alertmanager v0.34.1-tpio.2 trivy

alertmanager image page

publish scan at 2026-10-23T00:38:01Z. Digest: sha256:4cad78c82e4a428827cd982e1c89cd913f2ff24819024aa5ba5c3f628ad3c8c8.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/trivy-report/v1. SHA-256 of original predicate (compact JSON plus newline): ef1709e01fb0b22f5f8bb1029fddf5199779cf3d55960c896e57c571135e3da9.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/trivy-report/v1 oci.thepeoples.io/hardened/alertmanager@sha256:4cad78c82e4a428827cd982e1c89cd913f2ff24819024aa5ba5c3f628ad3c8c8 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Full trivy.json JSON

2 findings, including suppressed matches where reported.