Vulnerable result: VULN_CODE_EXEC_CONFIRMED
POST-CHECKPOINT: attacker image entries = 1
POST-CHECKPOINT: poisoned victim tag entries = 1
PRUVA_CODE_EXEC_FROM_ATTACKER_IMAGE uid=0 gid=0 image=attacker
VERDICT: VULN_CODE_EXEC_CONFIRMED - malicious checkpoint poisoned localhost:5000/victim:stable with localhost:5000/attacker:latest and StartContainer executed attacker-controlled image code

Fixed result: FIXED_BLOCKED
POST-CHECKPOINT: attacker image entries = 1
POST-CHECKPOINT: poisoned victim tag entries = 0
victim CreateContainer failed as expected when the fixed runtime does not create the poisoned local tag
VERDICT: FIXED_BLOCKED - fixed containerd did not create the victim tag and no attacker code executed from localhost:5000/victim:stable