The tern scan below indicates the image 'onap/integration-python:9.1.0' contains libuuid but does not disclose its license, actually it is GPL-3.0 which will be disclosed by derived image, e.g. 'nexus3.onap.org:10001/onap/multicloud/framework:1.7.3'

$ tern report -o int-py39-output.txt -i nexus3.onap.org:10001/onap/integration-python:9.1.0
=======================================================================================

Layer 3:
info: Layer created by commands: /bin/sh c set -ex && apk add --no-cache --virtual .fetch-deps gnupg tar xz && wget -O python.tar.xz "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]}/Python$PYTHON_VERSION.tar.xz" && wget O python.tar.xz.asc "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]}/Python$PYTHON_VERSION.tar.xz.asc" && export GNUPGHOME="$(mktemp -d)" && gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$GPG_KEY" && gpg --batch --verify python.tar.xz.asc python.tar.xz &&

{ command -v gpgconf > /dev/null && gpgconf --kill all || :; }

&& rm rf "$GNUPGHOME" python.tar.xz.asc && mkdir -p /usr/src/python && tar -xJC /usr/src/python --strip-components=1 -f python.tar.xz && rm python.tar.xz && apk add --no-cache --virtual .build-deps bluez-dev bzip2-dev dpkg-dev dpkg expat-dev gcc libc-dev libffi-dev libnsl-dev libtirpc-dev linux-headers make ncurses-dev openssl-dev pax-utils sqlite-dev tcl-dev tk tk-dev util-linux-dev xz-dev zlib-dev && apk del --no-network .fetch-deps && cd /usr/src/python && gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)" && ./configure --build="$gnuArch" --enable-loadable-sqlite-extensions --enable-optimizations --enable-option-checking=fatal --enable-shared --with-system-expat --with-system-ffi --without-ensurepip && make -j "$(nproc)" EXTRA_CFLAGS="-DTHREAD_STACK_SIZE=0x100000" LDFLAGS="-Wl,-strip-all" && make install && rm -rf /usr/src/python && find /usr/local -depth ( ( -type d -a ( -name test -o -name tests -o -name idle_test ) ) -o ( -type f -a ( -name '.pyc' -o -name '.pyo' -o -name '.a' ) ) ) -exec rm -rf '{}' + && find /usr/local -type f -executable -not ( -name '*tkinter' ) -exec scanelf --needed --nobanner --format '%n#p' '{}' ';' | tr ',' '\n' | sort -u | awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0

{ next } { print "so:" $1 }' | xargs -rt apk add --no-cache --virtual .python-rundeps && apk del --no-network .build-deps && python3 --version
warning:
Unrecognized Commands:set -ex
wget O python.tar.xz https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python$PYTHON_VERSION.tar.xz
wget O python.tar.xz.asc https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python$PYTHON_VERSION.tar.xz.asc
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys $GPG_KEY
gpg --batch --verify python.tar.xz.asc python.tar.xz
command -v gpgconf > /dev/null
gpgconf --kill all
rm -rf $GNUPGHOME python.tar.xz.asc
mkdir -p /usr/src/python
tar -xJC /usr/src/python --strip-components=1 -f python.tar.xz
rm python.tar.xz
cd /usr/src/python
--query DEB_BUILD_GNU_TYPE
./configure --build=$gnuArch --enable-loadable-sqlite-extensions --enable-optimizations --enable-option-checking=fatal --enable-shared --with-system-expat --with-system-ffi --without-ensurepip
make j $(nproc) EXTRA_CFLAGS=-DTHREAD_STACK_SIZE=0x100000 LDFLAGS=-Wl,-strip-all
make install
rm -rf /usr/src/python
find /usr/local -depth ( ( -type d -a ( -name test -o -name tests -o -name idle_test ) ) -o ( -type f -a ( -name *.pyc -o -name *.pyo -o -name *.a ) ) ) -exec rm -rf {} +
find /usr/local -type f -executable -not ( -name tkinter ) -exec scanelf --needed --nobanner --format %n#p
| tr , n | sort -u | awk system([ -e /usr/local/lib/ $1 ]) == 0 { next }

{ print so: $1 }

| xargs -rt apk add --no-cache --virtual .python-rundeps
python3 --version

info: Retrieved package metadata using apk default method.

File licenses found in Layer: None
Packages found in Layer:
------------------------------------------------------------+

------------------------------------------------------------+

------------------------------------------------------------+

$ tern report -o mvbroker-output.txt -i nexus3.onap.org:10001/onap/multicloud/framework:1.7.3