dex v2.46.0-tpio.3 grype

Dex image page

publish scan at 2026-10-22T03:00:14Z. Digest: sha256:caaddf94e72b5b3cec4ca35c6120398f83b155baf43b3c1f2952a702a90b1b74.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): 87268ee34eb865aa7d7580b77e78eb1259630d59fac8fc8f3a9ad9d7eadaea2c.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/dex@sha256:caaddf94e72b5b3cec4ca35c6120398f83b155baf43b3c1f2952a702a90b1b74 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Private fields prevent static publication of the original JSON. The view below shows public fields. Fetch the unchanged signed original with the command above.

3 findings, including suppressed matches where reported.