Task #24351 - skopeo-1.17.0-1.20241116000358912112.pr2443.10.g52dac4fa/scan-results.js

back to task #24351
download
{
    "scan": {
        "analyzer-version-clippy": "1.82.0",
        "analyzer-version-cppcheck": "2.16.0",
        "analyzer-version-gcc": "14.2.1",
        "analyzer-version-gcc-analyzer": "14.2.1",
        "analyzer-version-shellcheck": "0.10.0",
        "analyzer-version-unicontrol": "0.0.2",
        "enabled-plugins": "clippy, cppcheck, gcc, shellcheck, unicontrol",
        "exit-code": 0,
        "host": "ip-172-16-1-22.us-west-2.compute.internal",
        "mock-config": "fedora-rawhide-x86_64",
        "project-name": "skopeo-1.17.0-1.20241116000358912112.pr2443.10.g52dac4fa",
        "store-results-to": "/tmp/tmpiu8qhljj/skopeo-1.17.0-1.20241116000358912112.pr2443.10.g52dac4fa.tar.xz",
        "time-created": "2024-11-16 00:17:29",
        "time-finished": "2024-11-16 00:20:47",
        "tool": "csmock",
        "tool-args": "'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'clippy,cppcheck,gcc,unicontrol,shellcheck' '-o' '/tmp/tmpiu8qhljj/skopeo-1.17.0-1.20241116000358912112.pr2443.10.g52dac4fa.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '/tmp/tmpiu8qhljj/skopeo-1.17.0-1.20241116000358912112.pr2443.10.g52dac4fa.src.rpm'",
        "tool-version": "csmock-3.7.1.20241107.094801.gb3f0f26.pr_192-1.el9"
    },
    "defects": [
        {
            "checker": "SHELLCHECK_WARNING",
            "cwe": 398,
            "language": "shell",
            "tool": "shellcheck",
            "hash_v1": "d53b814040fea3cf321083306c52401f250fa210",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "/usr/share/skopeo/test/system/010-inspect.bats",
                    "line": 39,
                    "column": 18,
                    "h_size": 21,
                    "event": "warning[SC2038]",
                    "message": "Use 'find .. -print0 | xargs -0 ..' or 'find .. -exec .. +' to allow non-alphanumeric filenames.",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   37|       # but not the digest of the config blob ($config_digest), if any.",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   38|       layers=$(jq -r '.Layers' <<<\"$inspect_local\")",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   39|->     for sha in $(find $workdir -type f | xargs -l1 basename | grep -E '^[0-9a-f]{64}$'); do",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   40|           if [ \"sha256:$sha\" != \"$config_digest\" ]; then",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   41|               expect_output --from=\"$layers\" --substring \"sha256:$sha\" \\",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "SHELLCHECK_WARNING",
            "cwe": 88,
            "language": "shell",
            "tool": "shellcheck",
            "hash_v1": "bfdcccd65b71797e0e613e195c9215ce52b98233",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "/usr/share/skopeo/test/system/010-inspect.bats",
                    "line": 86,
                    "column": 19,
                    "h_size": 17,
                    "event": "error[SC2068]",
                    "message": "Double quote array expansions to avoid re-splitting elements.",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   84|       check_array=(FGC=f31 DISTTAG=f31container)",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   85|       remote=$(jq '.Env[]' <<<\"$inspect_remote\")",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   86|->     for substr in ${check_array[@]}; do",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   87|           expect_output --from=\"$remote\" --substring \"$substr\"",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   88|       done",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "SHELLCHECK_WARNING",
            "cwe": 571,
            "language": "shell",
            "tool": "shellcheck",
            "hash_v1": "17315d755c7659a654f77d60b1ce841f3a17253f",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "/usr/share/skopeo/test/system/020-copy.bats",
                    "line": 56,
                    "column": 11,
                    "h_size": 5,
                    "event": "warning[SC2155]",
                    "message": "Declare and assign separately to avoid masking return values.",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   54|   ",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   55|       # zstd magic number",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   56|->     local magic=$(printf \"\\x28\\xb5\\x2f\\xfd\")",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   57|   ",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   58|       # Check there is at least one file that has the zstd magic number as the first 4 bytes",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "SHELLCHECK_WARNING",
            "cwe": 156,
            "language": "shell",
            "tool": "shellcheck",
            "hash_v1": "1e44341b41b33c911572a9a29992eaac7510b473",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "/usr/share/skopeo/test/system/050-signing.bats",
                    "line": 20,
                    "column": 10,
                    "h_size": 19,
                    "event": "warning[SC2046]",
                    "message": "Quote this to prevent word splitting.",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   18|   ",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   19|       PASSPHRASE_FILE_WRONG=$TESTDIR/passphrase-file-wrong",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   20|->     echo $(random_string 10) > $PASSPHRASE_FILE_WRONG",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   21|   ",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   22|       # gpg on f30 needs this, otherwise:",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "SHELLCHECK_WARNING",
            "cwe": 563,
            "language": "shell",
            "tool": "shellcheck",
            "hash_v1": "56cf55f9c7a0c8f69c768b1b4fab990db917519d",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "/usr/share/skopeo/test/system/050-signing.bats",
                    "line": 117,
                    "column": 25,
                    "h_size": 8,
                    "event": "warning[SC2034]",
                    "message": "comments appears unused. Verify use (or export if used externally).",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  115|       # Push a bunch of images. Do so *without* --policy flag; this lets us",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  116|       # sign or not, creating images that will or won't conform to policy.",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  117|->     while read path sig comments; do",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  118|           local sign_opt=",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  119|           if [[ $sig != '-' ]]; then",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "SHELLCHECK_WARNING",
            "cwe": 398,
            "language": "shell",
            "tool": "shellcheck",
            "hash_v1": "654797aefabd0483cbbd2e938f75e0fa4e7e9980",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "/usr/share/skopeo/test/system/050-signing.bats",
                    "line": 210,
                    "column": 5,
                    "h_size": 2,
                    "event": "warning[SC2010]",
                    "message": "Don't use ls | grep. Use a glob or a for loop with a condition to allow non-alphanumeric filenames.",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  208|                   docker://localhost:5000/myns/alice:signed \\",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  209|                   dir:$TESTDIR/busybox-unsigned",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  210|->     ls $TESTDIR/busybox-signed | grep \"signature\"",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  211|       [ -z \"$(ls $TESTDIR/busybox-unsigned | grep \"signature\")\" ]",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  212|   }",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "SHELLCHECK_WARNING",
            "cwe": 398,
            "language": "shell",
            "tool": "shellcheck",
            "hash_v1": "1a782b3882855765925d3aaa5c4b1c0a3616299e",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "/usr/share/skopeo/test/system/050-signing.bats",
                    "line": 211,
                    "column": 13,
                    "h_size": 2,
                    "event": "warning[SC2010]",
                    "message": "Don't use ls | grep. Use a glob or a for loop with a condition to allow non-alphanumeric filenames.",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  209|                   dir:$TESTDIR/busybox-unsigned",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  210|       ls $TESTDIR/busybox-signed | grep \"signature\"",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  211|->     [ -z \"$(ls $TESTDIR/busybox-unsigned | grep \"signature\")\" ]",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  212|   }",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  213|   ",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "SHELLCHECK_WARNING",
            "cwe": 670,
            "language": "shell",
            "tool": "shellcheck",
            "hash_v1": "29194a35d29c3eb71ebf455519bab5fc8ca27f65",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "/usr/share/skopeo/test/system/helpers.bash",
                    "line": 4,
                    "column": 46,
                    "h_size": 14,
                    "event": "warning[SC2128]",
                    "message": "Expanding an array without an index only gives the first element.",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "    2|   ",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "    3|   # Directory containing system test sources",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "    4|-> TEST_SOURCE_DIR=${TEST_SOURCE_DIR:-$(dirname ${BASH_SOURCE})}",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "    5|   ",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "    6|   # Skopeo executable",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "SHELLCHECK_WARNING",
            "cwe": 457,
            "language": "shell",
            "tool": "shellcheck",
            "hash_v1": "16e58efcb7f2bc70ed3792ad905dd784b49b618b",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "/usr/share/skopeo/test/system/helpers.bash",
                    "line": 88,
                    "column": 11,
                    "h_size": 7,
                    "event": "warning[SC2154]",
                    "message": "status is referenced but not assigned.",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   86|           echo \"$output\"",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   87|       fi",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   88|->     if [ \"$status\" -ne 0 ]; then",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   89|           echo -n \"[ rc=$status \";",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   90|           if [ -n \"$expected_rc\" ]; then",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "SHELLCHECK_WARNING",
            "cwe": 477,
            "language": "shell",
            "tool": "shellcheck",
            "hash_v1": "3cd8248fce9fe405420548e7e89b2cf41484b594",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "/usr/share/skopeo/test/system/helpers.bash",
                    "line": 100,
                    "column": 28,
                    "h_size": 2,
                    "event": "warning[SC2166]",
                    "message": "Prefer [ p ] || [ q ] as [ p -o q ] is not well defined.",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   98|       fi",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   99|   ",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  100|->     if [ \"$status\" -eq 124 -o \"$status\" -eq 137 ]; then",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  101|           # FIXME: 'timeout -v' requires coreutils-8.29; travis seems to have",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  102|           #        an older version. If/when travis updates, please add -v",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "SHELLCHECK_WARNING",
            "cwe": 571,
            "language": "shell",
            "tool": "shellcheck",
            "hash_v1": "686a9c69db0b277e099efc8d8d9db3c45bc57e41",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "/usr/share/skopeo/test/system/helpers.bash",
                    "line": 174,
                    "column": 15,
                    "h_size": 5,
                    "event": "warning[SC2155]",
                    "message": "Declare and assign separately to avoid masking return values.",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  172|       local opt",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  173|       for opt; do",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  174|->         local value=$(expr \"$opt\" : '[^=]*=\\(.*\\)')",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  175|           case \"$opt\" in",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  176|               --from=*)       actual=\"$value\";   shift;;",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "SHELLCHECK_WARNING",
            "cwe": 457,
            "language": "shell",
            "tool": "shellcheck",
            "hash_v1": "f80d287111f3c3af78b8ed1882320545f068785b",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "/usr/share/skopeo/test/system/helpers.bash",
                    "line": 226,
                    "column": 19,
                    "h_size": 12,
                    "event": "warning[SC2154]",
                    "message": "lines is referenced but not assigned (did you mean 'line'?).",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  224|       local testname=\"${2:-${MOST_RECENT_SKOPEO_COMMAND:-[no test name given]}}\"",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  225|   ",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  226|->     local actual=\"${#lines[@]}\"",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  227|       if [ \"$actual\" -eq \"$expect\" ]; then",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  228|           return",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "SHELLCHECK_WARNING",
            "cwe": 571,
            "language": "shell",
            "tool": "shellcheck",
            "hash_v1": "686a9c69db0b277e099efc8d8d9db3c45bc57e41",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "/usr/share/skopeo/test/system/helpers.bash",
                    "line": 273,
                    "column": 15,
                    "h_size": 5,
                    "event": "warning[SC2155]",
                    "message": "Declare and assign separately to avoid masking return values.",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  271|       local opt",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  272|       for opt; do",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  273|->         local value=$(expr \"$opt\" : '[^=]*=\\(.*\\)')",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  274|           case \"$opt\" in",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  275|               --port=*)           port=\"$value\";          shift;;",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "SHELLCHECK_WARNING",
            "cwe": 140,
            "language": "shell",
            "tool": "shellcheck",
            "hash_v1": "2c601bbece53ccc56abaeada8015541d95758373",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "/usr/share/skopeo/test/system/helpers.bash",
                    "line": 293,
                    "column": 27,
                    "h_size": 8,
                    "event": "warning[SC2206]",
                    "message": "Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  291|       mkdir -p $AUTHDIR",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  292|   ",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  293|->     local -a reg_args=(-v $AUTHDIR:/auth:Z -p $port:5000)",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  294|       if [[ \"$enable_delete\" == \"true\" ]]; then",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  295|           reg_args+=( -e REGISTRY_STORAGE_DELETE_ENABLED=true)",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "SHELLCHECK_WARNING",
            "cwe": 140,
            "language": "shell",
            "tool": "shellcheck",
            "hash_v1": "2c601bbece53ccc56abaeada8015541d95758373",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "/usr/share/skopeo/test/system/helpers.bash",
                    "line": 293,
                    "column": 47,
                    "h_size": 5,
                    "event": "warning[SC2206]",
                    "message": "Quote to prevent word splitting/globbing, or split robustly with mapfile or read -a.",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  291|       mkdir -p $AUTHDIR",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  292|   ",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  293|->     local -a reg_args=(-v $AUTHDIR:/auth:Z -p $port:5000)",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  294|       if [[ \"$enable_delete\" == \"true\" ]]; then",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  295|           reg_args+=( -e REGISTRY_STORAGE_DELETE_ENABLED=true)",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "SHELLCHECK_WARNING",
            "language": "shell",
            "tool": "shellcheck",
            "hash_v1": "46097b63ab1b604a0dd104b67f14557783cc9057",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "/usr/share/skopeo/test/system/make-noarch-manifest",
                    "line": 14,
                    "column": 30,
                    "h_size": 11,
                    "event": "warning[SC3020]",
                    "message": "In POSIX sh, &> is undefined.",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   12|   ",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   13|   # (In case older image exists from a prior run)",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   14|-> buildah rmi $imgname:$imgtag &>/dev/null || true",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   15|   ",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   16|   #",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "GCC_ANALYZER_WARNING",
            "cwe": 775,
            "language": "c/c++",
            "tool": "gcc-analyzer",
            "hash_v1": "1fe8f37cb403a2e19bb2cab76b9b77effa7d9c20",
            "key_event_idx": 1,
            "events": [
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 0,
                    "event": "scope_hint",
                    "message": "In function ‘parse_proc_stringlist’",
                    "verbosity_level": 1
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 118,
                    "column": 20,
                    "event": "warning[-Wanalyzer-fd-leak]",
                    "message": "leak of file descriptor ‘open(list, 0)’",
                    "verbosity_level": 0
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 275,
                    "column": 12,
                    "event": "note",
                    "message": "(1) entry to ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 279,
                    "column": 16,
                    "event": "note",
                    "message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 103,
                    "column": 15,
                    "event": "note",
                    "message": "(3) entry to ‘parse_proc_stringlist’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 108,
                    "column": 14,
                    "event": "note",
                    "message": "(4) opened here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 109,
                    "column": 12,
                    "event": "note",
                    "message": "(5) assuming ‘open(list, 0)’ is a valid file descriptor (>= 0)",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 109,
                    "column": 12,
                    "event": "note",
                    "message": "(6) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "cc1",
                    "line": 0,
                    "event": "note",
                    "message": "(7) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 117,
                    "column": 27,
                    "event": "note",
                    "message": "(8) when ‘realloc’ fails",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 118,
                    "column": 20,
                    "event": "note",
                    "message": "(9) ‘open(list, 0)’ leaks here; was opened at (4)",
                    "verbosity_level": 2
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  116|   \t\tnew_size = used + BUFSTEP;",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  117|   \t\tnew_buf = realloc(buf, new_size);",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  118|-> \t\tif (new_buf == NULL) {",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  119|   \t\t\tfree(buf);",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  120|   \t\t\tfprintf(stderr, \"realloc(%ld): out of memory\\n\", (long)(size + BUFSTEP));",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "GCC_ANALYZER_WARNING",
            "cwe": 775,
            "language": "c/c++",
            "tool": "gcc-analyzer",
            "hash_v1": "ae8e657eb85c8cb2b577b11c00d5adcc6644dd5f",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 125,
                    "column": 28,
                    "event": "warning[-Wanalyzer-fd-leak]",
                    "message": "leak of file descriptor ‘open(list, 0)’",
                    "verbosity_level": 0
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 275,
                    "column": 12,
                    "event": "note",
                    "message": "(1) entry to ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 279,
                    "column": 16,
                    "event": "note",
                    "message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 103,
                    "column": 15,
                    "event": "note",
                    "message": "(3) entry to ‘parse_proc_stringlist’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 108,
                    "column": 14,
                    "event": "note",
                    "message": "(4) opened here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 109,
                    "column": 12,
                    "event": "note",
                    "message": "(5) assuming ‘open(list, 0)’ is a valid file descriptor (>= 0)",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 109,
                    "column": 12,
                    "event": "note",
                    "message": "(6) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "cc1",
                    "line": 0,
                    "event": "note",
                    "message": "(7) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 117,
                    "column": 27,
                    "event": "note",
                    "message": "(8) when ‘realloc’ succeeds, moving buffer",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 118,
                    "column": 20,
                    "event": "note",
                    "message": "(9) following ‘false’ branch (when ‘new_buf’ is non-NULL)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 125,
                    "column": 28,
                    "event": "note",
                    "message": "(10) ...to here (11) ‘open(list, 0)’ leaks here; was opened at (4)",
                    "verbosity_level": 2
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  123|   \t\tbuf = new_buf;",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  124|   \t\tsize = new_size;",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  125|-> \t\tmemset(buf + used, '\\0', size - used);",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  126|   \t\tn = read(fd, buf + used, size - used - 1);",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  127|   \t\tif (n < 0) {",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "GCC_ANALYZER_WARNING",
            "cwe": 401,
            "language": "c/c++",
            "tool": "gcc-analyzer",
            "hash_v1": "771b4f1daa37ad4b188b6c4720aa034d70c17deb",
            "key_event_idx": 1,
            "events": [
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 0,
                    "event": "scope_hint",
                    "message": "In function ‘containers_reexec’",
                    "verbosity_level": 1
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 125,
                    "column": 28,
                    "event": "warning[-Wanalyzer-malloc-leak]",
                    "message": "leak of ‘parse_proc_stringlist(\"/proc/self/cmdline\")’",
                    "verbosity_level": 0
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 300,
                    "column": 6,
                    "event": "note",
                    "message": "(1) entry to ‘_containers_unshare’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 305,
                    "column": 17,
                    "event": "note",
                    "message": "(2) calling ‘_containers_unshare_parse_envint’ from ‘_containers_unshare’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 59,
                    "column": 12,
                    "event": "note",
                    "message": "(3) entry to ‘_containers_unshare_parse_envint’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 64,
                    "column": 12,
                    "event": "note",
                    "message": "(4) following ‘false’ branch (when ‘p’ is non-NULL)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 67,
                    "column": 11,
                    "event": "note",
                    "message": "(5) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 69,
                    "column": 12,
                    "event": "note",
                    "message": "(6) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 73,
                    "column": 9,
                    "event": "note",
                    "message": "(7) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 305,
                    "column": 17,
                    "event": "note",
                    "message": "(8) returning to ‘_containers_unshare’ from ‘_containers_unshare_parse_envint’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 306,
                    "column": 12,
                    "event": "note",
                    "message": "(9) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 309,
                    "column": 20,
                    "event": "note",
                    "message": "(10) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 318,
                    "column": 12,
                    "event": "note",
                    "message": "(11) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 327,
                    "column": 22,
                    "event": "note",
                    "message": "(12) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 328,
                    "column": 12,
                    "event": "note",
                    "message": "(13) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 336,
                    "column": 15,
                    "event": "note",
                    "message": "(14) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 337,
                    "column": 12,
                    "event": "note",
                    "message": "(15) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 343,
                    "column": 16,
                    "event": "note",
                    "message": "(16) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 344,
                    "column": 12,
                    "event": "note",
                    "message": "(17) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 350,
                    "column": 16,
                    "event": "note",
                    "message": "(18) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 351,
                    "column": 12,
                    "event": "note",
                    "message": "(19) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 357,
                    "column": 12,
                    "event": "note",
                    "message": "(20) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 373,
                    "column": 13,
                    "event": "note",
                    "message": "(21) calling ‘containers_reexec’ from ‘_containers_unshare’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 275,
                    "column": 12,
                    "event": "note",
                    "message": "(22) entry to ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 279,
                    "column": 16,
                    "event": "note",
                    "message": "(23) calling ‘parse_proc_stringlist’ from ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 103,
                    "column": 15,
                    "event": "note",
                    "message": "(24) entry to ‘parse_proc_stringlist’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 109,
                    "column": 12,
                    "event": "note",
                    "message": "(25) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "cc1",
                    "line": 0,
                    "event": "note",
                    "message": "(26) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 117,
                    "column": 27,
                    "event": "note",
                    "message": "(27) when ‘realloc’ succeeds, moving buffer",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 118,
                    "column": 20,
                    "event": "note",
                    "message": "(28) following ‘false’ branch (when ‘new_buf’ is non-NULL)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 125,
                    "column": 28,
                    "event": "note",
                    "message": "(29) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 127,
                    "column": 20,
                    "event": "note",
                    "message": "(30) following ‘false’ branch (when ‘n >= 0’)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 131,
                    "column": 20,
                    "event": "note",
                    "message": "(31) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 131,
                    "column": 20,
                    "event": "note",
                    "message": "(32) following ‘true’ branch (when ‘n == 0’)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 136,
                    "column": 9,
                    "event": "note",
                    "message": "(33) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 138,
                    "column": 23,
                    "event": "note",
                    "message": "(34) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 143,
                    "column": 32,
                    "event": "note",
                    "message": "(35) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 143,
                    "column": 15,
                    "event": "note",
                    "message": "(36) allocated here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 144,
                    "column": 12,
                    "event": "note",
                    "message": "(37) assuming ‘ret’ is non-NULL",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 144,
                    "column": 12,
                    "event": "note",
                    "message": "(38) following ‘false’ branch (when ‘ret’ is non-NULL)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "cc1",
                    "line": 0,
                    "event": "note",
                    "message": "(39) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 149,
                    "column": 23,
                    "event": "note",
                    "message": "(40) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 154,
                    "column": 12,
                    "event": "note",
                    "message": "(41) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 279,
                    "column": 16,
                    "event": "note",
                    "message": "(42) returning to ‘containers_reexec’ from ‘parse_proc_stringlist’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 280,
                    "column": 12,
                    "event": "note",
                    "message": "(43) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 284,
                    "column": 19,
                    "event": "note",
                    "message": "(44) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 125,
                    "column": 28,
                    "event": "note",
                    "message": "(45) ‘parse_proc_stringlist(\"/proc/self/cmdline\")’ leaks here; was allocated at (36)",
                    "verbosity_level": 2
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  123|   \t\tbuf = new_buf;",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  124|   \t\tsize = new_size;",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  125|-> \t\tmemset(buf + used, '\\0', size - used);",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  126|   \t\tn = read(fd, buf + used, size - used - 1);",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  127|   \t\tif (n < 0) {",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "GCC_ANALYZER_WARNING",
            "cwe": 401,
            "language": "c/c++",
            "tool": "gcc-analyzer",
            "hash_v1": "134514f80f59fe556f51004b83007f5ab0b0a149",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 128,
                    "column": 25,
                    "event": "warning[-Wanalyzer-malloc-leak]",
                    "message": "leak of ‘buf’",
                    "verbosity_level": 0
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 275,
                    "column": 12,
                    "event": "note",
                    "message": "(1) entry to ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 279,
                    "column": 16,
                    "event": "note",
                    "message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 103,
                    "column": 15,
                    "event": "note",
                    "message": "(3) entry to ‘parse_proc_stringlist’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 109,
                    "column": 12,
                    "event": "note",
                    "message": "(4) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "cc1",
                    "line": 0,
                    "event": "note",
                    "message": "(5) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 117,
                    "column": 27,
                    "event": "note",
                    "message": "(6) allocated here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 117,
                    "column": 27,
                    "event": "note",
                    "message": "(7) when ‘realloc’ succeeds, moving buffer",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 118,
                    "column": 20,
                    "event": "note",
                    "message": "(8) following ‘false’ branch (when ‘new_buf’ is non-NULL)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 125,
                    "column": 28,
                    "event": "note",
                    "message": "(9) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 127,
                    "column": 20,
                    "event": "note",
                    "message": "(10) following ‘false’ branch (when ‘n >= 0’)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 131,
                    "column": 20,
                    "event": "note",
                    "message": "(11) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 131,
                    "column": 20,
                    "event": "note",
                    "message": "(12) following ‘false’ branch (when ‘n != 0’)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 134,
                    "column": 22,
                    "event": "note",
                    "message": "(13) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 117,
                    "column": 27,
                    "event": "note",
                    "message": "(14) when ‘realloc’ succeeds, without moving buffer",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 118,
                    "column": 20,
                    "event": "note",
                    "message": "(15) following ‘false’ branch (when ‘new_buf’ is non-NULL)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 125,
                    "column": 28,
                    "event": "note",
                    "message": "(16) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 128,
                    "column": 25,
                    "event": "note",
                    "message": "(17) ‘buf’ leaks here; was allocated at (6)",
                    "verbosity_level": 2
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  126|   \t\tn = read(fd, buf + used, size - used - 1);",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  127|   \t\tif (n < 0) {",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  128|-> \t\t\tfprintf(stderr, \"read(): %m\\n\");",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  129|   \t\t\treturn NULL;",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  130|   \t\t}",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "GCC_ANALYZER_WARNING",
            "cwe": 401,
            "language": "c/c++",
            "tool": "gcc-analyzer",
            "hash_v1": "bc9bb87188e74fca7a70ddbd4860ae5a1b825817",
            "key_event_idx": 1,
            "events": [
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 0,
                    "event": "scope_hint",
                    "message": "In function ‘parse_proc_stringlist’",
                    "verbosity_level": 1
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 128,
                    "column": 25,
                    "event": "warning[-Wanalyzer-malloc-leak]",
                    "message": "leak of ‘new_buf’",
                    "verbosity_level": 0
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 275,
                    "column": 12,
                    "event": "note",
                    "message": "(1) entry to ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 279,
                    "column": 16,
                    "event": "note",
                    "message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 103,
                    "column": 15,
                    "event": "note",
                    "message": "(3) entry to ‘parse_proc_stringlist’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 109,
                    "column": 12,
                    "event": "note",
                    "message": "(4) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "cc1",
                    "line": 0,
                    "event": "note",
                    "message": "(5) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 117,
                    "column": 27,
                    "event": "note",
                    "message": "(6) allocated here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 117,
                    "column": 27,
                    "event": "note",
                    "message": "(7) when ‘realloc’ succeeds, moving buffer",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 118,
                    "column": 20,
                    "event": "note",
                    "message": "(8) following ‘false’ branch (when ‘new_buf’ is non-NULL)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 125,
                    "column": 28,
                    "event": "note",
                    "message": "(9) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 128,
                    "column": 25,
                    "event": "note",
                    "message": "(10) ‘new_buf’ leaks here; was allocated at (6)",
                    "verbosity_level": 2
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  126|   \t\tn = read(fd, buf + used, size - used - 1);",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  127|   \t\tif (n < 0) {",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  128|-> \t\t\tfprintf(stderr, \"read(): %m\\n\");",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  129|   \t\t\treturn NULL;",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  130|   \t\t}",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "GCC_ANALYZER_WARNING",
            "cwe": 401,
            "language": "c/c++",
            "tool": "gcc-analyzer",
            "hash_v1": "feac06a6b664ccdee61d983b1d83e6d826428fec",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 154,
                    "column": 16,
                    "event": "warning[-Wanalyzer-malloc-leak]",
                    "message": "leak of ‘buf’",
                    "verbosity_level": 0
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 275,
                    "column": 12,
                    "event": "note",
                    "message": "(1) entry to ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 279,
                    "column": 16,
                    "event": "note",
                    "message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 103,
                    "column": 15,
                    "event": "note",
                    "message": "(3) entry to ‘parse_proc_stringlist’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 109,
                    "column": 12,
                    "event": "note",
                    "message": "(4) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "cc1",
                    "line": 0,
                    "event": "note",
                    "message": "(5) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 117,
                    "column": 27,
                    "event": "note",
                    "message": "(6) allocated here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 117,
                    "column": 27,
                    "event": "note",
                    "message": "(7) when ‘realloc’ succeeds, moving buffer",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 118,
                    "column": 20,
                    "event": "note",
                    "message": "(8) following ‘false’ branch (when ‘new_buf’ is non-NULL)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 125,
                    "column": 28,
                    "event": "note",
                    "message": "(9) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 127,
                    "column": 20,
                    "event": "note",
                    "message": "(10) following ‘false’ branch (when ‘n >= 0’)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 131,
                    "column": 20,
                    "event": "note",
                    "message": "(11) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 131,
                    "column": 20,
                    "event": "note",
                    "message": "(12) following ‘false’ branch (when ‘n != 0’)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 134,
                    "column": 22,
                    "event": "note",
                    "message": "(13) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 117,
                    "column": 27,
                    "event": "note",
                    "message": "(14) when ‘realloc’ succeeds, without moving buffer",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 118,
                    "column": 20,
                    "event": "note",
                    "message": "(15) following ‘false’ branch (when ‘new_buf’ is non-NULL)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 125,
                    "column": 28,
                    "event": "note",
                    "message": "(16) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 127,
                    "column": 20,
                    "event": "note",
                    "message": "(17) following ‘false’ branch (when ‘n >= 0’)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 131,
                    "column": 20,
                    "event": "note",
                    "message": "(18) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 144,
                    "column": 12,
                    "event": "note",
                    "message": "(19) following ‘false’ branch (when ‘ret’ is non-NULL)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "cc1",
                    "line": 0,
                    "event": "note",
                    "message": "(20) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 149,
                    "column": 23,
                    "event": "note",
                    "message": "(21) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 154,
                    "column": 12,
                    "event": "note",
                    "message": "(22) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 154,
                    "column": 16,
                    "event": "note",
                    "message": "(23) ‘buf’ leaks here; was allocated at (6)",
                    "verbosity_level": 2
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  152|   \t\t}",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  153|   \t}",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  154|-> \tret[i] = NULL;",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  155|   \treturn ret;",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  156|   }",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "GCC_ANALYZER_WARNING",
            "cwe": 401,
            "language": "c/c++",
            "tool": "gcc-analyzer",
            "hash_v1": "b03d373b833e09ae66ac245c10629c16a84332ad",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 154,
                    "column": 16,
                    "event": "warning[-Wanalyzer-malloc-leak]",
                    "message": "leak of ‘new_buf’",
                    "verbosity_level": 0
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 275,
                    "column": 12,
                    "event": "note",
                    "message": "(1) entry to ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 279,
                    "column": 16,
                    "event": "note",
                    "message": "(2) calling ‘parse_proc_stringlist’ from ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 103,
                    "column": 15,
                    "event": "note",
                    "message": "(3) entry to ‘parse_proc_stringlist’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 109,
                    "column": 12,
                    "event": "note",
                    "message": "(4) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "cc1",
                    "line": 0,
                    "event": "note",
                    "message": "(5) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 117,
                    "column": 27,
                    "event": "note",
                    "message": "(6) allocated here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 117,
                    "column": 27,
                    "event": "note",
                    "message": "(7) when ‘realloc’ succeeds, moving buffer",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 118,
                    "column": 20,
                    "event": "note",
                    "message": "(8) following ‘false’ branch (when ‘new_buf’ is non-NULL)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 125,
                    "column": 28,
                    "event": "note",
                    "message": "(9) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 127,
                    "column": 20,
                    "event": "note",
                    "message": "(10) following ‘false’ branch (when ‘n >= 0’)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 131,
                    "column": 20,
                    "event": "note",
                    "message": "(11) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 131,
                    "column": 20,
                    "event": "note",
                    "message": "(12) following ‘true’ branch (when ‘n == 0’)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 136,
                    "column": 9,
                    "event": "note",
                    "message": "(13) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 138,
                    "column": 23,
                    "event": "note",
                    "message": "(14) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 143,
                    "column": 32,
                    "event": "note",
                    "message": "(15) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 144,
                    "column": 12,
                    "event": "note",
                    "message": "(16) following ‘false’ branch (when ‘ret’ is non-NULL)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "cc1",
                    "line": 0,
                    "event": "note",
                    "message": "(17) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 149,
                    "column": 23,
                    "event": "note",
                    "message": "(18) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 154,
                    "column": 12,
                    "event": "note",
                    "message": "(19) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 154,
                    "column": 16,
                    "event": "note",
                    "message": "(20) ‘new_buf’ leaks here; was allocated at (6)",
                    "verbosity_level": 2
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  152|   \t\t}",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  153|   \t}",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  154|-> \tret[i] = NULL;",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  155|   \treturn ret;",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  156|   }",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "GCC_ANALYZER_WARNING",
            "cwe": 401,
            "language": "c/c++",
            "tool": "gcc-analyzer",
            "hash_v1": "d920c6555916426fafb2bc64ed51651c57e808ba",
            "key_event_idx": 1,
            "events": [
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 0,
                    "event": "scope_hint",
                    "message": "In function ‘containers_reexec’",
                    "verbosity_level": 1
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 291,
                    "column": 12,
                    "event": "warning[-Wanalyzer-malloc-leak]",
                    "message": "leak of ‘parse_proc_stringlist(\"/proc/self/cmdline\")’",
                    "verbosity_level": 0
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 300,
                    "column": 6,
                    "event": "note",
                    "message": "(1) entry to ‘_containers_unshare’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 305,
                    "column": 17,
                    "event": "note",
                    "message": "(2) calling ‘_containers_unshare_parse_envint’ from ‘_containers_unshare’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 59,
                    "column": 12,
                    "event": "note",
                    "message": "(3) entry to ‘_containers_unshare_parse_envint’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 64,
                    "column": 12,
                    "event": "note",
                    "message": "(4) following ‘false’ branch (when ‘p’ is non-NULL)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 67,
                    "column": 11,
                    "event": "note",
                    "message": "(5) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 69,
                    "column": 12,
                    "event": "note",
                    "message": "(6) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 73,
                    "column": 9,
                    "event": "note",
                    "message": "(7) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 305,
                    "column": 17,
                    "event": "note",
                    "message": "(8) returning to ‘_containers_unshare’ from ‘_containers_unshare_parse_envint’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 306,
                    "column": 12,
                    "event": "note",
                    "message": "(9) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 309,
                    "column": 20,
                    "event": "note",
                    "message": "(10) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 318,
                    "column": 12,
                    "event": "note",
                    "message": "(11) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 327,
                    "column": 22,
                    "event": "note",
                    "message": "(12) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 328,
                    "column": 12,
                    "event": "note",
                    "message": "(13) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 336,
                    "column": 15,
                    "event": "note",
                    "message": "(14) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 337,
                    "column": 12,
                    "event": "note",
                    "message": "(15) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 343,
                    "column": 16,
                    "event": "note",
                    "message": "(16) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 344,
                    "column": 12,
                    "event": "note",
                    "message": "(17) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 350,
                    "column": 16,
                    "event": "note",
                    "message": "(18) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 351,
                    "column": 12,
                    "event": "note",
                    "message": "(19) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 357,
                    "column": 12,
                    "event": "note",
                    "message": "(20) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 373,
                    "column": 13,
                    "event": "note",
                    "message": "(21) calling ‘containers_reexec’ from ‘_containers_unshare’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 275,
                    "column": 12,
                    "event": "note",
                    "message": "(22) entry to ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 279,
                    "column": 16,
                    "event": "note",
                    "message": "(23) calling ‘parse_proc_stringlist’ from ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 103,
                    "column": 15,
                    "event": "note",
                    "message": "(24) entry to ‘parse_proc_stringlist’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 109,
                    "column": 12,
                    "event": "note",
                    "message": "(25) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "cc1",
                    "line": 0,
                    "event": "note",
                    "message": "(26) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 117,
                    "column": 27,
                    "event": "note",
                    "message": "(27) when ‘realloc’ succeeds, moving buffer",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 118,
                    "column": 20,
                    "event": "note",
                    "message": "(28) following ‘false’ branch (when ‘new_buf’ is non-NULL)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 125,
                    "column": 28,
                    "event": "note",
                    "message": "(29) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 127,
                    "column": 20,
                    "event": "note",
                    "message": "(30) following ‘false’ branch (when ‘n >= 0’)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 131,
                    "column": 20,
                    "event": "note",
                    "message": "(31) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 131,
                    "column": 20,
                    "event": "note",
                    "message": "(32) following ‘true’ branch (when ‘n == 0’)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 136,
                    "column": 9,
                    "event": "note",
                    "message": "(33) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 138,
                    "column": 23,
                    "event": "note",
                    "message": "(34) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 143,
                    "column": 32,
                    "event": "note",
                    "message": "(35) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 143,
                    "column": 15,
                    "event": "note",
                    "message": "(36) allocated here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 144,
                    "column": 12,
                    "event": "note",
                    "message": "(37) assuming ‘ret’ is non-NULL",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 144,
                    "column": 12,
                    "event": "note",
                    "message": "(38) following ‘false’ branch (when ‘ret’ is non-NULL)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "cc1",
                    "line": 0,
                    "event": "note",
                    "message": "(39) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 149,
                    "column": 23,
                    "event": "note",
                    "message": "(40) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 154,
                    "column": 12,
                    "event": "note",
                    "message": "(41) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 279,
                    "column": 16,
                    "event": "note",
                    "message": "(42) returning to ‘containers_reexec’ from ‘parse_proc_stringlist’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 280,
                    "column": 12,
                    "event": "note",
                    "message": "(43) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 284,
                    "column": 19,
                    "event": "note",
                    "message": "(44) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 287,
                    "column": 22,
                    "event": "note",
                    "message": "(45) calling ‘copy_self_proc_exe’ from ‘containers_reexec’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 220,
                    "column": 12,
                    "event": "note",
                    "message": "(46) entry to ‘copy_self_proc_exe’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 227,
                    "column": 12,
                    "event": "note",
                    "message": "(47) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 231,
                    "column": 13,
                    "event": "note",
                    "message": "(48) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 231,
                    "column": 12,
                    "event": "note",
                    "message": "(49) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 18,
                    "event": "included_from",
                    "message": "Included from here.",
                    "verbosity_level": 1
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 236,
                    "column": 19,
                    "event": "note",
                    "message": "(50) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 238,
                    "column": 12,
                    "event": "note",
                    "message": "(51) following ‘false’ branch (when ‘mmfd != -1’)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "cc1",
                    "line": 0,
                    "event": "note",
                    "message": "(52) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 244,
                    "column": 20,
                    "event": "note",
                    "message": "(53) following ‘false’ branch (when ‘n_read >= 0’)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 248,
                    "column": 20,
                    "event": "note",
                    "message": "(54) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 262,
                    "column": 12,
                    "event": "note",
                    "message": "(55) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 229,
                    "column": 24,
                    "event": "note",
                    "message": "(56) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 287,
                    "column": 22,
                    "event": "note",
                    "message": "(57) returning to ‘containers_reexec’ from ‘copy_self_proc_exe’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 288,
                    "column": 12,
                    "event": "note",
                    "message": "(58) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 291,
                    "column": 13,
                    "event": "note",
                    "message": "(59) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/containers/storage/pkg/unshare/unshare.c",
                    "line": 291,
                    "column": 12,
                    "event": "note",
                    "message": "(60) ‘parse_proc_stringlist(\"/proc/self/cmdline\")’ leaks here; was allocated at (36)",
                    "verbosity_level": 2
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  289|   \t\treturn fd;",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  290|   ",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  291|-> \tif (fexecve(fd, argv, environ) == -1) {",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  292|   \t\tclose(fd);",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  293|   \t\tfprintf(stderr, \"Error during reexec(...): %m\\n\");",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "COMPILER_WARNING",
            "language": "c/c++",
            "tool": "gcc",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c",
                    "line": 0,
                    "event": "internal warning",
                    "message": "child 5103 timed out after 30s",
                    "verbosity_level": 0
                }
            ]
        },
        {
            "checker": "CPPCHECK_WARNING",
            "language": "c/c++",
            "tool": "cppcheck",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c",
                    "line": 0,
                    "event": "internal warning",
                    "message": "child 5104 timed out after 30s",
                    "verbosity_level": 0
                }
            ]
        },
        {
            "checker": "COMPILER_WARNING",
            "cwe": 1164,
            "language": "c/c++",
            "tool": "gcc",
            "hash_v1": "1653019d736065449675558bc45ff3c107a2c59c",
            "key_event_idx": 0,
            "events": [
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/mattn/go-sqlite3/sqlite3.go",
                    "line": 85,
                    "column": 1,
                    "event": "warning[-Wunused-function]",
                    "message": "‘_sqlite3_exec’ defined but not used",
                    "verbosity_level": 0
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   85 | _sqlite3_exec(sqlite3* db, const char* pcmd, long long* rowid, long long* changes)",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "      | ^~~~~~~~~~~~~",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   83|   ",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   84|   static int",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   85|-> _sqlite3_exec(sqlite3* db, const char* pcmd, long long* rowid, long long* changes)",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   86|   {",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   87|     int rv = sqlite3_exec(db, pcmd, 0, 0, 0);",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "GCC_ANALYZER_WARNING",
            "cwe": 476,
            "language": "c/c++",
            "tool": "gcc-analyzer",
            "hash_v1": "0355375c762864403c43a77bf2c8a68dfde4a5f5",
            "key_event_idx": 1,
            "events": [
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 0,
                    "event": "scope_hint",
                    "message": "In function 'New'",
                    "verbosity_level": 1
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 77,
                    "column": 19,
                    "event": "warning[-Wanalyzer-possible-null-dereference]",
                    "message": "dereference of possibly-NULL 'c'",
                    "verbosity_level": 0
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 76,
                    "column": 25,
                    "event": "note",
                    "message": "(1) this call could return NULL",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 77,
                    "column": 19,
                    "event": "note",
                    "message": "(2) 'c' could be NULL: unchecked value from (1)",
                    "verbosity_level": 2
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   75|   \tCK_C_GetFunctionList list;",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   76|   \tstruct ctx *c = calloc(1, sizeof(struct ctx));",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   77|-> \tc->handle = dlopen(module, RTLD_LAZY);",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   78|   \tif (c->handle == NULL) {",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   79|   \t\tfree(c);",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "GCC_ANALYZER_WARNING",
            "cwe": 476,
            "language": "c/c++",
            "tool": "gcc-analyzer",
            "hash_v1": "0cc6a9d7c06f16ee2fc2af3042bcef3b0d79f87c",
            "key_event_idx": 1,
            "events": [
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 0,
                    "event": "scope_hint",
                    "message": "In function ‘New’",
                    "verbosity_level": 1
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 77,
                    "column": 19,
                    "event": "warning[-Wanalyzer-possible-null-dereference]",
                    "message": "dereference of possibly-NULL ‘c’",
                    "verbosity_level": 0
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 76,
                    "column": 25,
                    "event": "note",
                    "message": "(1) this call could return NULL",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 77,
                    "column": 19,
                    "event": "note",
                    "message": "(2) ‘c’ could be NULL: unchecked value from (1)",
                    "verbosity_level": 2
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   75|   \tCK_C_GetFunctionList list;",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   76|   \tstruct ctx *c = calloc(1, sizeof(struct ctx));",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   77|-> \tc->handle = dlopen(module, RTLD_LAZY);",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   78|   \tif (c->handle == NULL) {",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "   79|   \t\tfree(c);",
                    "verbosity_level": 1
                }
            ]
        },
        {
            "checker": "GCC_ANALYZER_WARNING",
            "cwe": 401,
            "language": "c/c++",
            "tool": "gcc-analyzer",
            "hash_v1": "1f2dae49315476fc3140813dd019081eb4bae4c5",
            "key_event_idx": 1,
            "events": [
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 0,
                    "event": "scope_hint",
                    "message": "In function ‘GetAttributeValue.part.0’",
                    "verbosity_level": 1
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 316,
                    "column": 32,
                    "event": "warning[-Wanalyzer-malloc-leak]",
                    "message": "leak of ‘*((CK_ATTRIBUTE *)temp).pValue’",
                    "verbosity_level": 0
                },
                {
                    "file_name": "cgo-gcc-prolog",
                    "line": 684,
                    "column": 1,
                    "event": "note",
                    "message": "(1) entry to ‘_cgo_6020a31fdefd_Cfunc_GetAttributeValue’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "cgo-gcc-prolog",
                    "line": 697,
                    "column": 11,
                    "event": "note",
                    "message": "(2) calling ‘GetAttributeValue’ from ‘_cgo_6020a31fdefd_Cfunc_GetAttributeValue’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 300,
                    "column": 7,
                    "event": "note",
                    "message": "(3) entry to ‘GetAttributeValue’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 307,
                    "column": 12,
                    "event": "note",
                    "message": "(4) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "cc1",
                    "line": 0,
                    "event": "note",
                    "message": "(5) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "cc1",
                    "line": 0,
                    "event": "note",
                    "message": "(6) calling ‘GetAttributeValue.part.0’ from ‘GetAttributeValue’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 300,
                    "column": 7,
                    "event": "note",
                    "message": "(7) entry to ‘GetAttributeValue.part.0’",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 311,
                    "column": 23,
                    "event": "note",
                    "message": "(8) following ‘true’ branch (when ‘i < templen’)...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 312,
                    "column": 35,
                    "event": "note",
                    "message": "(9) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 312,
                    "column": 20,
                    "event": "note",
                    "message": "(10) following ‘false’ branch...",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 316,
                    "column": 34,
                    "event": "note",
                    "message": "(11) ...to here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 316,
                    "column": 34,
                    "event": "note",
                    "message": "(12) allocated here",
                    "verbosity_level": 2
                },
                {
                    "file_name": "skopeo-1.17.0-build/skopeo-1.17.0/vendor/github.com/miekg/pkcs11/pkcs11.go",
                    "line": 316,
                    "column": 32,
                    "event": "note",
                    "message": "(13) ‘*((CK_ATTRIBUTE *)temp).pValue’ leaks here; was allocated at (12)",
                    "verbosity_level": 2
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  314|   \t\t\tcontinue;",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  315|   \t\t}",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  316|-> \t\ttemp[i].pValue = calloc(temp[i].ulValueLen, sizeof(CK_BYTE));",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  317|   \t}",
                    "verbosity_level": 1
                },
                {
                    "file_name": "",
                    "line": 0,
                    "event": "#",
                    "message": "  318|   \treturn c->sym->C_GetAttributeValue(session, object, temp, templen);",
                    "verbosity_level": 1
                }
            ]
        }
    ]
}