blackbox-exporter v0.29.0-tpio.1 grype

Critical0

High0

Medium0

Low0

Gate passed

publish scan at 2026-10-15T16:39:20Z. Digest: sha256:175a6a67fd0e6861616596a73de59784a8da8ca8baa8d1bc761b636f3490268a.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): bca662e33906cbacbc55124086c3ad816fc78cebd048e9c135dc7b847b130d0c.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/blackbox-exporter@sha256:175a6a67fd0e6861616596a73de59784a8da8ca8baa8d1bc761b636f3490268a | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Private fields prevent static publication of the original JSON. The view below shows public fields. Fetch the unchanged signed original with the command above.

0 findings, including suppressed matches where reported.