cert-manager-startupapicheck v1.21.2-tpio.1 trivy

Critical0
High0
Medium0
Low0
Gate passed

publish scan at 2026-10-10T20:59:36Z. Digest: sha256:588256b617d880cf4d9c530c040945f30eedf826133e37e140315c5b68774cfd.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/trivy-report/v1. SHA-256 of original predicate (compact JSON plus newline): 1d966c46a557c17d1ce164b23a86f4ad2c20386f46f291c1c5b4e496ddc05aa8.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/trivy-report/v1 oci.thepeoples.io/hardened/cert-manager-startupapicheck@sha256:588256b617d880cf4d9c530c040945f30eedf826133e37e140315c5b68774cfd | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Full trivy.json JSON

GO-2026-5932golang.org/x/cryptov0.57.0not availableUNKNOWNnot supplied

1 findings, including suppressed matches where reported.