authentik proxy outpost

authentik reverse-proxy outpost that authenticates HTTP requests via nginx forward-auth. MIT. linux/amd64.

pending — no published tags

Pull and verification commands will appear after the first verified publication.

Usage

Pending — no published tags. Image scans and real candidate validation have not been recorded. Installation commands become available after the first publication.

Evidence

Publish and rescan reports for each tag. Gate is 0 CRITICAL / 0 HIGH from Trivy and Grype. MEDIUM/LOW are listed; they do not block publish. Remaining-CVE tables live here.

pending · pending · worst-of Trivy and Grype at publish.

Corresponding source for pending is pending. Recipes that resolve are on Source.

MEDIUM/LOW tracking is pending; consult retained scanner reports.

Back to pull

This image is here as the forward-auth proxy outpost.

Why this image is connected

authentik proxy outpost: forward-auth proxy outpost

Status: pending — no published tags. Platform: linux/amd64.

Available tags and scan history

No tags have been published yet. Scan history and SBOM downloads will appear after verified publication.

Rebuild and licence

The recipe rebuilds the proxy from the pinned release with digest-pinned rustc 1.97.1, vendored crates.io, AWS_LC_FIPS_SYS_CC=clang, and a scratch runtime under UID 65532. Official FIPS Debian is not the runtime. Publication requires fresh unsuppressed 0 CRITICAL / 0 HIGH scans and functional forward-auth validation for the exact digest.

Licence: MIT.

authentik is MIT. Corresponding source is the official version/2026.8.4 tag tarball plus the Containerfile and recorded crate or toolchain changes. The proxy outpost was rewritten in Rust in 2026.8; LDAP and RADIUS outposts are not this image.

Upstream source

Build recipe publication is pending, not yet published.