Third-Party Notices
The distributed Agent P container image includes third-party runtime components and package-management tools used to analyze repositories, install dependencies, build projects, and validate dependency upgrades.
Component versions can change between Agent P image releases. Use the SBOM distributed for the specific image version as the authoritative source for legal, audit, licensing, copyright, and complete transitive-dependency information.
Anthropic Components
Component | Version | Purpose |
|---|---|---|
Claude Agent SDK ( | 0.3.220 | Provides the agent runtime used by Agent P. |
Anthropic SDK ( | 0.115.0 | Peer dependency of the Claude Agent SDK. |
Claude Code CLI ( | 2.1.195 | Runs as a subprocess of the Claude Agent SDK. |
Use of these components is subject to Anthropic’s Commercial Terms.
The Claude Agent SDK can also include the platform-specific optional dependency that corresponds to the image build platform.
Base Operating Systems and System Packages
Component | Version | Details |
|---|---|---|
Alpine Linux | 3.22 | Base image, obtained through Sonatype's internal |
OpenSSL | 3.5.7-r0 | Explicitly pinned. |
Node.js | 22.23.2-r0 | Installed through |
OpenJDK | 21.0.11_p10-r0 | Default Java runtime referenced by |
OpenJDK | 17.0.19_p10-r0 | Additional Java runtime referenced by |
OpenJDK | 25 | Installed from Alpine edge/community and intentionally not pinned to a specific package revision. The resolved version is recorded in |
npm, curl, ca-certificates, git, bash, unzip, su-exec, gcompat, build-base, pkgconfig, python3, and py3-pip | Alpine 3.22 package version | Installed from the Alpine package repositories. |
The image also includes system utilities and build packages required by Agent P and supported package ecosystems, including npm, curl, CA certificates, Git, Bash, unzip, su-exec, gcompat, build-base, pkgconfig, and pip.
Language Toolchains and Package Managers
Component | Version | Integrity and installation details |
|---|---|---|
Bun | 1.3.14 | Uses the musl build. The SHA-256 checksum is pinned for each supported architecture. |
Apache Maven | 3.9.16 | The SHA-512 checksum is pinned. |
Gradle | 8.14.5 | The SHA-256 checksum is pinned. |
Go | 1.26.4 | The SHA-256 checksum is pinned for each supported architecture. |
uv | 0.11.33 | Uses the musl build. The SHA-256 checksum is pinned for each supported architecture. |
Corepack | 0.35.0 | Installed globally through npm. |
Yarn | 4.17.0 | Installed through |
pnpm | 11.10.0 | Pinned to the 11.x release line to address CVE-2025-64756 and Sonatype advisory sonatype-2026-005089. |
Claude Code CLI ( | 2.1.195 | Installed globally through npm. The Claude Agent SDK starts the CLI as a subprocess. |
npm-run-all2 | 9.0.2 | Maintained fork of the deprecated |
pip | 26.2 | |
Poetry | 2.4.1 | |
dulwich | 1.2.7 | Pinned above Poetry's 0.22.x dependency version to address CVE-2026-42305 and CVE-2026-47734. |
virtualenv | 21.5.1 |
JAR Files Replaced in Gradle 8
The following JAR files are replaced in the bundled Gradle 8 distribution for vulnerability remediation. The replacement files retain the original filenames because the Gradle module registry references those filenames directly. Sonatype IQ identifies the actual components by checksum.
If a scanner reports vulnerabilities for these components based on the JAR filename, the reported version might not match the component actually shipped. The filenames are retained intentionally, use the Shipped version column to identify the version included in the Gradle distribution.
JAR | Shipped version | On-disk filename | Replacement reason |
|---|---|---|---|
| 3.6.1 |
| Addresses CVE-2025-67030 (CVSS 8.8) |
| 2.22.1 |
| Addresses CVE-2026-54513 (9.3) |
| 2.22.1 |
| Addresses CVE-2026-54512 (9.2) |
| 2.22 |
| Uses the current Jackson annotations release, which no longer uses patch-version numbering. |
| 2.22.1 |
| |
| 2.22.1 |
|
Components Compiled in the agp binary
The Agent P executable is produced with bun build --compile. The following direct dependencies are bundled into the resulting executable.
Component | Version | Purpose or relationship |
|---|---|---|
Claude Agent SDK ( | 0.3.220 | Provides the agent runtime used by Agent P. |
Anthropic SDK ( | 0.115.0 | Peer dependency of the Claude Agent SDK. |
Model Context Protocol SDK ( | 1.29.0 | Peer dependency of the Claude Agent SDK. |
Octokit REST client ( |
| GitHub REST API client. |
GitBeaker REST client ( |
| GitLab REST API client. |
| 0.9.10 | XML parsing library. |
|
| XPath processing library. |
| 15.0.0-0 | Command-line argument parsing. |
|
| YAML parsing and serialization. |
|
| Runtime schema validation. |
|
| Terminal text formatting. |
|
| Command-line table rendering. |
| 9.4.1 | Command-line progress indicators. |
| 1.7.1 | TOML parsing. |
The Claude Agent SDK also includes platform-specific optional dependencies, such as the Linux x64 musl package. The dependency that matches the image build platform is embedded during the build.
Scope Limitations
This section lists the declared or direct components. It does not list the full transitive dependency closure. For example, @gitbeaker/rest brings in additional runtime packages, and Maven and Gradle each bundle numerous JAR files beyond those listed here.
Build-time-only components are not included in the distributed image. Examples include ESLint, @typescript-eslint packages, openapi-typescript, @types/bun, and build secrets used to access internal package repositories. The image build also removes JDK demo directories and jrt-fs.jar from all included JDKs.
Use the SBOM generated by the Agent P release process as the authoritative component inventory.