alertmanager v0.34.1-tpio.1 grype

alertmanager image page

publish scan at 2026-10-15T16:38:25Z. Digest: sha256:013d96b7a3738f1dc1f083dd61916ef7793d57c442767685f83ef8cdbb2ae9c9.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): 7fc8f80ffc71c0669026ad3762e61afeab8b273a80ad3f6c812c3a1be1115e65.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/alertmanager@sha256:013d96b7a3738f1dc1f083dd61916ef7793d57c442767685f83ef8cdbb2ae9c9 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Private fields prevent static publication of the original JSON. The view below shows public fields. Fetch the unchanged signed original with the command above.

0 findings, including suppressed matches where reported.