oauth2-proxy v7.15.5-tpio.1 grype

Critical0
High0
Medium0
Low0
Gate passed

publish scan at 2026-10-20T04:25:56Z. Digest: sha256:de60fa58ab3c790bacbf536281c1aa36129fd2042e86a56a45c10e514071da82.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): c6d8e24e1905598a9b1ee47f5a035c4e24a50e095b6a33f1836e7755961da055.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/oauth2-proxy@sha256:de60fa58ab3c790bacbf536281c1aa36129fd2042e86a56a45c10e514071da82 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Full grype.json JSON

0 findings, including suppressed matches where reported.