haproxy 3.4.7-alpine-tpio.1 trivy

Critical0

High0

Medium3

Low0

Gate passed

publish scan at 2026-10-21T19:30:43Z. Digest: sha256:5c14f9a8b26004f13288ddb97ff7b9380a63f7513c89afc0db19b3c4df4db65a.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/trivy-report/v1. SHA-256 of original predicate (compact JSON plus newline): 95700d5137bd3bc7ee684529648e8dd408a2c15734843125276578a17a0c884b.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/trivy-report/v1 oci.thepeoples.io/hardened/haproxy@sha256:5c14f9a8b26004f13288ddb97ff7b9380a63f7513c89afc0db19b3c4df4db65a | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Full trivy.json JSON

0 findings, including suppressed matches where reported.