authentik-proxy 2026.8.4-tpio.1 trivy

Critical0

High0

Medium0

Low0

Gate passed

publish scan at 2026-10-21T02:15:43Z. Digest: sha256:5360554b2cb487e80674ea274f631b41daa148c45bec1a4d510beed1e5e3a3f3.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/trivy-report/v1. SHA-256 of original predicate (compact JSON plus newline): fdb86bce91f4d8cc6f42e2f17b285fe9eb6d1c4d56ff7b125c589fc71ce36c0a.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/trivy-report/v1 oci.thepeoples.io/hardened/authentik-proxy@sha256:5360554b2cb487e80674ea274f631b41daa148c45bec1a4d510beed1e5e3a3f3 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Full trivy.json JSON

0 findings, including suppressed matches where reported.