{
  "_type": "https://in-toto.io/Statement/v0.1",
  "predicateType": "https://slsa.dev/provenance/v1",
  "subject": [
    {
      "name": "docker-compose-linux-riscv64",
      "digest": {
        "sha256": "e3b1d40445be0be656c5f80367a2c78465703d01eedf8fa160032bba652b85f9"
      }
    }
  ],
  "predicate": {
    "buildDefinition": {
      "buildType": "https://github.com/moby/buildkit/blob/master/docs/attestations/slsa-definitions.md",
      "resolvedDependencies": [
        {
          "uri": "pkg:docker/crazymax/osxcross@15.5-alpine?platform=linux%2Friscv64",
          "digest": {
            "sha256": "ab016ff172118c7c98f49413bbdbf496b7c96c2677d1fb1736543301b8359341"
          }
        },
        {
          "uri": "pkg:docker/docker/buildkit-syft-scanner@1.10.0",
          "digest": {
            "sha256": "490c3821680b55fe995766f7f22db4e6566ccef41c4cea13b370c4384d7eb3f2"
          }
        },
        {
          "uri": "pkg:docker/docker/dockerfile@1",
          "digest": {
            "sha256": "2780b5c3bab67f1f76c781860de469442999ed1a0d7992a5efdf2cffc0e3d769"
          }
        },
        {
          "uri": "pkg:docker/alpine@latest?platform=linux%2Famd64",
          "digest": {
            "sha256": "25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659"
          }
        },
        {
          "uri": "pkg:docker/golang@1.25.8-alpine3.22?platform=linux%2Famd64",
          "digest": {
            "sha256": "6b7607461f105ccaa0615b6f7932dfd5b36c5d827a0770b5578e565107cc3adb"
          }
        },
        {
          "uri": "pkg:docker/tonistiigi/xx@1.9.0?platform=linux%2Famd64",
          "digest": {
            "sha256": "c64defb9ed5a91eacb37f96ccc3d4cd72521c4bd18d5442905b95e2226b0e707"
          }
        },
        {
          "uri": "https://github.com/docker/compose.git#refs/tags/v5.1.2",
          "digest": {
            "sha1": "fe14bb570cf56c25d2ffd28ee55d551279c30627"
          }
        }
      ],
      "externalParameters": {
        "configSource": {
          "uri": "https://github.com/docker/compose.git#refs/tags/v5.1.2",
          "digest": {
            "sha1": "fe14bb570cf56c25d2ffd28ee55d551279c30627"
          },
          "path": "Dockerfile"
        },
        "request": {
          "frontend": "gateway.v0",
          "args": {
            "build-arg:BUILDKIT_CONTEXT_KEEP_GIT_DIR": "1",
            "build-arg:BUILD_TAGS": "e2e",
            "cmdline": "docker/dockerfile:1",
            "source": "docker/dockerfile:1",
            "target": "release"
          },
          "secrets": [
            {
              "id": "GIT_AUTH_HEADER",
              "optional": true
            },
            {
              "id": "GIT_AUTH_TOKEN",
              "optional": true
            }
          ]
        }
      },
      "internalParameters": {
        "buildConfig": {
          "digestMapping": {
            "sha256:186428550887d486636e2ce072297edba7de3341b945d620fcf5b2288027f361": "step2",
            "sha256:1ebe486274fd1b9041d6430e2c392c482d11d918621f1618100c843923d5b3ff": "step7",
            "sha256:26073776b3a8c7f63a1e0960306e91105ccdccd5d0e9d9f74423991fed60ceae": "step10",
            "sha256:284e49fc4098e35c14a939ed5ee7ffd731d9e196a0de065e8e6547947f55a0a6": "step15",
            "sha256:4ab7045cd335b98948af61acb1e29c04d19b21d9eeea59b51a2e4664b38f70e5": "step14",
            "sha256:4bb73655bf420a629174fa44a86e2dd60cdfcc8e1e6a6728a913ad85affeb8b0": "step0",
            "sha256:73238b5ab282de13ea20194fa9c9d21fec534ef6e22c23a59af1c1c8aa2cb8d7": "step3",
            "sha256:79c3fba67ed139c365d272cf943e26cb3d5dde3a244390162d14840851448370": "step6",
            "sha256:913314d4ceb19e898d1f2214707bd20233cb7010c08a67490bb3ebb1d7cab2c8": "step5",
            "sha256:93e5265128513b3dfd27e8a02cd283a67cef8c5c1512500fee320ee2ca532e23": "step1",
            "sha256:95db44039d2b861eb4028888a2007e81bd3056598c061aae3262efc5ee84a34e": "step9",
            "sha256:99de2074030b5c31184df98d00036488636284df94be2a5479b3f5df7a7d2e17": "step4",
            "sha256:c873d698edc522885b83623d46965fe9c1f8373b0db66c86ea5342bc6220de19": "step13",
            "sha256:d42f77894af41debd521e6170d30de34e13c5333ac0d9e4cb6fa941dac85c9f1": "step8",
            "sha256:d9989aece8df737e2a5f0884600991da22947ce7fa0d934e7d9a79df5e47d1df": "step12",
            "sha256:db0b39150e5b39df0e7eb1665888d37010752cc64a15826ac644e54b2861cc15": "step11"
          },
          "llbDefinition": [
            {
              "id": "step0",
              "op": {
                "Op": {
                  "source": {
                    "identifier": "docker-image://docker.io/library/alpine:latest@sha256:25109184c71bdad752c8312a8623239686a9a2071e8825f20acb8f2198c3f659"
                  }
                },
                "constraints": {},
                "platform": {
                  "Architecture": "amd64",
                  "OS": "linux"
                }
              }
            },
            {
              "id": "step1",
              "inputs": [
                "step0:0"
              ],
              "op": {
                "Op": {
                  "file": {
                    "actions": [
                      {
                        "Action": {
                          "mkdir": {
                            "makeParents": true,
                            "mode": 493,
                            "path": "/work",
                            "timestamp": -1
                          }
                        },
                        "input": 0,
                        "output": 0,
                        "secondaryInput": -1
                      }
                    ]
                  }
                },
                "constraints": {}
              }
            },
            {
              "id": "step2",
              "op": {
                "Op": {
                  "source": {
                    "identifier": "docker-image://docker.io/library/golang:1.25.8-alpine3.22@sha256:6b7607461f105ccaa0615b6f7932dfd5b36c5d827a0770b5578e565107cc3adb"
                  }
                },
                "constraints": {},
                "platform": {
                  "Architecture": "amd64",
                  "OS": "linux"
                }
              }
            },
            {
              "id": "step3",
              "op": {
                "Op": {
                  "source": {
                    "identifier": "docker-image://docker.io/tonistiigi/xx:1.9.0@sha256:c64defb9ed5a91eacb37f96ccc3d4cd72521c4bd18d5442905b95e2226b0e707"
                  }
                },
                "constraints": {},
                "platform": {
                  "Architecture": "amd64",
                  "OS": "linux"
                }
              }
            },
            {
              "id": "step4",
              "inputs": [
                "step2:0",
                "step3:0"
              ],
              "op": {
                "Op": {
                  "file": {
                    "actions": [
                      {
                        "Action": {
                          "copy": {
                            "allowEmptyWildcard": true,
                            "allowWildcard": true,
                            "createDestPath": true,
                            "dest": "/",
                            "dirCopyContents": true,
                            "followSymlink": true,
                            "mode": -1,
                            "src": "/",
                            "timestamp": -1
                          }
                        },
                        "input": 0,
                        "output": 0,
                        "secondaryInput": 1
                      }
                    ]
                  }
                },
                "constraints": {}
              }
            },
            {
              "id": "step5",
              "inputs": [
                "step4:0"
              ],
              "op": {
                "Op": {
                  "exec": {
                    "meta": {
                      "args": [
                        "/bin/sh",
                        "-c",
                        "apk add --no-cache       clang       docker       file       findutils       git       make       protoc       protobuf-dev"
                      ],
                      "cwd": "/go",
                      "env": [
                        "PATH=/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                        "GOLANG_VERSION=1.25.8",
                        "GOTOOLCHAIN=local",
                        "GOPATH=/go"
                      ],
                      "removeMountStubsRecursive": true
                    },
                    "mounts": [
                      {
                        "dest": "/"
                      }
                    ]
                  }
                },
                "constraints": {},
                "platform": {
                  "Architecture": "amd64",
                  "OS": "linux"
                }
              }
            },
            {
              "id": "step6",
              "inputs": [
                "step5:0"
              ],
              "op": {
                "Op": {
                  "file": {
                    "actions": [
                      {
                        "Action": {
                          "mkdir": {
                            "makeParents": true,
                            "mode": 493,
                            "path": "/src",
                            "timestamp": -1
                          }
                        },
                        "input": 0,
                        "output": 0,
                        "secondaryInput": -1
                      }
                    ]
                  }
                },
                "constraints": {}
              }
            },
            {
              "id": "step7",
              "op": {
                "Op": {
                  "source": {
                    "attrs": {
                      "git.authheadersecret": "GIT_AUTH_HEADER",
                      "git.authtokensecret": "GIT_AUTH_TOKEN",
                      "git.fullurl": "https://github.com/docker/compose.git",
                      "git.keepgitdir": "true"
                    },
                    "identifier": "git://github.com/docker/compose.git#refs/tags/v5.1.2"
                  }
                },
                "constraints": {}
              }
            },
            {
              "id": "step8",
              "inputs": [
                "step6:0",
                "step7:0"
              ],
              "op": {
                "Op": {
                  "file": {
                    "actions": [
                      {
                        "Action": {
                          "copy": {
                            "allowEmptyWildcard": true,
                            "allowWildcard": true,
                            "createDestPath": true,
                            "dest": "/src/",
                            "dirCopyContents": true,
                            "followSymlink": true,
                            "mode": -1,
                            "src": "/go.*",
                            "timestamp": -1
                          }
                        },
                        "input": 0,
                        "output": 0,
                        "secondaryInput": 1
                      }
                    ]
                  }
                },
                "constraints": {}
              }
            },
            {
              "id": "step9",
              "inputs": [
                "step8:0"
              ],
              "op": {
                "Op": {
                  "exec": {
                    "meta": {
                      "args": [
                        "/bin/sh",
                        "-c",
                        "go mod download"
                      ],
                      "cwd": "/src",
                      "env": [
                        "PATH=/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                        "GOLANG_VERSION=1.25.8",
                        "GOTOOLCHAIN=local",
                        "GOPATH=/go",
                        "CGO_ENABLED=0"
                      ],
                      "removeMountStubsRecursive": true
                    },
                    "mounts": [
                      {
                        "dest": "/"
                      },
                      {
                        "cacheOpt": {
                          "ID": "//go/pkg/mod"
                        },
                        "dest": "/go/pkg/mod",
                        "input": -1,
                        "mountType": 3,
                        "output": -1
                      },
                      {
                        "cacheOpt": {
                          "ID": "//root/.cache/go-build"
                        },
                        "dest": "/root/.cache/go-build",
                        "input": -1,
                        "mountType": 3,
                        "output": -1
                      }
                    ]
                  }
                },
                "constraints": {},
                "platform": {
                  "Architecture": "amd64",
                  "OS": "linux"
                }
              }
            },
            {
              "id": "step10",
              "op": {
                "Op": {
                  "source": {
                    "identifier": "docker-image://docker.io/crazymax/osxcross:15.5-alpine@sha256:ab016ff172118c7c98f49413bbdbf496b7c96c2677d1fb1736543301b8359341"
                  }
                },
                "constraints": {},
                "platform": {
                  "Architecture": "riscv64",
                  "OS": "linux"
                }
              }
            },
            {
              "id": "step11",
              "inputs": [
                "step9:0",
                "step7:0",
                "step10:0"
              ],
              "op": {
                "Op": {
                  "exec": {
                    "meta": {
                      "args": [
                        "/bin/sh",
                        "-c",
                        "xx-go --wrap \u0026\u0026     if [ \"$(xx-info os)\" == \"darwin\" ]; then export CGO_ENABLED=1; export BUILD_TAGS=fsnotify,$BUILD_TAGS; fi \u0026\u0026     make build GO_BUILDTAGS=\"$BUILD_TAGS\" DESTDIR=/out \u0026\u0026     xx-verify --static /out/docker-compose"
                      ],
                      "cwd": "/src",
                      "env": [
                        "PATH=/go/bin:/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                        "GOLANG_VERSION=1.25.8",
                        "GOTOOLCHAIN=local",
                        "GOPATH=/go",
                        "CGO_ENABLED=0",
                        "BUILD_TAGS=e2e",
                        "TARGETPLATFORM=linux/riscv64"
                      ],
                      "removeMountStubsRecursive": true
                    },
                    "mounts": [
                      {
                        "dest": "/"
                      },
                      {
                        "cacheOpt": {
                          "ID": "//go/pkg/mod"
                        },
                        "dest": "/go/pkg/mod",
                        "input": -1,
                        "mountType": 3,
                        "output": -1
                      },
                      {
                        "cacheOpt": {
                          "ID": "//root/.cache"
                        },
                        "dest": "/root/.cache",
                        "input": -1,
                        "mountType": 3,
                        "output": -1
                      },
                      {
                        "dest": "/src",
                        "input": 1,
                        "output": -1,
                        "readonly": true
                      },
                      {
                        "dest": "/xx-sdk",
                        "input": 2,
                        "output": -1,
                        "readonly": true,
                        "selector": "/osxsdk"
                      }
                    ]
                  }
                },
                "constraints": {},
                "platform": {
                  "Architecture": "amd64",
                  "OS": "linux"
                }
              }
            },
            {
              "id": "step12",
              "inputs": [
                "step11:0"
              ],
              "op": {
                "Op": {
                  "file": {
                    "actions": [
                      {
                        "Action": {
                          "copy": {
                            "allowEmptyWildcard": true,
                            "allowWildcard": true,
                            "createDestPath": true,
                            "dest": "/",
                            "dirCopyContents": true,
                            "followSymlink": true,
                            "mode": -1,
                            "src": "/out/docker-compose",
                            "timestamp": -1
                          }
                        },
                        "input": -1,
                        "output": 0,
                        "secondaryInput": 0
                      }
                    ]
                  }
                },
                "constraints": {}
              }
            },
            {
              "id": "step13",
              "inputs": [
                "step1:0",
                "step12:0"
              ],
              "op": {
                "Op": {
                  "exec": {
                    "meta": {
                      "args": [
                        "/bin/sh",
                        "-c",
                        "mkdir -p /out \u0026\u0026     TARGETARCH=$([ \"$TARGETARCH\" = \"amd64\" ] \u0026\u0026 echo \"x86_64\" || echo \"$TARGETARCH\");     TARGETARCH=$([ \"$TARGETARCH\" = \"arm64\" ] \u0026\u0026 echo \"aarch64\" || echo \"$TARGETARCH\");     cp docker-compose* \"/out/docker-compose-${TARGETOS}-${TARGETARCH}${TARGETVARIANT}$(ls docker-compose* | sed -e 's/^docker-compose//')\""
                      ],
                      "cwd": "/work",
                      "env": [
                        "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                        "TARGETOS=linux",
                        "TARGETARCH=riscv64",
                        "TARGETVARIANT="
                      ],
                      "removeMountStubsRecursive": true
                    },
                    "mounts": [
                      {
                        "dest": "/"
                      },
                      {
                        "dest": "/work",
                        "input": 1,
                        "output": -1,
                        "readonly": true
                      }
                    ]
                  }
                },
                "constraints": {},
                "platform": {
                  "Architecture": "amd64",
                  "OS": "linux"
                }
              }
            },
            {
              "id": "step14",
              "inputs": [
                "step13:0"
              ],
              "op": {
                "Op": {
                  "file": {
                    "actions": [
                      {
                        "Action": {
                          "copy": {
                            "allowEmptyWildcard": true,
                            "allowWildcard": true,
                            "createDestPath": true,
                            "dest": "/",
                            "dirCopyContents": true,
                            "followSymlink": true,
                            "mode": -1,
                            "src": "/out",
                            "timestamp": -1
                          }
                        },
                        "input": -1,
                        "output": 0,
                        "secondaryInput": 0
                      }
                    ]
                  }
                },
                "constraints": {}
              }
            },
            {
              "id": "step15",
              "inputs": [
                "step14:0"
              ],
              "op": {
                "Op": {}
              }
            }
          ]
        },
        "builderPlatform": "linux/amd64",
        "github_actor": "glours",
        "github_actor_id": "705411",
        "github_event_name": "push",
        "github_event_payload": {
          "after": "fe14bb570cf56c25d2ffd28ee55d551279c30627",
          "base_ref": null,
          "before": "0000000000000000000000000000000000000000",
          "commits": [],
          "compare": "https://github.com/docker/compose/compare/v5.1.2",
          "created": true,
          "deleted": false,
          "enterprise": {
            "avatar_url": "https://avatars.githubusercontent.com/b/19176?v=4",
            "created_at": "2022-12-30T23:53:17Z",
            "description": null,
            "html_url": "https://github.com/enterprises/docker",
            "id": 19176,
            "name": "Docker",
            "node_id": "E_kgDNSug",
            "slug": "docker",
            "updated_at": "2026-03-30T21:15:15Z",
            "website_url": null
          },
          "forced": false,
          "head_commit": {
            "author": {
              "email": "github@gone.nl",
              "name": "Sebastiaan van Stijn",
              "username": "thaJeztah"
            },
            "committer": {
              "email": "nicolas.deloof@gmail.com",
              "name": "Nicolas De loof",
              "username": "ndeloof"
            },
            "distinct": true,
            "id": "ae92bef4e1d02bfb75afeafc0ce9334a133f952f",
            "message": "update to Go 1.25.9\n\ngo1.25.9 (released 2026-04-07) includes security fixes to the go command,\nthe compiler, and the archive/tar, crypto/tls, crypto/x509, html/template,\nand os packages, as well as bug fixes to the go command, the compiler, and\nthe runtime. See the Go 1.25.9 milestone on our issue tracker for details.\n\n- https://github.com/golang/go/issues?q=milestone%3AGo1.25.9+label%3ACherryPickApproved\n- full diff: https://github.com/golang/go/compare/go1.25.8...go1.25.9\n\nFrom the security announce:\n\nWe have just released Go versions 1.26.2 and 1.25.9, minor point releases.\n\nThese releases include 10 security fixes following the security policy:\n\n- os: Root.Chmod can follow symlinks out of the root on Linux\n\n  On Linux, if the target of Root.Chmod is replaced with a symlink while\n  the chmod operation is in progress, Chmod could operate on the target\n  of the symlink, even when the target lies outside the root.\n\n  The Linux fchmodat syscall silently ignores the AT_SYMLINK_NOFOLLOW flag,\n  which Root.Chmod uses to avoid symlink traversal. Root.Chmod checks its\n  target before acting and returns an error if the target is a symlink\n  lying outside the root, so the impact is limited to cases where the\n  target is replaced with a symlink between the check and operation.\n\n  On Linux, Root.Chmod now uses the fchmodat2 syscall when available, and\n  an workaround using /proc/self/fd otherwise.\n\n  Thanks to Uuganbayar Lkhamsuren for reporting this issue.\n\n  This is CVE-2026-32282 and Go issue https://go.dev/issue/78293.\n\n- html/template: JS template literal context incorrectly tracked\n\n  Context was not properly tracked across template branches for JS template\n  literals, leading to possibly incorrect escaping of content when branches were\n  used.\n\n  Additionally template actions within JS template literals did not properly\n  track\n  the brace depth, leading to incorrect escaping being applied.\n\n  These issues could cause actions within JS template literals to be incorrectly\n  or improperly escaped, leading to XSS vulnerabilities.\n\n  This only affects templates that use template actions within JS template\n  literals.\n\n  This is CVE-2026-32289 and Go issue https://go.dev/issue/78331.\n\n- crypto/x509: excluded DNS constraints not properly applied to wildcard domains\n\n  When verifying a certificate chain containing excluded DNS constraints, these\n  constraints are not correctly applied to wildcard DNS SANs which use a\n  different\n  case than the constraint.\n\n  For example, if a certificate contains the DNS name \"*.example.com\" and the\n  excluded DNS name \"EXAMPLE.COM\", the constraint will not be applied.\n\n  This only affects validation of otherwise trusted certificate chains, issued\n  by\n  a root CA in the VerifyOptions.Roots CertPool, or in the system certificate\n  pool.\n\n  This issue only affects Go 1.26.\n\n  Thank you to Riyas from Saintgits College of Engineering, k1rnt, @1seal for\n  reporting this issue.\n\n  This is CVE-2026-33810 and Go issue https://go.dev/issue/78332.\n\n- cmd/compile: no-op interface conversion bypasses overlap checking\n\n  Previously, the compiler failed to unwrap pointers contained within\n  a no-op interface conversion leading to an incorrect determination\n  of a non-overlapping move.\n\n  To prevent unsafe move operations, the compiler will now unwrap all\n  such conversions before considering a move non-overlapping.\n\n  Thank you to Jakub Ciolek - https://ciolek.dev/ for reporting this issue.\n\n  This is CVE-2026-27144 and Go issue https://go.dev/issue/78371.\n\n- cmd/compile: possible memory corruption after bound check elimination\n\n  Previously, slices and arrays accessed using induction variables\n  were sometimes incorrectly proved in-bound. If the induction variable\n  used for indexing were to overflow or underflow, it could allow access\n  to memory beyond the scope of the original slice or array.\n\n  To prevent this behavior, the compiler ensures that any mutated induction\n  variable that overflows/underflows with respect to its loop condition\n  is not used for bound check elimination.\n\n  Thank you to Jakub Ciolek - https://ciolek.dev/ for reporting this issue.\n\n  This is CVE-2026-27143 and Go issue https://go.dev/issue/78333.\n\n- archive/tar: unbounded allocation when parsing old format GNU sparse map\n\n  tar.Reader could allocate an unbounded amount of memory when reading\n  a maliciously-crafted archive containing a large number of sparse\n  regions encoded in the \"old GNU sparse map\" format.\n\n  We now limit both the number of old GNU sparse map extension blocks,\n  and the total number of sparse file entries, regardless of encoding.\n\n  Thanks to Colin Walters (wal...@verbum.org) who initially reported this issue.\n  Thanks also to Uuganbayar Lkhamsuren (https://github.com/uug4na) and Jakub\n  Ciolek\n  who additionally reported this issue.\n\n  This is CVE-2026-32288 and Go issue https://go.dev/issue/78301.\n\n- crypto/tls: multiple key update handshake messages can cause connection to\n  deadlock\n\n  If one side of the TLS connection sends multiple key update messages\n  post-handshake in a single record, the connection can deadlock, causing\n  uncontrolled consumption of resources. This can lead to a denial of service.\n\n  This only affects TLS 1.3.\n\n  Thank you to Jakub Ciolek - https://ciolek.dev/ for reporting this issue.\n\n  This is CVE-2026-32283 and Go issue https://go.dev/issue/78334.\n\n- cmd/go: trust layer bypass when using cgo and SWIG\n\n  A well-crafted SWIG source file could take advantage\n  of a file-naming convention used inside the trust\n  boundary of the cgo compiler. Doing so could result\n  in arbitrary code execution during build time.\n\n  SWIG files are disallowed from using this convention.\n\n  Thank you to Juho Forsén of Mattermost for reporting this issue.\n\n  This is CVE-2026-27140 and Go issue https://go.dev/issue/78335.\n\n- crypto/x509: unexpected work during chain building\n\n  During chain building, the amount of work that is done is not correctly\n  limited\n  when a large number of intermediate certificates are passed in\n  VerifyOptions.Intermediates, which can lead to a denial of service. This\n  affects\n  both direct users of crypto/x509 and users of crypto/tls.\n\n  Thank you to Jakub Ciolek - https://ciolek.dev/ for reporting this issue.\n\n  This is CVE-2026-32280 and Go issue https://go.dev/issue/78282.\n\n- crypto/x509: inefficient policy validation\n\n  Validating certificate chains which use policies is unexpectedly inefficient\n  when certificates in the chain contain a very large number of policy mappings,\n  possibly causing denial of service.\n\n  This only affects validation of otherwise trusted certificate chains, issued\n  by\n  a root CA in the VerifyOptions.Roots CertPool, or in the system certificate\n  pool.\n\n  Thank you to Jakub Ciolek - https://ciolek.dev/ for reporting this issue.\n\n  This is CVE-2026-32281 and Go issue https://go.dev/issue/78281.\n\nSigned-off-by: Sebastiaan van Stijn \u003cgithub@gone.nl\u003e",
            "timestamp": "2026-04-08T08:52:50+02:00",
            "tree_id": "fbe228c158ea6d0c18a4480ae2f1f750be829941",
            "url": "https://github.com/docker/compose/commit/ae92bef4e1d02bfb75afeafc0ce9334a133f952f"
          },
          "organization": {
            "avatar_url": "https://avatars.githubusercontent.com/u/5429470?v=4",
            "description": "Docker helps developers bring their ideas to life by conquering the complexity of app development.",
            "events_url": "https://api.github.com/orgs/docker/events",
            "hooks_url": "https://api.github.com/orgs/docker/hooks",
            "id": 5429470,
            "issues_url": "https://api.github.com/orgs/docker/issues",
            "login": "docker",
            "members_url": "https://api.github.com/orgs/docker/members{/member}",
            "node_id": "MDEyOk9yZ2FuaXphdGlvbjU0Mjk0NzA=",
            "public_members_url": "https://api.github.com/orgs/docker/public_members{/member}",
            "repos_url": "https://api.github.com/orgs/docker/repos",
            "url": "https://api.github.com/orgs/docker"
          },
          "pusher": {
            "email": "705411+glours@users.noreply.github.com",
            "name": "glours"
          },
          "ref": "refs/tags/v5.1.2",
          "repository": {
            "allow_forking": true,
            "archive_url": "https://api.github.com/repos/docker/compose/{archive_format}{/ref}",
            "archived": false,
            "assignees_url": "https://api.github.com/repos/docker/compose/assignees{/user}",
            "blobs_url": "https://api.github.com/repos/docker/compose/git/blobs{/sha}",
            "branches_url": "https://api.github.com/repos/docker/compose/branches{/branch}",
            "clone_url": "https://github.com/docker/compose.git",
            "collaborators_url": "https://api.github.com/repos/docker/compose/collaborators{/collaborator}",
            "comments_url": "https://api.github.com/repos/docker/compose/comments{/number}",
            "commits_url": "https://api.github.com/repos/docker/compose/commits{/sha}",
            "compare_url": "https://api.github.com/repos/docker/compose/compare/{base}...{head}",
            "contents_url": "https://api.github.com/repos/docker/compose/contents/{+path}",
            "contributors_url": "https://api.github.com/repos/docker/compose/contributors",
            "created_at": 1386589258,
            "custom_properties": {
              "Tier1": "true"
            },
            "default_branch": "main",
            "deployments_url": "https://api.github.com/repos/docker/compose/deployments",
            "description": "Define and run multi-container applications with Docker",
            "disabled": false,
            "downloads_url": "https://api.github.com/repos/docker/compose/downloads",
            "events_url": "https://api.github.com/repos/docker/compose/events",
            "fork": false,
            "forks": 5767,
            "forks_count": 5767,
            "forks_url": "https://api.github.com/repos/docker/compose/forks",
            "full_name": "docker/compose",
            "git_commits_url": "https://api.github.com/repos/docker/compose/git/commits{/sha}",
            "git_refs_url": "https://api.github.com/repos/docker/compose/git/refs{/sha}",
            "git_tags_url": "https://api.github.com/repos/docker/compose/git/tags{/sha}",
            "git_url": "git://github.com/docker/compose.git",
            "has_discussions": false,
            "has_downloads": true,
            "has_issues": true,
            "has_pages": false,
            "has_projects": false,
            "has_pull_requests": true,
            "has_wiki": false,
            "homepage": "https://docs.docker.com/compose/",
            "hooks_url": "https://api.github.com/repos/docker/compose/hooks",
            "html_url": "https://github.com/docker/compose",
            "id": 15045751,
            "is_template": false,
            "issue_comment_url": "https://api.github.com/repos/docker/compose/issues/comments{/number}",
            "issue_events_url": "https://api.github.com/repos/docker/compose/issues/events{/number}",
            "issues_url": "https://api.github.com/repos/docker/compose/issues{/number}",
            "keys_url": "https://api.github.com/repos/docker/compose/keys{/key_id}",
            "labels_url": "https://api.github.com/repos/docker/compose/labels{/name}",
            "language": "Go",
            "languages_url": "https://api.github.com/repos/docker/compose/languages",
            "license": {
              "key": "apache-2.0",
              "name": "Apache License 2.0",
              "node_id": "MDc6TGljZW5zZTI=",
              "spdx_id": "Apache-2.0",
              "url": "https://api.github.com/licenses/apache-2.0"
            },
            "master_branch": "main",
            "merges_url": "https://api.github.com/repos/docker/compose/merges",
            "milestones_url": "https://api.github.com/repos/docker/compose/milestones{/number}",
            "mirror_url": null,
            "name": "compose",
            "node_id": "MDEwOlJlcG9zaXRvcnkxNTA0NTc1MQ==",
            "notifications_url": "https://api.github.com/repos/docker/compose/notifications{?since,all,participating}",
            "open_issues": 88,
            "open_issues_count": 88,
            "organization": "docker",
            "owner": {
              "avatar_url": "https://avatars.githubusercontent.com/u/5429470?v=4",
              "email": "github@docker.com",
              "events_url": "https://api.github.com/users/docker/events{/privacy}",
              "followers_url": "https://api.github.com/users/docker/followers",
              "following_url": "https://api.github.com/users/docker/following{/other_user}",
              "gists_url": "https://api.github.com/users/docker/gists{/gist_id}",
              "gravatar_id": "",
              "html_url": "https://github.com/docker",
              "id": 5429470,
              "login": "docker",
              "name": "docker",
              "node_id": "MDEyOk9yZ2FuaXphdGlvbjU0Mjk0NzA=",
              "organizations_url": "https://api.github.com/users/docker/orgs",
              "received_events_url": "https://api.github.com/users/docker/received_events",
              "repos_url": "https://api.github.com/users/docker/repos",
              "site_admin": false,
              "starred_url": "https://api.github.com/users/docker/starred{/owner}{/repo}",
              "subscriptions_url": "https://api.github.com/users/docker/subscriptions",
              "type": "Organization",
              "url": "https://api.github.com/users/docker",
              "user_view_type": "public"
            },
            "private": false,
            "pull_request_creation_policy": "all",
            "pulls_url": "https://api.github.com/repos/docker/compose/pulls{/number}",
            "pushed_at": 1775723799,
            "releases_url": "https://api.github.com/repos/docker/compose/releases{/id}",
            "size": 27844,
            "ssh_url": "git@github.com:docker/compose.git",
            "stargazers": 37228,
            "stargazers_count": 37228,
            "stargazers_url": "https://api.github.com/repos/docker/compose/stargazers",
            "statuses_url": "https://api.github.com/repos/docker/compose/statuses/{sha}",
            "subscribers_url": "https://api.github.com/repos/docker/compose/subscribers",
            "subscription_url": "https://api.github.com/repos/docker/compose/subscription",
            "svn_url": "https://github.com/docker/compose",
            "tags_url": "https://api.github.com/repos/docker/compose/tags",
            "teams_url": "https://api.github.com/repos/docker/compose/teams",
            "topics": [
              "docker",
              "docker-compose",
              "go",
              "golang",
              "orchestration"
            ],
            "trees_url": "https://api.github.com/repos/docker/compose/git/trees{/sha}",
            "updated_at": "2026-04-09T08:36:01Z",
            "url": "https://api.github.com/repos/docker/compose",
            "visibility": "public",
            "watchers": 37228,
            "watchers_count": 37228,
            "web_commit_signoff_required": true
          },
          "sender": {
            "avatar_url": "https://avatars.githubusercontent.com/u/705411?v=4",
            "events_url": "https://api.github.com/users/glours/events{/privacy}",
            "followers_url": "https://api.github.com/users/glours/followers",
            "following_url": "https://api.github.com/users/glours/following{/other_user}",
            "gists_url": "https://api.github.com/users/glours/gists{/gist_id}",
            "gravatar_id": "",
            "html_url": "https://github.com/glours",
            "id": 705411,
            "login": "glours",
            "node_id": "MDQ6VXNlcjcwNTQxMQ==",
            "organizations_url": "https://api.github.com/users/glours/orgs",
            "received_events_url": "https://api.github.com/users/glours/received_events",
            "repos_url": "https://api.github.com/users/glours/repos",
            "site_admin": false,
            "starred_url": "https://api.github.com/users/glours/starred{/owner}{/repo}",
            "subscriptions_url": "https://api.github.com/users/glours/subscriptions",
            "type": "User",
            "url": "https://api.github.com/users/glours",
            "user_view_type": "public"
          }
        },
        "github_job": "build",
        "github_ref": "refs/tags/v5.1.2",
        "github_ref_name": "v5.1.2",
        "github_ref_protected": "true",
        "github_ref_type": "tag",
        "github_repository": "docker/compose",
        "github_repository_id": "15045751",
        "github_repository_owner": "docker",
        "github_repository_owner_id": "5429470",
        "github_run_attempt": "1",
        "github_run_id": "24180795825",
        "github_run_number": "8598",
        "github_runner_arch": "X64",
        "github_runner_environment": "github-hosted",
        "github_runner_image_os": "ubuntu24",
        "github_runner_image_version": "20260329.72.1",
        "github_runner_name": "GitHub Actions 1006952684",
        "github_runner_os": "Linux",
        "github_runner_tracking_id": "github_4c91955b-232d-43aa-b0e6-47876e46c295",
        "github_server_url": "https://github.com",
        "github_triggering_actor": "glours",
        "github_workflow": "ci",
        "github_workflow_ref": "docker/compose/.github/workflows/ci.yml@refs/tags/v5.1.2",
        "github_workflow_sha": "ae92bef4e1d02bfb75afeafc0ce9334a133f952f"
      }
    },
    "runDetails": {
      "builder": {
        "id": "https://github.com/docker/compose/actions/runs/24180795825/attempts/1"
      },
      "metadata": {
        "invocationId": "hg9kcve641etkv8ngom9xw410",
        "startedOn": "2026-04-09T08:37:48.93268007Z",
        "finishedOn": "2026-04-09T08:38:51.73949988Z",
        "buildkit_metadata": {
          "source": {
            "locations": {
              "step0": {
                "locations": [
                  {
                    "ranges": [
                      {
                        "start": {
                          "line": 184
                        },
                        "end": {
                          "line": 184
                        }
                      }
                    ]
                  }
                ]
              },
              "step1": {
                "locations": [
                  {
                    "ranges": [
                      {
                        "start": {
                          "line": 185
                        },
                        "end": {
                          "line": 185
                        }
                      }
                    ]
                  }
                ]
              },
              "step10": {
                "locations": [
                  {
                    "ranges": [
                      {
                        "start": {
                          "line": 31
                        },
                        "end": {
                          "line": 31
                        }
                      }
                    ]
                  }
                ]
              },
              "step11": {
                "locations": [
                  {
                    "ranges": [
                      {
                        "start": {
                          "line": 81
                        },
                        "end": {
                          "line": 81
                        }
                      },
                      {
                        "start": {
                          "line": 82
                        },
                        "end": {
                          "line": 82
                        }
                      },
                      {
                        "start": {
                          "line": 83
                        },
                        "end": {
                          "line": 83
                        }
                      },
                      {
                        "start": {
                          "line": 84
                        },
                        "end": {
                          "line": 84
                        }
                      },
                      {
                        "start": {
                          "line": 85
                        },
                        "end": {
                          "line": 85
                        }
                      },
                      {
                        "start": {
                          "line": 86
                        },
                        "end": {
                          "line": 86
                        }
                      },
                      {
                        "start": {
                          "line": 87
                        },
                        "end": {
                          "line": 87
                        }
                      },
                      {
                        "start": {
                          "line": 88
                        },
                        "end": {
                          "line": 88
                        }
                      }
                    ]
                  }
                ]
              },
              "step12": {
                "locations": [
                  {
                    "ranges": [
                      {
                        "start": {
                          "line": 175
                        },
                        "end": {
                          "line": 175
                        }
                      }
                    ]
                  }
                ]
              },
              "step13": {
                "locations": [
                  {
                    "ranges": [
                      {
                        "start": {
                          "line": 189
                        },
                        "end": {
                          "line": 189
                        }
                      },
                      {
                        "start": {
                          "line": 190
                        },
                        "end": {
                          "line": 190
                        }
                      },
                      {
                        "start": {
                          "line": 191
                        },
                        "end": {
                          "line": 191
                        }
                      },
                      {
                        "start": {
                          "line": 192
                        },
                        "end": {
                          "line": 192
                        }
                      },
                      {
                        "start": {
                          "line": 193
                        },
                        "end": {
                          "line": 193
                        }
                      },
                      {
                        "start": {
                          "line": 194
                        },
                        "end": {
                          "line": 194
                        }
                      }
                    ]
                  }
                ]
              },
              "step14": {
                "locations": [
                  {
                    "ranges": [
                      {
                        "start": {
                          "line": 197
                        },
                        "end": {
                          "line": 197
                        }
                      }
                    ]
                  }
                ]
              },
              "step2": {
                "locations": [
                  {
                    "ranges": [
                      {
                        "start": {
                          "line": 36
                        },
                        "end": {
                          "line": 36
                        }
                      }
                    ]
                  }
                ]
              },
              "step3": {
                "locations": [
                  {
                    "ranges": [
                      {
                        "start": {
                          "line": 28
                        },
                        "end": {
                          "line": 28
                        }
                      }
                    ]
                  }
                ]
              },
              "step4": {
                "locations": [
                  {
                    "ranges": [
                      {
                        "start": {
                          "line": 37
                        },
                        "end": {
                          "line": 37
                        }
                      }
                    ]
                  }
                ]
              },
              "step5": {
                "locations": [
                  {
                    "ranges": [
                      {
                        "start": {
                          "line": 38
                        },
                        "end": {
                          "line": 38
                        }
                      },
                      {
                        "start": {
                          "line": 39
                        },
                        "end": {
                          "line": 39
                        }
                      },
                      {
                        "start": {
                          "line": 40
                        },
                        "end": {
                          "line": 40
                        }
                      },
                      {
                        "start": {
                          "line": 41
                        },
                        "end": {
                          "line": 41
                        }
                      },
                      {
                        "start": {
                          "line": 42
                        },
                        "end": {
                          "line": 42
                        }
                      },
                      {
                        "start": {
                          "line": 43
                        },
                        "end": {
                          "line": 43
                        }
                      },
                      {
                        "start": {
                          "line": 44
                        },
                        "end": {
                          "line": 44
                        }
                      },
                      {
                        "start": {
                          "line": 45
                        },
                        "end": {
                          "line": 45
                        }
                      },
                      {
                        "start": {
                          "line": 46
                        },
                        "end": {
                          "line": 46
                        }
                      }
                    ]
                  }
                ]
              },
              "step6": {
                "locations": [
                  {
                    "ranges": [
                      {
                        "start": {
                          "line": 47
                        },
                        "end": {
                          "line": 47
                        }
                      }
                    ]
                  }
                ]
              },
              "step7": {},
              "step8": {
                "locations": [
                  {
                    "ranges": [
                      {
                        "start": {
                          "line": 51
                        },
                        "end": {
                          "line": 51
                        }
                      }
                    ]
                  }
                ]
              },
              "step9": {
                "locations": [
                  {
                    "ranges": [
                      {
                        "start": {
                          "line": 52
                        },
                        "end": {
                          "line": 52
                        }
                      },
                      {
                        "start": {
                          "line": 53
                        },
                        "end": {
                          "line": 53
                        }
                      },
                      {
                        "start": {
                          "line": 54
                        },
                        "end": {
                          "line": 54
                        }
                      }
                    ]
                  }
                ]
              }
            },
            "infos": [
              {
                "filename": "Dockerfile",
                "language": "Dockerfile",
                "data": "IyBzeW50YXg9ZG9ja2VyL2RvY2tlcmZpbGU6MQoKCiMgICBDb3B5cmlnaHQgMjAyMCBEb2NrZXIgQ29tcG9zZSBDTEkgYXV0aG9ycwoKIyAgIExpY2Vuc2VkIHVuZGVyIHRoZSBBcGFjaGUgTGljZW5zZSwgVmVyc2lvbiAyLjAgKHRoZSAiTGljZW5zZSIpOwojICAgeW91IG1heSBub3QgdXNlIHRoaXMgZmlsZSBleGNlcHQgaW4gY29tcGxpYW5jZSB3aXRoIHRoZSBMaWNlbnNlLgojICAgWW91IG1heSBvYnRhaW4gYSBjb3B5IG9mIHRoZSBMaWNlbnNlIGF0CgojICAgICAgIGh0dHA6Ly93d3cuYXBhY2hlLm9yZy9saWNlbnNlcy9MSUNFTlNFLTIuMAoKIyAgIFVubGVzcyByZXF1aXJlZCBieSBhcHBsaWNhYmxlIGxhdyBvciBhZ3JlZWQgdG8gaW4gd3JpdGluZywgc29mdHdhcmUKIyAgIGRpc3RyaWJ1dGVkIHVuZGVyIHRoZSBMaWNlbnNlIGlzIGRpc3RyaWJ1dGVkIG9uIGFuICJBUyBJUyIgQkFTSVMsCiMgICBXSVRIT1VUIFdBUlJBTlRJRVMgT1IgQ09ORElUSU9OUyBPRiBBTlkgS0lORCwgZWl0aGVyIGV4cHJlc3Mgb3IgaW1wbGllZC4KIyAgIFNlZSB0aGUgTGljZW5zZSBmb3IgdGhlIHNwZWNpZmljIGxhbmd1YWdlIGdvdmVybmluZyBwZXJtaXNzaW9ucyBhbmQKIyAgIGxpbWl0YXRpb25zIHVuZGVyIHRoZSBMaWNlbnNlLgoKQVJHIEdPX1ZFUlNJT049MS4yNS44CkFSRyBYWF9WRVJTSU9OPTEuOS4wCkFSRyBHT0xBTkdDSV9MSU5UX1ZFUlNJT049djIuMTEuMwpBUkcgQURETElDRU5TRV9WRVJTSU9OPXYxLjAuMAoKQVJHIEJVSUxEX1RBR1M9ImUyZSIKQVJHIERPQ1NfRk9STUFUUz0ibWQseWFtbCIKQVJHIExJQ0VOU0VfRklMRVM9Ii4qXChEb2NrZXJmaWxlXHxNYWtlZmlsZVx8XC5nb1x8XC5oY2xcfFwuc2hcKSIKCiMgeHggaXMgYSBoZWxwZXIgZm9yIGNyb3NzLWNvbXBpbGF0aW9uCkZST00gLS1wbGF0Zm9ybT0ke0JVSUxEUExBVEZPUk19IHRvbmlzdGlpZ2kveHg6JHtYWF9WRVJTSU9OfSBBUyB4eAoKIyBvc3hjcm9zcyBjb250YWlucyB0aGUgTWFjT1NYIGNyb3NzIHRvb2xjaGFpbiBmb3IgeHgKRlJPTSBjcmF6eW1heC9vc3hjcm9zczoxNS41LWFscGluZSBBUyBvc3hjcm9zcwoKRlJPTSBnb2xhbmdjaS9nb2xhbmdjaS1saW50OiR7R09MQU5HQ0lfTElOVF9WRVJTSU9OfS1hbHBpbmUgQVMgZ29sYW5nY2ktbGludApGUk9NIGdoY3IuaW8vZ29vZ2xlL2FkZGxpY2Vuc2U6JHtBRERMSUNFTlNFX1ZFUlNJT059IEFTIGFkZGxpY2Vuc2UKCkZST00gLS1wbGF0Zm9ybT0ke0JVSUxEUExBVEZPUk19IGdvbGFuZzoke0dPX1ZFUlNJT059LWFscGluZTMuMjIgQVMgYmFzZQpDT1BZIC0tZnJvbT14eCAvIC8KUlVOIGFwayBhZGQgLS1uby1jYWNoZSBcCiAgICAgIGNsYW5nIFwKICAgICAgZG9ja2VyIFwKICAgICAgZmlsZSBcCiAgICAgIGZpbmR1dGlscyBcCiAgICAgIGdpdCBcCiAgICAgIG1ha2UgXAogICAgICBwcm90b2MgXAogICAgICBwcm90b2J1Zi1kZXYKV09SS0RJUiAvc3JjCkVOViBDR09fRU5BQkxFRD0wCgpGUk9NIGJhc2UgQVMgYnVpbGQtYmFzZQpDT1BZIGdvLiogLgpSVU4gLS1tb3VudD10eXBlPWNhY2hlLHRhcmdldD0vZ28vcGtnL21vZCBcCiAgICAtLW1vdW50PXR5cGU9Y2FjaGUsdGFyZ2V0PS9yb290Ly5jYWNoZS9nby1idWlsZCBcCiAgICBnbyBtb2QgZG93bmxvYWQKCkZST00gYnVpbGQtYmFzZSBBUyB2ZW5kb3JlZApSVU4gLS1tb3VudD10eXBlPWJpbmQsdGFyZ2V0PS4scncgXAogICAgLS1tb3VudD10eXBlPWNhY2hlLHRhcmdldD0vZ28vcGtnL21vZCBcCiAgICBnbyBtb2QgdGlkeSAmJiBta2RpciAvb3V0ICYmIGNwIGdvLm1vZCBnby5zdW0gL291dAoKRlJPTSBzY3JhdGNoIEFTIHZlbmRvci11cGRhdGUKQ09QWSAtLWZyb209dmVuZG9yZWQgL291dCAvCgpGUk9NIHZlbmRvcmVkIEFTIHZlbmRvci12YWxpZGF0ZQpSVU4gLS1tb3VudD10eXBlPWJpbmQsdGFyZ2V0PS4scncgPDxFT1QKICBzZXQgLWUKICBnaXQgYWRkIC1BCiAgY3AgLXJmIC9vdXQvKiAuCiAgZGlmZj0kKGdpdCBzdGF0dXMgLS1wb3JjZWxhaW4gLS0gZ28ubW9kIGdvLnN1bSkKICBpZiBbIC1uICIkZGlmZiIgXTsgdGhlbgogICAgZWNobyA+JjIgJ0VSUk9SOiBWZW5kb3IgcmVzdWx0IGRpZmZlcnMuIFBsZWFzZSB2ZW5kb3IgeW91ciBwYWNrYWdlIHdpdGggIm1ha2UgZ28tbW9kLXRpZHkiJwogICAgZWNobyAiJGRpZmYiCiAgICBleGl0IDEKICBmaQpFT1QKCkZST00gYnVpbGQtYmFzZSBBUyBidWlsZApBUkcgQlVJTERfVEFHUwpBUkcgQlVJTERfRkxBR1MKQVJHIFRBUkdFVFBMQVRGT1JNClJVTiAtLW1vdW50PXR5cGU9YmluZCx0YXJnZXQ9LiBcCiAgICAtLW1vdW50PXR5cGU9Y2FjaGUsdGFyZ2V0PS9yb290Ly5jYWNoZSBcCiAgICAtLW1vdW50PXR5cGU9Y2FjaGUsdGFyZ2V0PS9nby9wa2cvbW9kIFwKICAgIC0tbW91bnQ9dHlwZT1iaW5kLGZyb209b3N4Y3Jvc3Msc3JjPS9vc3hzZGssdGFyZ2V0PS94eC1zZGsgXAogICAgeHgtZ28gLS13cmFwICYmIFwKICAgIGlmIFsgIiQoeHgtaW5mbyBvcykiID09ICJkYXJ3aW4iIF07IHRoZW4gZXhwb3J0IENHT19FTkFCTEVEPTE7IGV4cG9ydCBCVUlMRF9UQUdTPWZzbm90aWZ5LCRCVUlMRF9UQUdTOyBmaSAmJiBcCiAgICBtYWtlIGJ1aWxkIEdPX0JVSUxEVEFHUz0iJEJVSUxEX1RBR1MiIERFU1RESVI9L291dCAmJiBcCiAgICB4eC12ZXJpZnkgLS1zdGF0aWMgL291dC9kb2NrZXItY29tcG9zZQoKRlJPTSBidWlsZC1iYXNlIEFTIGxpbnQKQVJHIEJVSUxEX1RBR1MKRU5WIEdPTEFOR0NJX0xJTlRfQ0FDSEU9L2NhY2hlL2dvbGFuZ2NpLWxpbnQKUlVOIC0tbW91bnQ9dHlwZT1iaW5kLHRhcmdldD0uIFwKICAgIC0tbW91bnQ9dHlwZT1jYWNoZSx0YXJnZXQ9L3Jvb3QvLmNhY2hlIFwKICAgIC0tbW91bnQ9dHlwZT1jYWNoZSx0YXJnZXQ9L2dvL3BrZy9tb2QgXAogICAgLS1tb3VudD10eXBlPWNhY2hlLHRhcmdldD0vY2FjaGUvZ29sYW5nY2ktbGludCBcCiAgICAtLW1vdW50PWZyb209Z29sYW5nY2ktbGludCxzb3VyY2U9L3Vzci9iaW4vZ29sYW5nY2ktbGludCx0YXJnZXQ9L3Vzci9iaW4vZ29sYW5nY2ktbGludCBcCiAgICBnb2xhbmdjaS1saW50IGNhY2hlIHN0YXR1cyAmJiBcCiAgICBnb2xhbmdjaS1saW50IHJ1biAtLWJ1aWxkLXRhZ3MgIiRCVUlMRF9UQUdTIiAuLy4uLgoKRlJPTSBidWlsZC1iYXNlIEFTIHRlc3QKQVJHIENHT19FTkFCTEVEPTAKQVJHIEJVSUxEX1RBR1MKUlVOIC0tbW91bnQ9dHlwZT1iaW5kLHRhcmdldD0uIFwKICAgIC0tbW91bnQ9dHlwZT1jYWNoZSx0YXJnZXQ9L3Jvb3QvLmNhY2hlIFwKICAgIC0tbW91bnQ9dHlwZT1jYWNoZSx0YXJnZXQ9L2dvL3BrZy9tb2QgXAogICAgcm0gLXJmIC90bXAvY292ZXJhZ2UgJiYgXAogICAgbWtkaXIgLXAgL3RtcC9jb3ZlcmFnZSAmJiBcCiAgICBybSAtcmYgL3RtcC9yZXBvcnQgJiYgXAogICAgbWtkaXIgLXAgL3RtcC9yZXBvcnQgJiYgXAogICAgZ28gcnVuIGdvdGVzdC50b29scy9nb3Rlc3RzdW1AbGF0ZXN0IC0tZm9ybWF0IHRlc3RuYW1lIC0tanVuaXRmaWxlICIvdG1wL3JlcG9ydC9yZXBvcnQueG1sIiAtLSAtdGFncyAiJEJVSUxEX1RBR1MiIC12IC1jb3ZlciAtY292ZXJtb2RlPWF0b21pYyAkKGdvIGxpc3QgICQoVEFHUykgLi8uLi4gfCBncmVwIC12RSAnZTJlJykgLWFyZ3MgLXRlc3QuZ29jb3ZlcmRpcj0iL3RtcC9jb3ZlcmFnZSIgJiYgXAogICAgZ28gdG9vbCBjb3ZkYXRhIHBlcmNlbnQgLWk9L3RtcC9jb3ZlcmFnZQoKRlJPTSBzY3JhdGNoIEFTIHRlc3QtY292ZXJhZ2UKQ09QWSAtLWZyb209dGVzdCAtLWxpbmsgL3RtcC9jb3ZlcmFnZSAvCkNPUFkgLS1mcm9tPXRlc3QgLS1saW5rIC90bXAvcmVwb3J0IC8KCkZST00gYmFzZSBBUyBsaWNlbnNlLXNldApBUkcgTElDRU5TRV9GSUxFUwpSVU4gLS1tb3VudD10eXBlPWJpbmQsdGFyZ2V0PS4scncgXAogICAgLS1tb3VudD1mcm9tPWFkZGxpY2Vuc2Usc291cmNlPS9hcHAvYWRkbGljZW5zZSx0YXJnZXQ9L3Vzci9iaW4vYWRkbGljZW5zZSBcCiAgICBmaW5kIC4gLXJlZ2V4ICIke0xJQ0VOU0VfRklMRVN9IiB8IHhhcmdzIGFkZGxpY2Vuc2UgLWMgJ0RvY2tlciBDb21wb3NlIENMSScgLWwgYXBhY2hlICYmIFwKICAgIG1rZGlyIC9vdXQgJiYgXAogICAgZmluZCAuIC1yZWdleCAiJHtMSUNFTlNFX0ZJTEVTfSIgfCBjcGlvIC1wZG0gL291dAoKRlJPTSBzY3JhdGNoIEFTIGxpY2Vuc2UtdXBkYXRlCkNPUFkgLS1mcm9tPXNldCAvb3V0IC8KCkZST00gYmFzZSBBUyBsaWNlbnNlLXZhbGlkYXRlCkFSRyBMSUNFTlNFX0ZJTEVTClJVTiAtLW1vdW50PXR5cGU9YmluZCx0YXJnZXQ9LiBcCiAgICAtLW1vdW50PWZyb209YWRkbGljZW5zZSxzb3VyY2U9L2FwcC9hZGRsaWNlbnNlLHRhcmdldD0vdXNyL2Jpbi9hZGRsaWNlbnNlIFwKICAgIGZpbmQgLiAtcmVnZXggIiR7TElDRU5TRV9GSUxFU30iIHwgeGFyZ3MgYWRkbGljZW5zZSAtY2hlY2sgLWMgJ0RvY2tlciBDb21wb3NlIENMSScgLWwgYXBhY2hlIC1pZ25vcmUgdmFsaWRhdGUgLWlnbm9yZSB0ZXN0ZGF0YSAtaWdub3JlIHJlc29sdmVwYXRoIC12CgpGUk9NIGJhc2UgQVMgZG9jc2dlbgpXT1JLRElSIC9zcmMKUlVOIC0tbW91bnQ9dGFyZ2V0PS4gXAogICAgLS1tb3VudD10YXJnZXQ9L3Jvb3QvLmNhY2hlLHR5cGU9Y2FjaGUgXAogICAgLS1tb3VudD10eXBlPWNhY2hlLHRhcmdldD0vZ28vcGtnL21vZCBcCiAgICBnbyBidWlsZCAtbyAvb3V0L2RvY3NnZW4gLi9kb2NzL3lhbWwvbWFpbi9nZW5lcmF0ZS5nbwoKRlJPTSAtLXBsYXRmb3JtPSR7QlVJTERQTEFURk9STX0gYWxwaW5lIEFTIGRvY3MtYnVpbGQKUlVOIGFwayBhZGQgLS1uby1jYWNoZSByc3luYyBnaXQKV09SS0RJUiAvc3JjCkNPUFkgLS1mcm9tPWRvY3NnZW4gL291dC9kb2NzZ2VuIC91c3IvYmluCkFSRyBET0NTX0ZPUk1BVFMKUlVOIC0tbW91bnQ9dGFyZ2V0PS9jb250ZXh0IFwKICAgIC0tbW91bnQ9dGFyZ2V0PS4sdHlwZT10bXBmcyA8PEVPVAogIHNldCAtZQogIHJzeW5jIC1hIC9jb250ZXh0Ly4gLgogIGRvY3NnZW4gLS1mb3JtYXRzICIkRE9DU19GT1JNQVRTIiAtLXNvdXJjZSAiZG9jcy9yZWZlcmVuY2UiCiAgbWtkaXIgL291dAogIGNwIC1yIGRvY3MvcmVmZXJlbmNlIC9vdXQKRU9UCgpGUk9NIHNjcmF0Y2ggQVMgZG9jcy11cGRhdGUKQ09QWSAtLWZyb209ZG9jcy1idWlsZCAvb3V0IC9vdXQKCkZST00gZG9jcy1idWlsZCBBUyBkb2NzLXZhbGlkYXRlClJVTiAtLW1vdW50PXRhcmdldD0vY29udGV4dCBcCiAgICAtLW1vdW50PXRhcmdldD0uLHR5cGU9dG1wZnMgPDxFT1QKICBzZXQgLWUKICByc3luYyAtYSAvY29udGV4dC8uIC4KICBnaXQgYWRkIC1BCiAgcm0gLXJmIGRvY3MvcmVmZXJlbmNlLyoKICBjcCAtcmYgL291dC8qIC4vZG9jcy8KICBpZiBbIC1uICIkKGdpdCBzdGF0dXMgLS1wb3JjZWxhaW4gLS0gZG9jcy9yZWZlcmVuY2UpIiBdOyB0aGVuCiAgICBlY2hvID4mMiAnRVJST1I6IERvY3MgcmVzdWx0IGRpZmZlcnMuIFBsZWFzZSB1cGRhdGUgd2l0aCAibWFrZSBkb2NzIicKICAgIGdpdCBzdGF0dXMgLS1wb3JjZWxhaW4gLS0gZG9jcy9yZWZlcmVuY2UKICAgIGV4aXQgMQogIGZpCkVPVAoKRlJPTSBzY3JhdGNoIEFTIGJpbmFyeS11bml4CkNPUFkgLS1saW5rIC0tZnJvbT1idWlsZCAvb3V0L2RvY2tlci1jb21wb3NlIC8KRlJPTSBiaW5hcnktdW5peCBBUyBiaW5hcnktZGFyd2luCkZST00gYmluYXJ5LXVuaXggQVMgYmluYXJ5LWxpbnV4CkZST00gc2NyYXRjaCBBUyBiaW5hcnktd2luZG93cwpDT1BZIC0tbGluayAtLWZyb209YnVpbGQgL291dC9kb2NrZXItY29tcG9zZSAvZG9ja2VyLWNvbXBvc2UuZXhlCkZST00gYmluYXJ5LSRUQVJHRVRPUyBBUyBiaW5hcnkKIyBlbmFibGUgc2Nhbm5pbmcgZm9yIHRoaXMgc3RhZ2UKQVJHIEJVSUxES0lUX1NCT01fU0NBTl9TVEFHRT10cnVlCgpGUk9NIC0tcGxhdGZvcm09JEJVSUxEUExBVEZPUk0gYWxwaW5lIEFTIHJlbGVhc2VyCldPUktESVIgL3dvcmsKQVJHIFRBUkdFVE9TCkFSRyBUQVJHRVRBUkNICkFSRyBUQVJHRVRWQVJJQU5UClJVTiAtLW1vdW50PWZyb209YmluYXJ5IFwKICAgIG1rZGlyIC1wIC9vdXQgJiYgXAogICAgIyBUT0RPOiBzaG91bGQganVzdCB1c2Ugc3RhbmRhcmQgYXJjaAogICAgVEFSR0VUQVJDSD0kKFsgIiRUQVJHRVRBUkNIIiA9ICJhbWQ2NCIgXSAmJiBlY2hvICJ4ODZfNjQiIHx8IGVjaG8gIiRUQVJHRVRBUkNIIik7IFwKICAgIFRBUkdFVEFSQ0g9JChbICIkVEFSR0VUQVJDSCIgPSAiYXJtNjQiIF0gJiYgZWNobyAiYWFyY2g2NCIgfHwgZWNobyAiJFRBUkdFVEFSQ0giKTsgXAogICAgY3AgZG9ja2VyLWNvbXBvc2UqICIvb3V0L2RvY2tlci1jb21wb3NlLSR7VEFSR0VUT1N9LSR7VEFSR0VUQVJDSH0ke1RBUkdFVFZBUklBTlR9JChscyBkb2NrZXItY29tcG9zZSogfCBzZWQgLWUgJ3MvXmRvY2tlci1jb21wb3NlLy8nKSIKCkZST00gc2NyYXRjaCBBUyByZWxlYXNlCkNPUFkgLS1mcm9tPXJlbGVhc2VyIC9vdXQvIC8K",
                "llbDefinition": [
                  {
                    "id": "step0",
                    "op": {
                      "Op": {
                        "source": {
                          "identifier": "git://github.com/docker/compose.git#refs/tags/v5.1.2",
                          "attrs": {
                            "git.authheadersecret": "GIT_AUTH_HEADER",
                            "git.authtokensecret": "GIT_AUTH_TOKEN",
                            "git.fullurl": "https://github.com/docker/compose.git",
                            "git.keepgitdir": "true"
                          }
                        }
                      },
                      "constraints": {}
                    }
                  },
                  {
                    "id": "step1",
                    "op": {
                      "Op": {}
                    },
                    "inputs": [
                      "step0:0"
                    ]
                  }
                ],
                "digestMapping": {
                  "sha256:1ebe486274fd1b9041d6430e2c392c482d11d918621f1618100c843923d5b3ff": "step0",
                  "sha256:2c1d965e3be4d017efd51d912fb33e314ef5d22546c106aab61828f0b6116278": "step1"
                }
              }
            ]
          },
          "layers": {
            "step0:0": [
              [
                {
                  "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
                  "digest": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153",
                  "size": 3861821
                }
              ]
            ],
            "step10:0": [
              [
                {
                  "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
                  "digest": "sha256:882407732d65251dc9a941946cf4783da4a21d3d5badeff8918ac80fdb8a9706",
                  "size": 142
                }
              ]
            ],
            "step2:0": [
              [
                {
                  "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
                  "digest": "sha256:d49a2dee86fb12766dd648402d010ca105846a41bd58738454e53780d4bb8e97",
                  "size": 3804875
                },
                {
                  "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
                  "digest": "sha256:aa6c04543a79162c209c2438982584ce2766748b56054d4573dd418a570d6b96",
                  "size": 291158
                },
                {
                  "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
                  "digest": "sha256:b45a826c456c6e86847b4522633144d32e8278c39b206001c48f7ff990039794",
                  "size": 60171029
                },
                {
                  "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
                  "digest": "sha256:c81448b65a2967f0391fb7794f00d0c4699914c2cfcb38dff5a45dd68259a523",
                  "size": 126
                },
                {
                  "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
                  "digest": "sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1",
                  "size": 32
                }
              ]
            ],
            "step3:0": [
              [
                {
                  "mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
                  "digest": "sha256:ff62ee5b594035d8ad03d05aadc05e2a73f7e0e11bf2574dc5473677a60e22b4",
                  "size": 17700
                }
              ]
            ]
          }
        },
        "buildkit_completeness": {
          "request": true,
          "resolvedDependencies": true
        }
      }
    }
  }
}