thepeoples

cert-manager-controller v1.21.2-tpio.1 grype

Critical0
High0
Medium0
Low3
Gate passed

cert-manager image page

publish scan at 2026-10-10T20:49:24Z. Digest: sha256:a72da0d9641add39f33d646a65e85173c44fc29a721a40253eaa558957e15779.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): 457232d4efa5f1ba66c2902d1a4115335986137b99130774e33ebe4a6d4ca328.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/cert-manager-controller@sha256:a72da0d9641add39f33d646a65e85173c44fc29a721a40253eaa558957e15779 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Full grype.json JSON

GHSA-8wmf-6v46-5gfggo.opentelemetry.io/otel/exporters/otlp/otlptracev1.40.01.45.0Lownot suppressed
GHSA-8wmf-6v46-5gfggo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcv1.40.01.45.0Lownot suppressed
GHSA-8wmf-6v46-5gfggo.opentelemetry.io/otel/sdkv1.44.01.45.0Lownot suppressed

3 findings, including suppressed matches where reported.