Add vulnerable image for unit testing of vulnerability scanning

test/data/images/vuln-image-in-oci/blobs/sha256/1035e489ecce623de89a5a7a5f3a0c2db28ea05cf2591088b13d25c211c9acb8

@@ -0,0 +1 @@
+{"architecture":"arm","config":{"Hostname":"","Domainname":"","User":"","AttachStdin":false,"AttachStdout":false,"AttachStderr":false,"Tty":false,"OpenStdin":false,"StdinOnce":false,"Env":["PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","LANG=C.UTF-8","GPG_KEY=97FC712E4C024BBEA48A61ED3A5CA953F73C700D","PYTHON_VERSION=3.4.10","PYTHON_PIP_VERSION=19.0.3"],"Cmd":["python3"],"ArgsEscaped":true,"Image":"sha256:0cfac74f4d2ae98309879c2523906781c47bc3c99bbd6a9690339973766fd7e8","Volumes":null,"WorkingDir":"","Entrypoint":null,"OnBuild":null,"Labels":null},"container":"9d57a4a5c9e76346dba2ea3b3462b05cfb9af62e80ff8dd8e88f57fef51a7130","container_config":{"Hostname":"9d57a4a5c9e7","Domainname":"","User":"","AttachStdin":false,"AttachStdout":false,"AttachStderr":false,"Tty":false,"OpenStdin":false,"StdinOnce":false,"Env":["PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","LANG=C.UTF-8","GPG_KEY=97FC712E4C024BBEA48A61ED3A5CA953F73C700D","PYTHON_VERSION=3.4.10","PYTHON_PIP_VERSION=19.0.3"],"Cmd":["/bin/sh","-c","#(nop) ","CMD [\"python3\"]"],"ArgsEscaped":true,"Image":"sha256:0cfac74f4d2ae98309879c2523906781c47bc3c99bbd6a9690339973766fd7e8","Volumes":null,"WorkingDir":"","Entrypoint":null,"OnBuild":null,"Labels":{}},"created":"2019-03-20T12:52:59.400651896Z","docker_version":"18.06.1-ce","history":[{"created":"2019-03-08T03:35:52.222531099Z","created_by":"/bin/sh -c #(nop) ADD file:e9ae09c8f3973b62bf7e10dd8b9251e50f5479c0d8d1644f632f3886e02c7323 in / "},{"created":"2019-03-08T03:35:52.612420119Z","created_by":"/bin/sh -c #(nop)  CMD [\"/bin/sh\"]","empty_layer":true},{"created":"2019-03-12T12:31:28.616458864Z","created_by":"/bin/sh -c #(nop)  ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","empty_layer":true},{"created":"2019-03-12T12:31:28.988536195Z","created_by":"/bin/sh -c #(nop)  ENV LANG=C.UTF-8","empty_layer":true},{"created":"2019-03-12T12:31:30.843105341Z","created_by":"/bin/sh -c apk add --no-cache ca-certificates"},{"created":"2019-03-12T12:43:08.637290044Z","created_by":"/bin/sh -c #(nop)  ENV GPG_KEY=97FC712E4C024BBEA48A61ED3A5CA953F73C700D","empty_layer":true},{"created":"2019-03-20T12:49:29.220738697Z","created_by":"/bin/sh -c #(nop)  ENV PYTHON_VERSION=3.4.10","empty_layer":true},{"created":"2019-03-20T12:52:47.917991665Z","created_by":"/bin/sh -c set -ex \t\u0026\u0026 apk add --no-cache --virtual .fetch-deps \t\tgnupg \t\ttar \t\txz \t\t\u0026\u0026 wget -O python.tar.xz \"https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz\" \t\u0026\u0026 wget -O python.tar.xz.asc \"https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc\" \t\u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \t\u0026\u0026 gpg --batch --keyserver ha.pool.sks-keyservers.net --recv-keys \"$GPG_KEY\" \t\u0026\u0026 gpg --batch --verify python.tar.xz.asc python.tar.xz \t\u0026\u0026 { command -v gpgconf \u003e /dev/null \u0026\u0026 gpgconf --kill all || :; } \t\u0026\u0026 rm -rf \"$GNUPGHOME\" python.tar.xz.asc \t\u0026\u0026 mkdir -p /usr/src/python \t\u0026\u0026 tar -xJC /usr/src/python --strip-components=1 -f python.tar.xz \t\u0026\u0026 rm python.tar.xz \t\t\u0026\u0026 apk add --no-cache --virtual .build-deps  \t\tbzip2-dev \t\tcoreutils \t\tdpkg-dev dpkg \t\texpat-dev \t\tfindutils \t\tgcc \t\tgdbm-dev \t\tlibc-dev \t\tlibffi-dev \t\tlinux-headers \t\tmake \t\tncurses-dev \t\tlibressl-dev \t\tpax-utils \t\treadline-dev \t\tsqlite-dev \t\ttcl-dev \t\ttk \t\ttk-dev \t\txz-dev \t\tzlib-dev \t\u0026\u0026 apk del .fetch-deps \t\t\u0026\u0026 cd /usr/src/python \t\u0026\u0026 gnuArch=\"$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)\" \t\u0026\u0026 ./configure \t\t--build=\"$gnuArch\" \t\t--enable-loadable-sqlite-extensions \t\t--enable-shared \t\t--with-system-expat \t\t--with-system-ffi \t\t--without-ensurepip \t\u0026\u0026 make -j \"$(nproc)\" \t\tEXTRA_CFLAGS=\"-DTHREAD_STACK_SIZE=0x100000\" \t\u0026\u0026 make install \t\t\u0026\u0026 find /usr/local -type f -executable -not \\( -name '*tkinter*' \\) -exec scanelf --needed --nobanner --format '%n#p' '{}' ';' \t\t| tr ',' '\\n' \t\t| sort -u \t\t| awk 'system(\"[ -e /usr/local/lib/\" $1 \" ]\") == 0 { next } { print \"so:\" $1 }' \t\t| xargs -rt apk add --no-cache --virtual .python-rundeps \t\u0026\u0026 apk del .build-deps \t\t\u0026\u0026 find /usr/local -depth \t\t\\( \t\t\t\\( -type d -a \\( -name test -o -name tests \\) \\) \t\t\t-o \t\t\t\\( -type f -a \\( -name '*.pyc' -o -name '*.pyo' \\) \\) \t\t\\) -exec rm -rf '{}' + \t\u0026\u0026 rm -rf /usr/src/python \t\t\u0026\u0026 python3 --version"},{"created":"2019-03-20T12:52:49.485141454Z","created_by":"/bin/sh -c cd /usr/local/bin \t\u0026\u0026 ln -s idle3 idle \t\u0026\u0026 ln -s pydoc3 pydoc \t\u0026\u0026 ln -s python3 python \t\u0026\u0026 ln -s python3-config python-config"},{"created":"2019-03-20T12:52:49.809008671Z","created_by":"/bin/sh -c #(nop)  ENV PYTHON_PIP_VERSION=19.0.3","empty_layer":true},{"created":"2019-03-20T12:52:58.960750097Z","created_by":"/bin/sh -c set -ex; \t\twget -O get-pip.py 'https://bootstrap.pypa.io/get-pip.py'; \t\tpython get-pip.py \t\t--disable-pip-version-check \t\t--no-cache-dir \t\t\"pip==$PYTHON_PIP_VERSION\" \t; \tpip --version; \t\tfind /usr/local -depth \t\t\\( \t\t\t\\( -type d -a \\( -name test -o -name tests \\) \\) \t\t\t-o \t\t\t\\( -type f -a \\( -name '*.pyc' -o -name '*.pyo' \\) \\) \t\t\\) -exec rm -rf '{}' +; \trm -f get-pip.py"},{"created":"2019-03-20T12:52:59.400651896Z","created_by":"/bin/sh -c #(nop)  CMD [\"python3\"]","empty_layer":true}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:21705165756ddfdc31d10bff59efb9893ded3cd793d06f2432c2dc819aa1cd72","sha256:7b455482516cdbc9016824bb1af350e72a53334e1842f7d474cc52e05d73c9b0","sha256:f41ac40c0eaf9bf5e18a824092c3e6deec253b939016162e5ed8f355e3d7ee7c","sha256:12e11f92b4cbfeb0be7075b11e5a8c717a04626fb362775e5e277fd520097aad","sha256:59ebbf890f78d8e84da7ee3bfe4ecb770a1491485ad1143f6328a36b97d3719b"]}}

test/data/images/vuln-image-in-oci/blobs/sha256/1568398b83b63ab9962703d443dab80693907072ab0e0121ac4613c9cdf0dc07

@@ -0,0 +1,36 @@
+{
+   "schemaVersion": 2,
+   "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
+   "config": {
+      "mediaType": "application/vnd.docker.container.image.v1+json",
+      "size": 6080,
+      "digest": "sha256:378116235ac3435e97f63bf688667454eaa89e27ab4ee1d62ec848962c233459"
+   },
+   "layers": [
+      {
+         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
+         "size": 2540673,
+         "digest": "sha256:d33b53ae0340b7490b486edd65310a4333d7e0057854aadd12a5006faf7fa576"
+      },
+      {
+         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
+         "size": 302105,
+         "digest": "sha256:e6f4a99552d2a12a434e2b1b6dce8499a72e10e66c295ee8b0951104d3960cd5"
+      },
+      {
+         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
+         "size": 21092573,
+         "digest": "sha256:d113ef8b10c5a18eb09e6521fe4a2afdc5f540f560d88a38bf556046ceb24c0c"
+      },
+      {
+         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
+         "size": 232,
+         "digest": "sha256:6e272e78cc284bee0414f3f81804ab480af8a5eb5f6818ec3531cec95b5a2986"
+      },
+      {
+         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
+         "size": 1812877,
+         "digest": "sha256:f54eba5576d4d8d712791eac30f1c1fd7ee79de40b28c7b2445301b94d1ae813"
+      }
+   ]
+}

test/data/images/vuln-image-in-oci/blobs/sha256/378116235ac3435e97f63bf688667454eaa89e27ab4ee1d62ec848962c233459

@@ -0,0 +1 @@
+{"architecture":"arm","config":{"Hostname":"","Domainname":"","User":"","AttachStdin":false,"AttachStdout":false,"AttachStderr":false,"Tty":false,"OpenStdin":false,"StdinOnce":false,"Env":["PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","LANG=C.UTF-8","GPG_KEY=97FC712E4C024BBEA48A61ED3A5CA953F73C700D","PYTHON_VERSION=3.4.10","PYTHON_PIP_VERSION=19.0.3"],"Cmd":["python3"],"ArgsEscaped":true,"Image":"sha256:aaf2b4260bf8828aae8de15121bd8917260c893bf14499959f7844a4d8601bba","Volumes":null,"WorkingDir":"","Entrypoint":null,"OnBuild":null,"Labels":null},"container":"fcdb1e1f10871fc90d046ad068a4ad77da1aff62e44cf7b44de2da1b5ee9b1c5","container_config":{"Hostname":"fcdb1e1f1087","Domainname":"","User":"","AttachStdin":false,"AttachStdout":false,"AttachStderr":false,"Tty":false,"OpenStdin":false,"StdinOnce":false,"Env":["PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","LANG=C.UTF-8","GPG_KEY=97FC712E4C024BBEA48A61ED3A5CA953F73C700D","PYTHON_VERSION=3.4.10","PYTHON_PIP_VERSION=19.0.3"],"Cmd":["/bin/sh","-c","#(nop) ","CMD [\"python3\"]"],"ArgsEscaped":true,"Image":"sha256:aaf2b4260bf8828aae8de15121bd8917260c893bf14499959f7844a4d8601bba","Volumes":null,"WorkingDir":"","Entrypoint":null,"OnBuild":null,"Labels":{}},"created":"2019-03-20T08:07:52.32872853Z","docker_version":"18.06.1-ce","history":[{"created":"2019-03-08T03:36:05.778842336Z","created_by":"/bin/sh -c #(nop) ADD file:2bf8ccaacb388ca6271670ed8a86b8bc4450823156917d29d9d9ec0a07fd64a7 in / "},{"created":"2019-03-08T03:36:06.13674873Z","created_by":"/bin/sh -c #(nop)  CMD [\"/bin/sh\"]","empty_layer":true},{"created":"2019-03-08T04:31:21.416781718Z","created_by":"/bin/sh -c #(nop)  ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin","empty_layer":true},{"created":"2019-03-08T04:31:21.732646932Z","created_by":"/bin/sh -c #(nop)  ENV LANG=C.UTF-8","empty_layer":true},{"created":"2019-03-08T04:31:23.390698682Z","created_by":"/bin/sh -c apk add --no-cache ca-certificates"},{"created":"2019-03-08T04:49:26.036937812Z","created_by":"/bin/sh -c #(nop)  ENV GPG_KEY=97FC712E4C024BBEA48A61ED3A5CA953F73C700D","empty_layer":true},{"created":"2019-03-20T08:04:18.348735257Z","created_by":"/bin/sh -c #(nop)  ENV PYTHON_VERSION=3.4.10","empty_layer":true},{"created":"2019-03-20T08:07:40.40972864Z","created_by":"/bin/sh -c set -ex \t\u0026\u0026 apk add --no-cache --virtual .fetch-deps \t\tgnupg \t\ttar \t\txz \t\t\u0026\u0026 wget -O python.tar.xz \"https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz\" \t\u0026\u0026 wget -O python.tar.xz.asc \"https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc\" \t\u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \t\u0026\u0026 gpg --batch --keyserver ha.pool.sks-keyservers.net --recv-keys \"$GPG_KEY\" \t\u0026\u0026 gpg --batch --verify python.tar.xz.asc python.tar.xz \t\u0026\u0026 { command -v gpgconf \u003e /dev/null \u0026\u0026 gpgconf --kill all || :; } \t\u0026\u0026 rm -rf \"$GNUPGHOME\" python.tar.xz.asc \t\u0026\u0026 mkdir -p /usr/src/python \t\u0026\u0026 tar -xJC /usr/src/python --strip-components=1 -f python.tar.xz \t\u0026\u0026 rm python.tar.xz \t\t\u0026\u0026 apk add --no-cache --virtual .build-deps  \t\tbzip2-dev \t\tcoreutils \t\tdpkg-dev dpkg \t\texpat-dev \t\tfindutils \t\tgcc \t\tgdbm-dev \t\tlibc-dev \t\tlibffi-dev \t\tlinux-headers \t\tmake \t\tncurses-dev \t\tlibressl-dev \t\tpax-utils \t\treadline-dev \t\tsqlite-dev \t\ttcl-dev \t\ttk \t\ttk-dev \t\txz-dev \t\tzlib-dev \t\u0026\u0026 apk del .fetch-deps \t\t\u0026\u0026 cd /usr/src/python \t\u0026\u0026 gnuArch=\"$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)\" \t\u0026\u0026 ./configure \t\t--build=\"$gnuArch\" \t\t--enable-loadable-sqlite-extensions \t\t--enable-shared \t\t--with-system-expat \t\t--with-system-ffi \t\t--without-ensurepip \t\u0026\u0026 make -j \"$(nproc)\" \t\tEXTRA_CFLAGS=\"-DTHREAD_STACK_SIZE=0x100000\" \t\u0026\u0026 make install \t\t\u0026\u0026 find /usr/local -type f -executable -not \\( -name '*tkinter*' \\) -exec scanelf --needed --nobanner --format '%n#p' '{}' ';' \t\t| tr ',' '\\n' \t\t| sort -u \t\t| awk 'system(\"[ -e /usr/local/lib/\" $1 \" ]\") == 0 { next } { print \"so:\" $1 }' \t\t| xargs -rt apk add --no-cache --virtual .python-rundeps \t\u0026\u0026 apk del .build-deps \t\t\u0026\u0026 find /usr/local -depth \t\t\\( \t\t\t\\( -type d -a \\( -name test -o -name tests \\) \\) \t\t\t-o \t\t\t\\( -type f -a \\( -name '*.pyc' -o -name '*.pyo' \\) \\) \t\t\\) -exec rm -rf '{}' + \t\u0026\u0026 rm -rf /usr/src/python \t\t\u0026\u0026 python3 --version"},{"created":"2019-03-20T08:07:42.0689915Z","created_by":"/bin/sh -c cd /usr/local/bin \t\u0026\u0026 ln -s idle3 idle \t\u0026\u0026 ln -s pydoc3 pydoc \t\u0026\u0026 ln -s python3 python \t\u0026\u0026 ln -s python3-config python-config"},{"created":"2019-03-20T08:07:42.429043827Z","created_by":"/bin/sh -c #(nop)  ENV PYTHON_PIP_VERSION=19.0.3","empty_layer":true},{"created":"2019-03-20T08:07:51.931716176Z","created_by":"/bin/sh -c set -ex; \t\twget -O get-pip.py 'https://bootstrap.pypa.io/get-pip.py'; \t\tpython get-pip.py \t\t--disable-pip-version-check \t\t--no-cache-dir \t\t\"pip==$PYTHON_PIP_VERSION\" \t; \tpip --version; \t\tfind /usr/local -depth \t\t\\( \t\t\t\\( -type d -a \\( -name test -o -name tests \\) \\) \t\t\t-o \t\t\t\\( -type f -a \\( -name '*.pyc' -o -name '*.pyo' \\) \\) \t\t\\) -exec rm -rf '{}' +; \trm -f get-pip.py"},{"created":"2019-03-20T08:07:52.32872853Z","created_by":"/bin/sh -c #(nop)  CMD [\"python3\"]","empty_layer":true}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:91b223746bb0547e3dc02e8578c6279f49dbb83e692dc69cdef913c35c4474f4","sha256:91e132420527ca0c02c4e20c0d59693e68f3120b150f20845cba1c3a1b07ce9a","sha256:f525936bdf0301416b4af459b8c0c099d95ad2f879206a87a80745b9fe04d4d1","sha256:42c7fcb4e305038c5ce435a24a1adbb46b32f57014ed9c3141deec6a7a9a6f1a","sha256:3ed98eff164062638a84af7b61a5e0c10fdfb77f24221dca62873a359647d4ff"]}}

test/data/images/vuln-image-in-oci/blobs/sha256/3cdfd0b186f5cc8c75073c2b29506b067fe96284f23922e0f19c90eff3011865

@@ -0,0 +1,36 @@
+{
+   "schemaVersion": 2,
+   "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
+   "config": {
+      "mediaType": "application/vnd.docker.container.image.v1+json",
+      "size": 6086,
+      "digest": "sha256:99a53e6ad17ef68837e44123482b2c52f0bccdb1db0dde032d2e91eb060c0c72"
+   },
+   "layers": [
+      {
+         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
+         "size": 2687939,
+         "digest": "sha256:3b00a3925ee4b356facd24aea8ece58982a66577023cb3596ce3a321aef976f9"
+      },
+      {
+         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
+         "size": 302312,
+         "digest": "sha256:a3cd3e3d08dd7b819f6ec2fec885bf1abbe92799bab1485623f8fd42e2ba2a35"
+      },
+      {
+         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
+         "size": 22281933,
+         "digest": "sha256:bed9db30154fbe7821c4aef53b1ac83d89dfb2066b5e486d0cb5760cd2595df5"
+      },
+      {
+         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
+         "size": 231,
+         "digest": "sha256:d837e8e30360686a17ea015a8d6787b7c35599d3d53d73b4fb88f95fede90980"
+      },
+      {
+         "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
+         "size": 1812617,
+         "digest": "sha256:f307ca8b43fdab6ef1281e027a6cc217da276e8ef99e39c9c7f0f4d09a2b93a9"
+      }
+   ]
+}