kube-state-metrics v2.20.0-tpio.1 trivy

kube-state-metrics image page

publish scan at 2026-10-15T16:39:17Z. Digest: sha256:88be177afa8b74aa5021fed0dff462d0cc84612df5e587fc7d4424a326a25d9a.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/trivy-report/v1. SHA-256 of original predicate (compact JSON plus newline): 5ef319ea8b1c3d8caa3917c5b03494d5b82ca08001cf0d79f8e47c0877b88334.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/trivy-report/v1 oci.thepeoples.io/hardened/kube-state-metrics@sha256:88be177afa8b74aa5021fed0dff462d0cc84612df5e587fc7d4424a326a25d9a | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Full trivy.json JSON

1 findings, including suppressed matches where reported.