external-secrets v2.12.0-tpio.1 grype
Critical0
High0
Medium2
Low2
External Secrets Operator image page
publish scan at 2026-10-10T21:11:22Z. Digest: sha256:f29c67bcff4c6796df8991dcb8d0e1d69e6f0769dbadc688139260aff559d0cf.
Predicates verified from the signed registry attestations.
Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): b2bd089bdcdb40c94ef6600c6b83d3043e66d30dfee4adf0611f768b4fa96994.
cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/external-secrets@sha256:f29c67bcff4c6796df8991dcb8d0e1d69e6f0769dbadc688139260aff559d0cf | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum| GHSA-8wmf-6v46-5gfg | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.40.0 | 1.45.0 | Low | not suppressed |
| GHSA-8wmf-6v46-5gfg | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.40.0 | 1.45.0 | Low | not suppressed |
2 findings, including suppressed matches where reported.