fonts-liberation@1:1.07.4-11 (no licenses found)
libatspi2.0-0@2.44.0-3 (AFL-2.1, GPL-2.0-only, GPL-2.0-or-later, LGPL-2.0-only, LGPL-2.0-or-later, public-domain)
libxfixes3@1:6.0.0-1 (HPND-sell-variant)
libxshmfence1@1.3-1build4 (HPND-sell-variant)
libxdamage1@1:1.1.5-2build2 (HPND-sell-variant)
libxrandr2@2:1.5.2-1build1 (HPND-sell-variant)
libnss3@2:3.98-0ubuntu0.22.04.4 (BSD-3, MPL-2.0, Zlib, public-domain)
libgraphite2-3@1.3.14-1ubuntu0.1 (Artistic, GPL-1.0-only, GPL-1.0-or-later, GPL-2.0-only, GPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, MPL-1.1, custom-sil-open-font-license, public-domain)
libavahi-common3@0.8-5ubuntu5.5 (BSD-2-Clause-Views, LGPL-2.0-or-later)
libpango-1.0-0@1.50.6+ds-2ubuntu1 (Bitstream-Vera, CC-BY-SA-3.0, CC0-1.0, CC0-1.0,, Chromium-BSD-style, Example, Expat, GPL-2.0-or-later, GPL-2.0-only, GPL-3.0-only, GPL-3.0-or-later, ICU, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, MPL-1.1, OFL-1.1, TCL, Unicode)
libxcomposite1@1:0.4.5-1build2 (HPND-sell-variant)
libxkbcommon0@1.4.0-1 (HPND)
libcups2@2.4.1op1-1ubuntu4.21 (Apache-2.0-with-GPL2-LGPL2-Exception, FSFUL, Zlib)
libavahi-common-data@0.8-5ubuntu5.5 (BSD-2-Clause-Views, LGPL-2.0-or-later)
libfribidi0@1.0.8-2ubuntu3.1 (LGPL-2.1-only, LGPL-2.1-or-later)
libthai0@0.1.29-1build1 (GPL-2.0-only, GPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later)
libpangoft2-1.0-0@1.50.6+ds-2ubuntu1 (Bitstream-Vera, CC-BY-SA-3.0, CC0-1.0, CC0-1.0,, Chromium-BSD-style, Example, Expat, GPL-2.0-or-later, GPL-2.0-only, GPL-3.0-only, GPL-3.0-or-later, ICU, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, MPL-1.1, OFL-1.1, TCL, Unicode)
libdbus-1-3@1.12.20-2ubuntu4.1 (AFL-2.1, BSD-3-clause-generic, Expat, GPL-2.0-only, GPL-2.0-or-later, Tcl-BSDish, g10-permissive)
fontconfig@2.13.1-4.2ubuntu5 (HPND-sell-variant)
libgbm1@23.2.1-1ubuntu3.1~22.04.4 (BSD-3-google, BSL, GPL, GPL-1.0-only, GPL-1.0-or-later, GPL-2.0-only, Khronos, MLAA, SGI)
libthai-data@0.1.29-1build1 (GPL-2.0-only, GPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later)
xkb-data@2.33-1 (HPND, HPND-sell-variant, ICU)
libatk1.0-data@2.36.0-3build1 (LGPL-2.0-or-later)
libpangocairo-1.0-0@1.50.6+ds-2ubuntu1 (Bitstream-Vera, CC-BY-SA-3.0, CC0-1.0, CC0-1.0,, Chromium-BSD-style, Example, Expat, GPL-2.0-or-later, GPL-2.0-only, GPL-3.0-only, GPL-3.0-or-later, ICU, LGPL-2.0-only, LGPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later, MPL-1.1, OFL-1.1, TCL, Unicode)
libasound2-data@1.2.6.1-1ubuntu1.2 (LGPL-2.1-only, LPGL-2.1+)
libatk-bridge2.0-0@2.38.0-3 (GPL-2.0-only, LGPL-2.0-only, LGPL-2.0-or-later)
libavahi-client3@0.8-5ubuntu5.5 (BSD-2-Clause-Views, LGPL-2.0-or-later)
libnspr4@2:4.35-0ubuntu0.22.04.1 (MPL-2.0)
libdatrie1@0.2.13-2 (GPL-2.0-only, GPL-2.0-or-later, LGPL-2.1-only, LGPL-2.1-or-later)
libxi6@2:1.8-1build1 (HPND, HPND-sell-variant)
libasound2@1.2.6.1-1ubuntu1.2 (LGPL-2.1-only, LPGL-2.1+)
libatk1.0-0@2.36.0-3build1 (LGPL-2.0-or-later)
Firewall scan summary
Status: upstream (owned by github/gh-aw-firewall). 4 images, 0 Critical, 25 High, 407 Medium, 63 Low, 19 Negligible, 45 license violations.
ghcr.io/github/gh-aw-firewall/agent:0.28.37@sha256:ead1415a77e3892d261c313b467470ed58fbcf4da9fcaab1d31d579d1c57dae1ghcr.io/github/gh-aw-firewall/api-proxy:0.28.37@sha256:347f28353370d542000e78a3df90821cd6e47bdb2c597bb512893c253eb50d28ghcr.io/github/gh-aw-firewall/cli-proxy:0.28.37@sha256:3533f8a9c546566c59a63a289e90ac8eafc1ca79b64b6127f42085ee4883d50fghcr.io/github/gh-aw-firewall/squid:0.28.37@sha256:e9cacf87f23aad7236d07668bfd351d852d4ddf854b19f21ed9d2ffce4e527b5Remediation SLA and guidance
gh aw compile --force-refresh-container-pins; the resulting pin-refresh PR is the default remediation step.Details (severity order; format
ID: package@installed (fix: fixed version))agent
High
Medium
Low
Negligible
Rejected or unknown licenses
api-proxy
High
Medium
Low
Rejected or unknown licenses
cli-proxy
High
Medium
Low
Rejected or unknown licenses
squid
High
Medium
Rejected or unknown licenses