{"ref":"osintverse-community/nerva","version":"1.77.0","scan_status":"warn","signed":true,"signer_identity":"https://github.com/osintverse-community/nerva/.github/workflows/otinstaller-release.yml@refs/heads/main","signer_issuer":"https://token.actions.githubusercontent.com","scans":[{"kind":"malware","result":"pass","ran_at":1792662579812,"summary":{"malware":{"count":0,"findings":[],"note":"not applicable to images"},"secrets":{"count":0,"findings":[]}}},{"kind":"sbom","result":"pass","ran_at":1792662579812,"summary":{"packages":36}},{"kind":"signature","result":"pass","ran_at":1792662579812,"summary":{"status":"pass","identity":"https://github.com/osintverse-community/nerva/.github/workflows/otinstaller-release.yml@refs/heads/main","issuer":"https://token.actions.githubusercontent.com"}},{"kind":"smoke","result":"pass","ran_at":1792662579812,"summary":{"status":"pass","exit_code":0,"network":"bridge","duration_ms":9264,"output_excerpt":"\"SSH server offers weak key exchange algorithms\",\"impact\":\"Weak key exchange algorithms like diffie-hellman-group1-sha1 use small group sizes vulnerable to precomputation attacks.\",\"recommendation\":\"Configure the SSH server to use curve25519-sha256 or diffie-hellman-group16-sha512 as the preferred key exchange algorithms.\",\"cvss\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N\",\"evidence\":\"diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1\"},{\"id\":\"ssh-weak-mac\",\"severity\":\"low\",\"title\":\"SSH Weak MAC Algorithms\",\"description\":\"SSH server offers weak MAC algorithms\",\"impact\":\"Weak MAC algorithms such as hmac-md5 and hmac-sha1-96 have reduced collision resistance, potentially allowing message integrity bypass.\",\"recommendation\":\"Restrict MAC algorithms to hmac-sha2-256-etm or hmac-sha2-512-etm.\",\"cvss\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N\",\"evidence\":\"hmac-md5,hmac-md5-96,hmac-md5-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha1-96,hmac-sha1-96-etm@openssh.com\"}]}\n"}},{"kind":"vuln","result":"warn","ran_at":1792662579812,"summary":{"critical":1,"high":16,"medium":11,"low":0,"fixable_critical":1,"fixable_high":16}}]}