cert-manager-webhook v1.21.2-tpio.1 trivy
Critical0
High0
Medium0
Low3
cert-manager webhook image page
publish scan at 2026-10-10T20:52:05Z. Digest: sha256:5fcfc4c5665e62fc11ac8adaf1ab012e6e677e3fc662eabeae98327b53d4c277.
Predicates verified from the signed registry attestations.
Predicate type: https://thepeoples.io/attestations/trivy-report/v1. SHA-256 of original predicate (compact JSON plus newline): 71adb35db88f2039b07ad71307b5e1e771c3a0c15438c9b79ff808d1bae702d7.
cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/trivy-report/v1 oci.thepeoples.io/hardened/cert-manager-webhook@sha256:5fcfc4c5665e62fc11ac8adaf1ab012e6e677e3fc662eabeae98327b53d4c277 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum| CVE-2026-81870 | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.40.0 | 1.45.0 | LOW | not supplied |
| CVE-2026-81870 | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.40.0 | 1.45.0 | LOW | not supplied |
| CVE-2026-81870 | go.opentelemetry.io/otel/sdk | v1.44.0 | 1.45.0 | LOW | not supplied |
| GO-2026-5932 | golang.org/x/crypto | v0.57.0 | not available | UNKNOWN | not supplied |
4 findings, including suppressed matches where reported.