |
| GO-2026-6605 | stdlib | go1.26.8 | high | 1.26.9, 1.27.2 | linux/amd64, linux/arm64 |
| GO-2026-6607 | stdlib | go1.26.8 | high | 1.26.9, 1.27.2 | linux/amd64, linux/arm64 |
| GO-2026-6608 | stdlib | go1.26.8 | high | 1.26.9, 1.27.2 | linux/amd64, linux/arm64 |
| GO-2026-6609 | stdlib | go1.26.8 | high | 1.26.9, 1.27.2 | linux/amd64, linux/arm64 |
| GO-2026-6610 | golang.org/x/net | v0.57.0 | high | 0.60.0 | linux/amd64, linux/arm64 |
| GO-2026-6610 | stdlib | go1.26.8 | high | 1.26.9 | linux/amd64, linux/arm64 |
| GO-2026-6611 | golang.org/x/net | v0.57.0 | high | 0.60.0 | linux/amd64, linux/arm64 |
| GO-2026-6611 | stdlib | go1.26.8 | high | 1.26.9 | linux/amd64, linux/arm64 |
| GO-2026-6613 | stdlib | go1.26.8 | high | 1.26.9, 1.27.2 | linux/amd64, linux/arm64 |
| GO-2026-6629 | golang.org/x/text | v0.40.0 | high | 0.41.0 | linux/amd64, linux/arm64 |
| GO-2025-3547 | k8s.io/kubernetes | v1.37.1 | low | no fix known | linux/amd64, linux/arm64 |
| GO-2026-6599 | stdlib | go1.26.8 | unknown | 1.26.9, 1.27.2 | linux/amd64, linux/arm64 |
| GO-2026-6600 | stdlib | go1.26.8 | unknown | 1.26.9, 1.27.2 | linux/amd64, linux/arm64 |
| GO-2026-6617 | golang.org/x/net | v0.57.0 | unknown | 0.60.0 | linux/amd64, linux/arm64 |
| GO-2026-6617 | stdlib | go1.26.8 | unknown | 1.26.9 | linux/amd64, linux/arm64 |
3 suppressed by a VEX statement or the scanner (not counted)
| ID | Package | Version | Severity | Fixed in | Platforms | Suppressed by |
|---|---|---|---|---|---|---|
| GO-2026-6604 | stdlib | go1.26.8 | critical | 1.26.9, 1.27.2 | linux/amd64, linux/arm64 | Suppressed. A VEX statement, or a rule of the scanner's own, says this finding doesn't apply, so the report doesn't count it. It is a statement someone made, not a check: the finding stays listed. The publisher's scan suppressed it, with a statement this run didn't see. |
| GO-2026-6612 | golang.org/x/net | v0.57.0 | critical | 0.60.0 | linux/amd64, linux/arm64 | Suppressed. A VEX statement, or a rule of the scanner's own, says this finding doesn't apply, so the report doesn't count it. It is a statement someone made, not a check: the finding stays listed. The publisher's scan suppressed it, with a statement this run didn't see. |
| GO-2026-6612 | stdlib | go1.26.8 | critical | 1.26.9 | linux/amd64, linux/arm64 | Suppressed. A VEX statement, or a rule of the scanner's own, says this finding doesn't apply, so the report doesn't count it. It is a statement someone made, not a check: the finding stays listed. The publisher's scan suppressed it, with a statement this run didn't see. |
Tests and rebuilds
- Tests
- Declared in recipe. The image's verified recipe declares a smoke test, which clearcutt-factory runs on every platform before it pushes, and it pushes nothing that fails. Nothing attests that the test ran, so it is a claim, not proof. The verified recipe declares a smoke test (/usr/bin/jq --version) that clearcutt-factory runs on every platform before it pushes; the result isn't separately attested.
- Rebuild
- Reproduced. Rebuilt, and the rebuild has the same digest. rebuilt from the signed recipe, 2026-10-10 16:53 UTCRebuild gave
sha256:d2f9195b3966d6beebc5ebbf83c22a92eb719399aca923473516ceed01f517f2, the same digest as the image.
Rebase history
Not applicable. Doesn't apply to this image. No rebase record: the image was built, not rebased.
This image over time
This image in each run that recorded per-image rows, newest first, and how it changed since the run before: rebuilt or rebased (a new digest), or its base moved (the same image, its base more or less current). Compare two runs for every image at once.
| Run | Digest | Verdict | Base | Critical | High |
|---|---|---|---|---|---|
| 2026-10-10 16:51 UTC | sha256:d2f9195b3966 | Verified | Proven, currentsha256:8ed3c0a99684 | 0 | 12 |
? means unknown: the run had no vulnerability data for this image. 2 earlier runs recorded no per-image rows and aren't shown.
Platforms
| Platform | Digest | Layers | Compressed size |
|---|---|---|---|
| linux/amd64 | sha256:d762a56802e4025d8b6e166f915cd20d4f14d317fceef2e519e722fac5095520 | 3 | 109 MB |
| linux/arm64 | sha256:0b75c175e32399b45283c79af9c9ee3161ce24ddb00887fc42b5a839bec1dcee | 3 | 107 MB |
Packages
Read from its SBOM, which is Verified. Found, and checked against a trusted signer in the policy.; the union of the linux/amd64, linux/arm64 images' lists.
313 package versions
| Package | Version | Type |
|---|---|---|
| alternatives | 1.15-2.amzn2023.0.2 | rpm |
| amazon-linux-repo-cdn | 2023.12.20260930-0.amzn2023 | rpm |
| audit-libs | 3.1.5-1.amzn2023.0.2 | rpm |
| basesystem | 11-11.amzn2023.0.2 | rpm |
| bash | 5.2.15-1.amzn2023.0.2 | rpm |
| bzip2-libs | 1.0.8-6.amzn2023.0.2 | rpm |
| ca-certificates | 2025.2.76-1.0.amzn2023.0.3 | rpm |
| coreutils-single | 8.32-30.amzn2023.0.5 | rpm |
| cracklib | 2.9.6-27.amzn2023.0.2 | rpm |
| crypto-policies | 20260224-1.gitea0f072.amzn2023.0.6 | rpm |
| curl-minimal | 8.21.0-5.amzn2023.0.2 | rpm |
| dnf | 4.14.0-1.amzn2023.0.8 | rpm |
| dnf-data | 4.14.0-1.amzn2023.0.8 | rpm |
| elfutils-default-yama-scope | 0.188-3.amzn2023.0.3 | rpm |
| elfutils-libelf | 0.188-3.amzn2023.0.3 | rpm |
| elfutils-libs | 0.188-3.amzn2023.0.3 | rpm |
| expat | 2.8.3-1.amzn2023.0.1 | rpm |
| file-libs | 5.39-7.amzn2023.0.4 | rpm |
| filesystem | 3.14-5.amzn2023.0.3 | rpm |
| gawk | 5.1.0-3.amzn2023.0.4 | rpm |
| gdbm-libs | 1:1.19-2.amzn2023.0.2 | rpm |
| git | 2.50.1-1.amzn2023.0.1 | rpm |
| git-core | 2.50.1-1.amzn2023.0.1 | rpm |
| git-core-doc | 2.50.1-1.amzn2023.0.1 | rpm |
| github.com/beorn7/perks | v1.0.1 | golang |
| github.com/blang/semver/v4 | v4.0.0 | golang |
| github.com/cespare/xxhash/v2 | v2.3.0 | golang |
| github.com/chai2010/gettext-go | v1.0.2 | golang |
| github.com/davecgh/go-spew | v1.1.2-0.20180830191138-d8f796af33cc | golang |
| github.com/distribution/reference | v0.6.0 | golang |
| github.com/emicklei/go-restful/v3 | v3.13.0 | golang |
| github.com/exponent-io/jsonpath | v0.0.0-20210407135951-1de76d718b3f | golang |
| github.com/fatih/camelcase | v1.0.0 | golang |
| github.com/fxamacker/cbor/v2 | v2.9.1 | golang |
| github.com/go-errors/errors | v1.4.2 | golang |
| github.com/go-logr/logr | v1.4.3 | golang |
| github.com/go-openapi/jsonpointer | v1.0.0 | golang |
| github.com/go-openapi/jsonreference | v1.0.0 | golang |
| github.com/go-openapi/swag | v0.27.1 | golang |
| github.com/go-openapi/swag/cmdutils | v0.27.1 | golang |
| github.com/go-openapi/swag/conv | v0.27.1 | golang |
| github.com/go-openapi/swag/fileutils | v0.27.1 | golang |
| github.com/go-openapi/swag/jsonutils | v0.27.1 | golang |
| github.com/go-openapi/swag/loading | v0.27.1 | golang |
| github.com/go-openapi/swag/mangling | v0.27.1 | golang |
| github.com/go-openapi/swag/netutils | v0.27.1 | golang |
| github.com/go-openapi/swag/pools | v0.27.1 | golang |
| github.com/go-openapi/swag/stringutils | v0.27.1 | golang |
| github.com/go-openapi/swag/typeutils | v0.27.1 | golang |
| github.com/go-openapi/swag/yamlutils | v0.27.1 | golang |
| github.com/google/btree | v1.1.3 | golang |
| github.com/google/gnostic-models | v0.7.0 | golang |
| github.com/google/uuid | v1.6.0 | golang |
| github.com/gorilla/websocket | v1.5.4-0.20250319132907-e064f32e3674 | golang |
| github.com/jonboulle/clockwork | v0.5.0 | golang |
| github.com/json-iterator/go | v1.1.12 | golang |
| github.com/liggitt/tabwriter | v0.0.0-20181228230101-89fcab3d43de | golang |
| github.com/lithammer/dedent | v1.1.0 | golang |
| github.com/MakeNowJust/heredoc | v1.0.0 | golang |
| github.com/mitchellh/go-wordwrap | v1.0.1 | golang |
| github.com/moby/spdystream | v0.5.1 | golang |
| github.com/moby/term | v0.5.2 | golang |
| github.com/modern-go/concurrent | v0.0.0-20180306012644-bacd9c7ef1dd | golang |
| github.com/modern-go/reflect2 | v1.0.3-0.20250322232337-35a7c28c31ee | golang |
| github.com/monochromegane/go-gitignore | v0.0.0-20200626010858-205db1a8cc00 | golang |
| github.com/munnerz/goautoneg | v0.0.0-20191010083416-a7dc8b61c822 | golang |
| github.com/mxk/go-flowrate | v0.0.0-20140419014527-cca7078d478f | golang |
| github.com/opencontainers/go-digest | v1.0.0 | golang |
| github.com/peterbourgon/diskv | v2.0.1+incompatible | golang |
| github.com/pmezard/go-difflib | v1.0.1-0.20181226105442-5d4384ee4fb2 | golang |
| github.com/prometheus/client_golang | v1.24.0 | golang |
| github.com/prometheus/client_model | v0.6.2 | golang |
| github.com/prometheus/common | v0.70.0 | golang |
| github.com/prometheus/procfs | v0.21.1 | golang |
| github.com/russross/blackfriday/v2 | v2.1.0 | golang |
| github.com/spf13/cobra | v1.10.2 | golang |
| github.com/spf13/pflag | v1.0.10 | golang |
| github.com/x448/float16 | v0.8.4 | golang |
| github.com/xlab/treeprint | v1.2.0 | golang |
| glib2 | 2.82.2-771.amzn2023 | rpm |
| glibc | 2.34-231.amzn2023.0.5 | rpm |
| glibc-common | 2.34-231.amzn2023.0.5 | rpm |
| glibc-minimal-langpack | 2.34-231.amzn2023.0.5 | rpm |
| gmp | 1:6.2.1-2.amzn2023.0.2 | rpm |
| gnupg2-minimal | 2.3.7-1.amzn2023.0.9 | rpm |
| go.opentelemetry.io/otel | v1.44.0 | golang |
| go.opentelemetry.io/otel/trace | v1.44.0 | golang |
| go.yaml.in/yaml/v2 | v2.4.4 | golang |
| go.yaml.in/yaml/v3 | v3.0.4 | golang |
| golang.org/x/net | v0.57.0 | golang |
| golang.org/x/oauth2 | v0.36.0 | golang |
| golang.org/x/sync | v0.22.0 | golang |
| golang.org/x/sys | v0.47.0 | golang |
| golang.org/x/term | v0.45.0 | golang |
| golang.org/x/text | v0.40.0 | golang |
| golang.org/x/time | v0.15.0 | golang |
| google.golang.org/protobuf | v1.36.12-0.20260120151049-f2248ac996af | golang |
| gopkg.in/evanphx/json-patch.v4 | v4.13.0 | golang |
| gopkg.in/inf.v0 | v0.9.1 | golang |
| gpg | 1.23.2 | pypi |
| gpg-pubkey | d832c631-6515c85e | rpm |
| gpgme | 1.23.2-182.amzn2023.0.1 | rpm |
| grep | 3.8-1.amzn2023.0.4 | rpm |
| groff-base | 1.22.4-7.amzn2023.0.2 | rpm |
| gzip | 1.12-1.amzn2023.0.1 | rpm |
| jq | 1.8.1-60.amzn2023 | rpm |
| json-c | 0.14-8.amzn2023.0.2 | rpm |
| k8s.io/api | UNKNOWN | golang |
| k8s.io/apimachinery | UNKNOWN | golang |
| k8s.io/cli-runtime | UNKNOWN | golang |
| k8s.io/client-go | UNKNOWN | golang |
| k8s.io/component-base | UNKNOWN | golang |
| k8s.io/component-helpers | UNKNOWN | golang |
| k8s.io/klog/v2 | v2.140.0 | golang |
| k8s.io/kube-openapi | v0.0.0-20260721132016-d427ff9ee9ad | golang |
| k8s.io/kubectl | UNKNOWN | golang |
| k8s.io/kubernetes | v1.37.1 | golang |
| k8s.io/metrics | UNKNOWN | golang |
| k8s.io/streaming | UNKNOWN | golang |
| k8s.io/utils | v0.0.0-20260626114624-be93311217bd | golang |
| keyutils-libs | 1.6.3-1.amzn2023.0.2 | rpm |
| krb5-libs | 1.21.3-8.amzn2023.0.2 | rpm |
| kubectl | 1.37.1 | generic |
| less | 608-2.amzn2023.0.2 | rpm |
| libacl | 2.4.0-1.amzn2023.0.1 | rpm |
| libarchive | 3.7.4-2.amzn2023.0.4 | rpm |
| libassuan | 2.5.5-1.amzn2023.0.2 | rpm |
| libattr | 2.5.1-3.amzn2023.0.2 | rpm |
| libblkid | 2.37.4-1.amzn2023.0.6 | rpm |
| libcap | 2.73-1.amzn2023.0.7 | rpm |
| libcap-ng | 0.8.2-4.amzn2023.0.2 | rpm |
| libcbor | 0.7.0-3.amzn2023.0.2 | rpm |
| libcom_err | 1.46.5-2.amzn2023.0.2 | rpm |
| libcomps | 0.1.20 | pypi |
| libcomps | 0.1.20-1.amzn2023 | rpm |
| libcurl-minimal | 8.21.0-5.amzn2023.0.2 | rpm |
| libdb | 5.3.28-49.amzn2023.0.2 | rpm |
| libdnf | 0.69.0-8.amzn2023.0.8 | rpm |
| libeconf | 0.7.9-1.amzn2023.0.1 | rpm |
| libedit | 3.1-38.20210714cvs.amzn2023.0.2 | rpm |
| libfdisk | 2.37.4-1.amzn2023.0.6 | rpm |
| libffi | 3.4.4-1.amzn2023.0.1 | rpm |
| libfido2 | 1.10.0-2.amzn2023.0.2 | rpm |
| libgcc | 14.2.1-7.amzn2023.0.2 | rpm |
| libgcrypt | 1.10.2-1.amzn2023.0.3 | rpm |
| libgomp | 14.2.1-7.amzn2023.0.2 | rpm |
| libgpg-error | 1.42-1.amzn2023.0.2 | rpm |
| libidn2 | 2.3.2-1.amzn2023.0.5 | rpm |
| libmodulemd | 2.13.0-2.amzn2023.0.2 | rpm |
| libmount | 2.37.4-1.amzn2023.0.6 | rpm |
| libnghttp2 | 1.59.0-3.amzn2023.0.2 | rpm |
| libpsl | 0.21.5-1.amzn2023.0.1 | rpm |
| libpwquality | 1.4.4-6.amzn2023.0.2 | rpm |
| librepo | 1.14.5-2.amzn2023.0.2 | rpm |
| libreport-filesystem | 2.15.2-2.amzn2023.0.2 | rpm |
| libselinux | 3.4-5.amzn2023.0.2 | rpm |
| libsemanage | 3.4-5.amzn2023.0.2 | rpm |
| libsepol | 3.4-3.amzn2023.0.3 | rpm |
| libsigsegv | 2.13-2.amzn2023.0.2 | rpm |
| libsmartcols | 2.37.4-1.amzn2023.0.6 | rpm |
| libsolv | 0.7.22-1.amzn2023.0.4 | rpm |
| libstdc++ | 14.2.1-7.amzn2023.0.2 | rpm |
| libtasn1 | 4.19.0-1.amzn2023.0.6 | rpm |
| libunistring | 0.9.10-10.amzn2023.0.2 | rpm |
| libutempter | 1.2.1-4.amzn2023.0.2 | rpm |
| libuuid | 2.37.4-1.amzn2023.0.6 | rpm |
| libverto | 0.3.2-1.amzn2023.0.2 | rpm |
| libxcrypt | 4.4.33-7.amzn2023 | rpm |
| libxml2 | 2.10.4-1.amzn2023.0.21 | rpm |
| libyaml | 0.2.5-5.amzn2023.0.2 | rpm |
| libzstd | 1.5.5-1.amzn2023.0.1 | rpm |
| lua-libs | 5.4.4-3.amzn2023.0.2 | rpm |
| lz4-libs | 1.9.4-1.amzn2023.0.3 | rpm |
| mpfr | 4.1.0-7.amzn2023.0.2 | rpm |
| ncurses | 6.6-1.amzn2023.0.1 | rpm |
| ncurses-base | 6.6-1.amzn2023.0.1 | rpm |
| ncurses-libs | 6.6-1.amzn2023.0.1 | rpm |
| npth | 1.6-6.amzn2023.0.2 | rpm |
| oniguruma | 6.9.7.1-1.amzn2023.0.2 | rpm |
| openssh | 9.9p1-10.amzn2023.0.2 | rpm |
| openssh-clients | 9.9p1-10.amzn2023.0.2 | rpm |
| openssl-fips-provider-latest | 1:3.5.8-1.amzn2023.0.1 | rpm |
| openssl-libs | 1:3.5.8-1.amzn2023.0.1 | rpm |
| p11-kit | 0.24.1-2.amzn2023.0.3 | rpm |
| p11-kit-trust | 0.24.1-2.amzn2023.0.3 | rpm |
| pam | 1.5.1-8.amzn2023.0.8 | rpm |
| pcre2 | 10.40-1.amzn2023.0.4 | rpm |
| pcre2-syntax | 10.40-1.amzn2023.0.4 | rpm |
| perl-AutoLoader | 0:5.74-477.amzn2023.0.9 | rpm |
| perl-AutoLoader | 5.74-477.amzn2023.0.9 | rpm |
| perl-B | 0:1.80-477.amzn2023.0.9 | rpm |
| perl-B | 1.80-477.amzn2023.0.9 | rpm |
| perl-base | 0:2.27-477.amzn2023.0.9 | rpm |
| perl-base | 2.27-477.amzn2023.0.9 | rpm |
| perl-Carp | 1.50-458.amzn2023.0.2 | rpm |
| perl-Class-Struct | 0:0.66-477.amzn2023.0.9 | rpm |
| perl-Class-Struct | 0.66-477.amzn2023.0.9 | rpm |
| perl-constant | 1.33-459.amzn2023.0.2 | rpm |
| perl-Data-Dumper | 2.191-522.amzn2023.0.3 | rpm |
| perl-Digest | 1.20-1.amzn2023.0.2 | rpm |
| perl-Digest-MD5 | 2.59-521.amzn2023.0.2 | rpm |
| perl-DynaLoader | 0:1.47-477.amzn2023.0.9 | rpm |
| perl-DynaLoader | 1.47-477.amzn2023.0.9 | rpm |
| perl-Encode | 4:3.21-520.amzn2023.0.2 | rpm |
| perl-Errno | 0:1.30-477.amzn2023.0.9 | rpm |
| perl-Errno | 1.30-477.amzn2023.0.9 | rpm |
| perl-Error | 1:0.17030-2.amzn2023.0.1 | rpm |
| perl-Exporter | 5.79-520.amzn2023.0.1 | rpm |
| perl-Fcntl | 0:1.13-477.amzn2023.0.9 | rpm |
| perl-Fcntl | 1.13-477.amzn2023.0.9 | rpm |
| perl-File-Basename | 0:2.85-477.amzn2023.0.9 | rpm |
| perl-File-Basename | 2.85-477.amzn2023.0.9 | rpm |
| perl-File-Find | 0:1.37-477.amzn2023.0.9 | rpm |
| perl-File-Find | 1.37-477.amzn2023.0.9 | rpm |
| perl-File-Path | 2.18-2.amzn2023.0.2 | rpm |
| perl-File-stat | 0:1.09-477.amzn2023.0.9 | rpm |
| perl-File-stat | 1.09-477.amzn2023.0.9 | rpm |
| perl-File-Temp | 1:0.231.200-2.amzn2023.0.1 | rpm |
| perl-FileHandle | 0:2.03-477.amzn2023.0.9 | rpm |
| perl-FileHandle | 2.03-477.amzn2023.0.9 | rpm |
| perl-Getopt-Long | 1:2.58-521.amzn2023.0.1 | rpm |
| perl-Getopt-Std | 0:1.12-477.amzn2023.0.9 | rpm |
| perl-Getopt-Std | 1.12-477.amzn2023.0.9 | rpm |
| perl-Git | 2.50.1-1.amzn2023.0.1 | rpm |
| perl-HTTP-Tiny | 0.092-2.amzn2023.0.2 | rpm |
| perl-if | 0:0.60.800-477.amzn2023.0.9 | rpm |
| perl-if | 0.60.800-477.amzn2023.0.9 | rpm |
| perl-interpreter | 4:5.32.1-477.amzn2023.0.9 | rpm |
| perl-IO | 0:1.43-477.amzn2023.0.9 | rpm |
| perl-IO | 1.43-477.amzn2023.0.9 | rpm |
| perl-IO-Socket-IP | 0.43-522.amzn2023.0.1 | rpm |
| perl-IO-Socket-SSL | 2.075-1.amzn2023.0.3 | rpm |
| perl-IPC-Open3 | 0:1.21-477.amzn2023.0.9 | rpm |
| perl-IPC-Open3 | 1.21-477.amzn2023.0.9 | rpm |
| perl-lib | 0:0.65-477.amzn2023.0.9 | rpm |
| perl-lib | 0.65-477.amzn2023.0.9 | rpm |
| perl-libnet | 3.13-2.amzn2023.0.2 | rpm |
| perl-libs | 4:5.32.1-477.amzn2023.0.9 | rpm |
| perl-MIME-Base64 | 3.16-2.amzn2023.0.3 | rpm |
| perl-mro | 0:1.23-477.amzn2023.0.9 | rpm |
| perl-mro | 1.23-477.amzn2023.0.9 | rpm |
| perl-Net-SSLeay | 1.94-3.amzn2023.0.5 | rpm |
| perl-overload | 0:1.31-477.amzn2023.0.9 | rpm |
| perl-overload | 1.31-477.amzn2023.0.9 | rpm |
| perl-overloading | 0:0.02-477.amzn2023.0.9 | rpm |
| perl-overloading | 0.02-477.amzn2023.0.9 | rpm |
| perl-parent | 1:0.238-458.amzn2023.0.2 | rpm |
| perl-PathTools | 3.78-459.amzn2023.0.3 | rpm |
| perl-Pod-Escapes | 1:1.07-458.amzn2023.0.2 | rpm |
| perl-Pod-Perldoc | 3.28.01-459.amzn2023.0.3 | rpm |
| perl-Pod-Simple | 1:3.42-2.amzn2023.0.2 | rpm |
| perl-Pod-Usage | 4:2.01-2.amzn2023.0.2 | rpm |
| perl-podlators | 1:4.14-458.amzn2023.0.2 | rpm |
| perl-POSIX | 0:1.94-477.amzn2023.0.9 | rpm |
| perl-POSIX | 1.94-477.amzn2023.0.9 | rpm |
| perl-Scalar-List-Utils | 4:1.56-459.amzn2023.0.3 | rpm |
| perl-SelectSaver | 0:1.02-477.amzn2023.0.9 | rpm |
| perl-SelectSaver | 1.02-477.amzn2023.0.9 | rpm |
| perl-Socket | 4:2.032-1.amzn2023.0.4 | rpm |
| perl-Storable | 1:3.37-522.amzn2023.0.2 | rpm |
| perl-subs | 0:1.03-477.amzn2023.0.9 | rpm |
| perl-subs | 1.03-477.amzn2023.0.9 | rpm |
| perl-Symbol | 0:1.08-477.amzn2023.0.9 | rpm |
| perl-Symbol | 1.08-477.amzn2023.0.9 | rpm |
| perl-Term-ANSIColor | 5.01-459.amzn2023.0.2 | rpm |
| perl-Term-Cap | 1.17-458.amzn2023.0.2 | rpm |
| perl-TermReadKey | 2.38-9.amzn2023.0.3 | rpm |
| perl-Text-ParseWords | 3.30-458.amzn2023.0.2 | rpm |
| perl-Text-Tabs+Wrap | 2021.0726-1.amzn2023.0.1 | rpm |
| perl-Time-HiRes | 4:1.9764-460.amzn2023.0.3 | rpm |
| perl-Time-Local | 2:1.300-5.amzn2023.0.2 | rpm |
| perl-URI | 5.18-1.amzn2023.0.1 | rpm |
| perl-vars | 0:1.05-477.amzn2023.0.9 | rpm |
| perl-vars | 1.05-477.amzn2023.0.9 | rpm |
| popt | 1.18-6.amzn2023.0.2 | rpm |
| publicsuffix-list-dafsa | 20260116-1.amzn2023.0.1 | rpm |
| python3 | 3.9.25-1.amzn2023.0.9 | rpm |
| python3-dnf | 4.14.0-1.amzn2023.0.8 | rpm |
| python3-gpg | 1.23.2-182.amzn2023.0.1 | rpm |
| python3-hawkey | 0.69.0-8.amzn2023.0.8 | rpm |
| python3-libcomps | 0.1.20-1.amzn2023 | rpm |
| python3-libdnf | 0.69.0-8.amzn2023.0.8 | rpm |
| python3-libs | 3.9.25-1.amzn2023.0.9 | rpm |
| python3-pip-wheel | 21.3.1-2.amzn2023.0.21 | rpm |
| python3-rpm | 4.16.1.3-29.amzn2023.0.8 | rpm |
| python3-setuptools-wheel | 59.6.0-2.amzn2023.0.6 | rpm |
| readline | 8.1-2.amzn2023.0.2 | rpm |
| rpm | 4.16.1.3 | pypi |
| rpm | 4.16.1.3-29.amzn2023.0.8 | rpm |
| rpm-build-libs | 4.16.1.3-29.amzn2023.0.8 | rpm |
| rpm-libs | 4.16.1.3-29.amzn2023.0.8 | rpm |
| rpm-sign-libs | 4.16.1.3-29.amzn2023.0.8 | rpm |
| sed | 4.8-7.amzn2023.0.2 | rpm |
| setup | 2.13.7-3.amzn2023.0.2 | rpm |
| shadow-utils | 2:4.9-12.amzn2023.0.4 | rpm |
| sigs.k8s.io/json | v0.0.0-20250730193827-2d320260d730 | golang |
| sigs.k8s.io/kustomize/api | v0.21.1 | golang |
| sigs.k8s.io/kustomize/kustomize/v5 | v5.8.1 | golang |
| sigs.k8s.io/kustomize/kyaml | v0.21.1 | golang |
| sigs.k8s.io/randfill | v1.0.0 | golang |
| sigs.k8s.io/structured-merge-diff/v6 | v6.4.2 | golang |
| sigs.k8s.io/yaml | v1.6.0 | golang |
| sqlite-libs | 3.40.0-1.amzn2023.0.8 | rpm |
| stdlib | go1.26.8 | golang |
| system-release | 2023.12.20260930-0.amzn2023 | rpm |
| systemd-libs | 252.23-14.amzn2023 | rpm |
| tar | 2:1.34-1.amzn2023.0.4 | rpm |
| tzdata | 2026c-1.amzn2023.0.1 | rpm |
| util-linux | 2.37.4-1.amzn2023.0.6 | rpm |
| util-linux-core | 2.37.4-1.amzn2023.0.6 | rpm |
| xz-libs | 5.2.5-9.amzn2023.0.2 | rpm |
| yum | 4.14.0-1.amzn2023.0.8 | rpm |
| zlib | 1.2.11-33.amzn2023.0.6 | rpm |