Linux workstation

Fedora 43 native package

openscap-scanner

OpenSCAP Scanner Tool (oscap)

Packages / Fedora 43 / Unspecified / openscap-scanner

[Source: openscap]

Package: openscap-scanner (1:1.4.4-1.fc43)

External Resources:

Homepage: [www.open-scap.org]

Similar packages:

OpenSCAP Scanner Tool (oscap)

The openscap-scanner package contains oscap command-line tool. The oscap is configuration and vulnerability scanner, capable of performing compliance checking using SCAP content. OpenSCAP is a set of open source libraries providing an easier path for integration of the SCAP line of standards. SCAP is a line of standards managed by NIST with the goal of providing a standard language for the expression of Computer Network Defense related information.

Other Packages Related to openscap-scanner:

  • dep: /usr/bin/bash

    Package not available

  • dep: [libcurl] (>= 7.12.0)

    A library for getting files from web servers

  • dep: libopenscap.so.33()(64bit)

    Package not available

  • dep: openscap(x86-64) (= 1:1.4.4-1.fc43)

    Package not available

  • dep: rtld(GNU_HASH)

    Package not available

  • dep: libc.so.6(GLIBC_2.34)(64bit)

    Package not available

Download openscap-scanner

ArchitecturePackage SizeInstalled SizeFiles
x86_6453 KiB129 KiB[list of files]

Package file paths (14)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /etc/bash_completion.d
  • /etc/bash_completion.d/oscap
  • /usr/bin/oscap
  • /usr/bin/oscap-chroot
  • /usr/lib/.build-id
  • /usr/lib/.build-id/3e
  • /usr/lib/.build-id/3e/39ee8f1c39a82a68783f3b51e4b58c6f2e2240
  • /usr/lib/.build-id/80
  • /usr/lib/.build-id/80/8aae7aeb74e2aecfe78892c085173a4fa3da73
  • /usr/lib/.build-id/e9
  • /usr/lib/.build-id/e9/c4503c539a2d1d53f4a457729d5ea1b5559c64
  • /usr/lib/.build-id/f6
  • /usr/lib/.build-id/f6/c4ca3f1bd5b220f0e523168efdb1d8687803fc
  • /usr/share/man/man8/oscap.8.gz

Field source: Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Fedora 43 in the browserBuild an image that includes openscap-scanner

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1:1.4.4-1.fc4343 / updatesx86_64Fedora 43 · updates · x86_6453 KiB129 KiBPackages/o/openscap-scanner-1.4.4-1.fc43.x86_64.rpm
1:1.4.2-7.fc4343 / everythingx86_64Fedora 43 · Everything · x86_6450 KiB116 KiBPackages/o/openscap-scanner-1.4.2-7.fc43.x86_64.rpm

Field source: Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

1:1.4.4-1.fc43 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 90fefa6af78b19ca049bb7c96ee34b8d563e30fc74e76aac8dd72d32fbf46a85

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '90fefa6af78b19ca049bb7c96ee34b8d563e30fc74e76aac8dd72d32fbf46a85' 'openscap-scanner-1.4.4-1.fc43.x86_64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

1:1.4.2-7.fc43 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 2627eeeb96774bdb243cb98be0b01626f80a61ff83189192847e79854c57e024

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '2627eeeb96774bdb243cb98be0b01626f80a61ff83189192847e79854c57e024' 'openscap-scanner-1.4.2-7.fc43.x86_64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description
25/25
Artifact path and source digest
25/25
Dependency metadata
15/15
Package-file index
15/15
Homepage
5/5
License text
5/5
Source package or maintainer
10/10

Recorded total: 100/100

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2, Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2, Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac, Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

  • Fedora 43 Everything aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    6c2a7b7225a6bd12acd5c95dcd0350a0a5929e195692ff68eb31db0ee6b9897b
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

  • Fedora 43 Everything x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    42c0002750de6066124693fff143f4854c1e29474d893f7e6a7616012d41338f
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

  • Fedora 43 updates aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    0af1807dead0a1d28599a942743e244fe57da21cf6a935b3e4155f4a3f1070a1
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

  • Fedora 43 updates x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    3ae5fecc3db8c7b4ce0cf54a8ea572ed4694e7e132e201c2f6ab6570259d1061
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

openscap-scanner Package for Fedora 43 | OpenFactory