Received: from mx0a-001b2d01.pphosted.com (mx0a-001b2d01.pphosted.com [148.163.156.1]) by gbr-app-1.alpinelinux.org (Postfix) with ESMTPS id 0316D224127 for <~alpine/users@lists.alpinelinux.org>; Mon, 7 Oct 2024 13:40:36 +0000 (UTC) Received: from pps.filterd (m0356517.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 497BnuJH006700 for <~alpine/users@lists.alpinelinux.org>; Mon, 7 Oct 2024 13:40:35 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=from :to:subject:date:message-id:content-type:mime-version; s=pp1; bh=zZYL9omnsd+sIga+Gwo3x671WU+JTRzS/lkMsWRkZao=; b=jJKzxE0yMk88 P5kytJ18Y1lQ6dxiEPHST1sUsGufJg72C+tvqHdtQFnXnWqtwBSMDBHK6eXfDD7w R4N/5hsc0i6Pn0YD6ofHguE3p82J1V/IqF/ZhASjll8gRG9574Vmfv1rUoKTrprx hPwuEIcFNSYGhS2PzX4b1wVOVAl2J0LK6bvrPeBMXvmRWsOiDLPO7btRIquk6ROl 8kE+0qmnh0w7j00s3MKxFhD9c0r3HA22p0I84iA+J9hWRjOUZgvTRby0/6L8Tjwo lMA/O1st5yNXwuybV5yMZc8gQWZs8QmxuL0oAIJJrthc8u/CHARrZAoueP0wbR/5 wL9FXWMqeQ== Received: from nam10-dm6-obe.outbound.protection.outlook.com (mail-dm6nam10lp2101.outbound.protection.outlook.com [104.47.58.101]) by mx0a-001b2d01.pphosted.com (PPS) with ESMTPS id 424f40gmrv-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <~alpine/users@lists.alpinelinux.org>; Mon, 07 Oct 2024 13:40:34 +0000 (GMT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=WEEUhMQsMEwTE0m2jb3WHVc82Cw1qyLJ8v5YziDZd37kvwraVFk8lEUneSmPHNwKbN3NGPSRMVDMgQcLl1wvDqiWiXM+sdVEB5S3NbqJ4fz/RgOUsAyxwVAvZ/QaDQsDrnQ6mVreNmGR6CrLa+2/CjDwOS4HE/wk0YVluJLATAr1iShvha0PO+neGidjAL4ApV1oRUZoCTzOsypucohCAL5uSxnam9lNCa8Bk9q7cg49+ewWHgCEEGAJsqZhlt9ncU82IcZ2aBzRsJC9cOXLxOiSb07ZWiYOa7gmXgVclvvn6A92N98jVesML2b3nn9ApMQ5E/1s67Ko4Btpd0oDkQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=mvMN7kbVu8I+zgWmEQmmZAE1A8ozbNSAKmwD6tE/1lw=; b=b1pNp69zw6Zo7oZLAw0fbhs1a0iGmissIVB1szDToBPMvBGCAbFXbspMIN8xKgi2kenShyEvl/1AUPTNbBUmdnCkZ3Yyq9fvFH71TKXRQqrSaTq1oF5GBo//8lOkFSGxbjBNdbk1e6qA/FTonaqAQYu5kWZ3K7UDWIMtf+ZokZXXG3H1yTTHD6nmEC9cW2TMmJKANCHCob80P8dAPEF856r6O1lCj6sl0r/YxuFIfOzunuwLGslMe8T/5cSKLf8M7rGPm4Qh+Xj9krA/WPD21zbltvm8Q6ZLc1rmHTYza1LFZFCZ5sk9ZuWKziKeo9WpEJdgbF9BNPZi3HnsFluJzA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=uk.ibm.com; dmarc=pass action=none header.from=uk.ibm.com; dkim=pass header.d=uk.ibm.com; arc=none Received: from DS0PR15MB5698.namprd15.prod.outlook.com (2603:10b6:8:145::20) by SA1PR15MB4822.namprd15.prod.outlook.com (2603:10b6:806:1e1::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8026.23; Mon, 7 Oct 2024 13:40:31 +0000 Received: from DS0PR15MB5698.namprd15.prod.outlook.com ([fe80::d892:18ce:1010:e460]) by DS0PR15MB5698.namprd15.prod.outlook.com ([fe80::d892:18ce:1010:e460%6]) with mapi id 15.20.8026.017; Mon, 7 Oct 2024 13:40:31 +0000 From: Nigel Hopper To: "~alpine/users@lists.alpinelinux.org" <~alpine/users@lists.alpinelinux.org> Subject: Alpine Main Packages Lists Thread-Topic: Alpine Main Packages Lists Thread-Index: AQHbGL4znn1eG1RU7katP7RDx7dK9Q== Date: Mon, 7 Oct 2024 13:40:21 +0000 Message-ID: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: DS0PR15MB5698:EE_|SA1PR15MB4822:EE_ x-ms-office365-filtering-correlation-id: a384d56d-e647-4f59-073f-08dce6d59d18 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|376014|366016|38070700018; x-microsoft-antispam-message-info: =?Windows-1252?Q?DeaN6LG0FRTGBCAuRQPBeq3nXgYBWbN2zOrjhniNJlrI/PeDX2OUYRjg?= =?Windows-1252?Q?KoZlXFZt5PrzsybrnUCABZvW6A/UBEMLtrot5MAaHkeQnV4Ov39Y8Au2?= =?Windows-1252?Q?j9F+qAPFH6g4NLMczS0xqHhqgoZW2VRjF2NpccjbbqMYapNO6kvpNNw3?= =?Windows-1252?Q?V9kuqWDFH4UgbdmbltDHKt+kr3mN9aAGXP1ET8+9H32hJchJE2ctql6J?= =?Windows-1252?Q?/oJqLKul1KwWZLykW+SZjDD6dTlZl/+frVufX8fD1iUqCdvEBHwCmRQV?= =?Windows-1252?Q?D0umS7MP/RCB2PJeL8UJ/zy71rOC8pSGw3VvBOspSvLPSQ5pmQ/Fq6jQ?= =?Windows-1252?Q?LwzyG+w3w60Q8nHZL/Uu+f4xHhpa8Tbp9TZSlK3dulZtiR5+i/sEDDfh?= =?Windows-1252?Q?gEEUN0Gt82bpmvElsy5u2eOF1/aEO+wdBVBwE1ZQi5mmEo8BFmdZL5O5?= =?Windows-1252?Q?PjXY/LuMhIQDZXC0lDFGRhxQjwNCmfDriiaPqPumMloC7F5MVN/ABN3x?= =?Windows-1252?Q?iM+k/6I9micg+Ql1VA68XJP8O0uxIjUIQU/Cvccrwaq89Zb5fKkUPSEb?= =?Windows-1252?Q?J9+ix0Utd+VgyxI0xV3C6md6UbiZI/eNLrYHBUMY/8txBEFw8KPEw1y9?= =?Windows-1252?Q?1ioS9uP4SCvJbvILKxWDWy9ml5w4IjgShWILry5ZjW7S8tYahLWysjpG?= =?Windows-1252?Q?eqxs+MAdLzqM7Q79et5cu7XoQb5HomYUtwKPhHSy6nOk3hdW744fqsy6?= =?Windows-1252?Q?WrKsjYzts5hohxvkwW8mmEEQDCwBQwse2vrGq9LXbHd7p3ORDGuv5Amp?= =?Windows-1252?Q?+y/8zbxY+vyR7wcDBSgM+rcQe8/B+yCePJvgLeTrrD0TZJnBjRMJd0Pr?= =?Windows-1252?Q?KbMc+OPrGXSFObhVjp6FG6r7pxmjz5bcRs6U46WMduuPr/45ka2uObue?= =?Windows-1252?Q?ZQE34Pb9tYfaif5m2+RFCQwZ37PMCXmrOKkoM1/2tOJm++nu5LYXFvkv?= =?Windows-1252?Q?+GHx/vNzUHnNgAswONDa5WfrhQJ0B567hxWkRA5X0R0ZxeHsNZ6JIRAq?= =?Windows-1252?Q?HBxFkjATxcJh8ygVrdowUlzs2lykS1TAS2TBIzca+3zh5txpKx0fpdfV?= =?Windows-1252?Q?1QFbCVtkRh+cDahLm36FHI90txq57+caU8UClnErnzK+s7Y7egmqm+ke?= =?Windows-1252?Q?SQQ23nnkiZ8zmZbmCDyGtdMHarITyRjpxcntMaFMqGsXTyx6RqZbfdzF?= =?Windows-1252?Q?bbkvv1jxZwNSvPqLXT4s74xHDamhJNmpAS7t/H1QfNquf6j+AbTrrB+n?= =?Windows-1252?Q?fFktx3IVE3/rF5OoRktj5tTVQSUqRQHgXYh6DZt5FstwQlyj8UWg3XG5?= =?Windows-1252?Q?RmywZiObPFwseQ=3D=3D?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DS0PR15MB5698.namprd15.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(366016)(38070700018);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?Windows-1252?Q?hsj38nZiQ7BeKF5SUmzVzZbp8wAYzh5/6NJReC31nl3v659Wzdw+Riu7?= =?Windows-1252?Q?ASQd5YUzxi38xbDXVa8uXWrkmt64zIP7mfZCNS+KhMWdM1cJ6SV6QZDf?= =?Windows-1252?Q?6Sowzdn/EDGy0qmO5KRQMntDbiWk9zPq2bDXHCFdOwUGPgLx+HYMGeRR?= =?Windows-1252?Q?druTCfkDh+bCHjyZyE4zhCcQnPMMESXUY3T0IpeMrrGg2wQxaf2I+IRz?= =?Windows-1252?Q?9VecPC8qsgb4UXIyWbkIjYzIEm0PTDVrk/OBlhLaNBsUJKqrF/B7uIS1?= =?Windows-1252?Q?1tmWE+j4sdbeJlRwDFMqv3+fMTG3IrJV6SVpUDcg+FELT4CdE4m0K9wR?= =?Windows-1252?Q?SRhGpmtAVE93P76waIR7vW0SxPkPbDRP1BRzIpt4WcHgbTCUGl/qJhWC?= =?Windows-1252?Q?ZJ3QEOGr9TQL82HvOLUQmjljReexr2Mq2QaTjvizC1CpV3B9mkvhYaSs?= =?Windows-1252?Q?JvkuxKYFMrO3zbVXkS23AbttvCZZnhMw2tmceWyMMGvdyjBJ62tXIDca?= =?Windows-1252?Q?5nJ3DnTw6dX71+9pm5CjZ1Ka84iruqJE2LPVpKA9ihjYG4uA4Z4vfrNF?= =?Windows-1252?Q?h2aYL9Sqdhe22tTCP0yKyMzc35c70z/KKN6JlduOnHRGgbAfU9dUJIiz?= =?Windows-1252?Q?xmkLBCHGWLAACw2V1jJUr85hVensVSJ7sQ6v5Ll1NOFyzd47O8K+4p2h?= =?Windows-1252?Q?MLGbbLZZNSXSWiiZIzdzZANVGV8OAZuG7OkwODDO2aRXg1Zuq9khrlZy?= =?Windows-1252?Q?qHQK2pCKUmAhGe8Z6LgDpNl6kA3q6qRQaBL6iLeyaBtEe9SfQnS3fWmC?= =?Windows-1252?Q?WOyIQTXxYYLB7o8nluGIS+qYYiap0qfTdrN2yU/R9rAuXFz6Lr5BHzky?= =?Windows-1252?Q?syXeTqB2dqW/LW1erPkgHNiCYHumKLe3E8LMd1ySCjCtTBECUHb0iTkr?= =?Windows-1252?Q?UkE7ITOE6EWhs7Q5vpg60aALcuCMYHOY5yM9TZilvPPxvZ1dh5zoh0k/?= =?Windows-1252?Q?kuQ1tS9ver9x5aYymMVlUAdeDW4AI/iKxwl3uxZGck9uD45Em3xDz3mm?= =?Windows-1252?Q?gpkqzHHalZ4pkvM7hdrQtpj6JpaiQ9nRAj9cO6nV6tM+WRlsTmNg56aS?= =?Windows-1252?Q?QcYSs84VyX/3odX0IRnbWoTl0U6xUI6tDnXilQRUOhafOMo9ERN5HXfB?= =?Windows-1252?Q?EzaudrsAmpWVClVacrqM9HYyx5JGBXY5qeCgIU2N1HFSVuenJ9u0VjJz?= =?Windows-1252?Q?Tke6ENuS09ep045p2h51AUr0rY7WhvA2GO+fnoAN9UsPdFWrUjWAtY5b?= =?Windows-1252?Q?H0naTAcVwFBm92Jtlj+0fldeE/bf1c79DvCaaEK7j0euadHxSAFImC+W?= =?Windows-1252?Q?uEmUfXBgaVuB1RKrKBTjbPeBnKCpgM1bYPfe9NYO5CxJspgPL9Q0zpgZ?= =?Windows-1252?Q?CgsG20PU72fV0O6XQav8g1D9Uy3wAw2mrBkSkoMjCH7ioTsEwC7vmiil?= =?Windows-1252?Q?nuSylQLrj5yBpoxwNejBHXNvi9CanS7oBsCmYc9WPoyaKjpyTICCuvlD?= =?Windows-1252?Q?sbD8C+5vhtnpzGGvnU8EW0rI/6L+3tEbReM35oowETpNi0nsIU27j9gH?= =?Windows-1252?Q?MezkBqvNd4Hu419Wkj2dXf38pQMqTI86NiYJGcZJYNiH9AbjyQlYQOiA?= =?Windows-1252?Q?p6yAXHPtkiU8XhAFNtoR9+U/WylkJQP5?= Content-Type: multipart/alternative; boundary="_000_DS0PR15MB569879367894D7C1DF19FD54C57D2DS0PR15MB5698namp_" X-OriginatorOrg: uk.ibm.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DS0PR15MB5698.namprd15.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: a384d56d-e647-4f59-073f-08dce6d59d18 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Oct 2024 13:40:31.7636 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: fcf67057-50c9-4ad4-98f3-ffca64add9e9 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: NNz8TA2Gajg6u1fux+OxXtO8vHEBv3Vaa07CjXKSJBqK2HkfiEB99Wg6fFEfc5xoGkcWm1x9RO0a6FfzHV691Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR15MB4822 X-Proofpoint-GUID: morZc9AvQNtpCza3kz9s_AlxgiyPFLcD X-Proofpoint-ORIG-GUID: morZc9AvQNtpCza3kz9s_AlxgiyPFLcD X-Proofpoint-UnRewURL: 0 URL was un-rewritten MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1051,Hydra:6.0.680,FMLib:17.12.62.30 definitions=2024-10-07_05,2024-10-07_01,2024-09-30_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 clxscore=1011 priorityscore=1501 mlxscore=0 adultscore=0 impostorscore=0 suspectscore=0 mlxlogscore=611 spamscore=0 bulkscore=0 lowpriorityscore=0 phishscore=0 malwarescore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2409260000 definitions=main-2410070095 --_000_DS0PR15MB569879367894D7C1DF19FD54C57D2DS0PR15MB5698namp_ Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="windows-1252" Hi I?m part of a team that audit software and one of the things that we have t= o do is differentiate operating system packages from when they are part of = the core operating system and when they are added as part of the build from= something else. We refer to these as Main OS (part of the core OS) and Non-main (added on t= op of the core OS). Alpine has been a bit of a challenge, but would like to know I we could use= either of the following links to give us an accurate list of the Alpine Ma= in OS packages. These would be for 3.20 https://alpine.pkgs.org/3.20/alpine-main-x86_64/ https://pkgs.alpinelinux.org/packages?name=3D&branch=3Dv3.20&repo=3Dmain&ar= ch=3Dx86_64&origin=3D&maintainer=3D&flagged=3D Technically the ?same site? but there are differences between these even th= ough they are the same release. gcompat java-cacerts According to these lists, the first package above is on the list, but the s= econd is not. Based on this, we would likely make gcompat as a Main OS pack= age and java-cacerts is a Non-main operating system package. Are either of these lists an accurate representation of the Main OSs for Al= pine 3.20. Many thanks. Nigel Hopper Security Consultant: Cybersecurity Assessment & Response Services Open Source Software Auditor Advisory Software Engineer QSE Development Top Gun Unless otherwise stated above: IBM United Kingdom Limited Registered in England and Wales with number 741598 Registered office: Building C, IBM Hursley Office, Hursley Park Road, Winch= ester, Hampshire SO21 2JN --_000_DS0PR15MB569879367894D7C1DF19FD54C57D2DS0PR15MB5698namp_ Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="windows-1252"

Hi

 

I=92m part of a team that audit software and one of the things that we= have to do is differentiate operating system packages from when they are p= art of the core operating system and when they are added as part of the build from something else.

 

We refer to these as Main OS (part of the core OS) and Non-main (added= on top of the core OS).

 

Alpine has been a bit of a challenge, but would like to know I we coul= d use either of the following links to give us an accurate list of the Alpi= ne Main OS packages. These would be for 3.20

 

https://a= lpine.pkgs.org/3.20/alpine-main-x86_64/

https://pkgs.alpinelinux.org/packages?name=3D&branc= h=3Dv3.20&repo=3Dmain&arch=3Dx86_64&origin=3D&maintainer=3D= &flagged=3D

 

Technically the =91same site=92 but there are differences between thes= e even though they are the same release.

 

gcompat

java-cacerts

 

According to these lists, the first package above is on the list, but = the second is not. Based on this, we would likely make gcompat as a Main OS= package and java-cacerts is a Non-main operating system package.

 

Are either of these lists an accurate representation of the Main OSs f= or Alpine 3.20.

 

Many thanks.

 

 

Nigel Hopper
Security Consultant: Cy= bersecurity Assessment & Response Services
Open Source Software Auditor

Advisor= y Software Engineer
QSE Development Top Gun&= nbsp;<= /p>

 

Unless otherwise stated above:

IBM United Kingdom Limited
Registered in England and Wales with number 741598
Registered office: Building C, IBM Hursley Office, Hursley Park Road, Winch= ester, Hampshire SO21 2JN
--_000_DS0PR15MB569879367894D7C1DF19FD54C57D2DS0PR15MB5698namp_--