{"matches":[],"source":{"type":"image","target":{"userInput":"build/payload/oauth2-proxy-v7.15.5-tpio.1","imageID":"sha256:24c1abba8ea8fb297324c970bdb0fe7cf8330b93b69e6e1c7a04986f8ab3a0b3","manifestDigest":"sha256:de60fa58ab3c790bacbf536281c1aa36129fd2042e86a56a45c10e514071da82","mediaType":"application/vnd.oci.image.manifest.v1+json","tags":[],"imageSize":30519184,"layers":[{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:b241faad2d8a20e863fd2c80dd97a85ea1ed12897959d21d143692f733f996a6","size":63},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:96733ca5a75423e7992d873cbabc3259a637b0a601441b3952695de6846a3f4e","size":181724},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:8a0c7c12b5da1607e5a6615f3d153e308becb11f65d60424ae046007fe58030c","size":30257312},{"mediaType":"application/vnd.oci.image.layer.v1.tar+gzip","digest":"sha256:e5e1520c68bdf9114738e347d6575686d3b5e790159c992d983634ba51f1ed30","size":80085}],"manifest":"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","config":"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","repoDigests":[],"architecture":"amd64","os":"linux","labels":{"io.buildah.version":"1.43.1","io.thepeoples.hardened.ladder":"b+minimize","io.thepeoples.hardened.source-status":"upstream release tarball plus this Containerfile and recorded module changes","io.thepeoples.hardened.toolchain":"docker.io/library/golang:1.27.2-alpine3.24@sha256:f92b6ef800e499660581efdabdf25d9d817a9d124eaf900924f0504e7e27e12d","io.thepeoples.hardened.upstream":"quay.io/oauth2-proxy/oauth2-proxy:v7.15.5@sha256:8498b0d0ef0a7b29686414000a08aee467f02d0299c9ed1e006a8f33fc017916","org.opencontainers.image.licenses":"MIT","org.opencontainers.image.revision":"bea3f04bf87b93f5354f392fe2216a88e6031350","org.opencontainers.image.source":"https://github.com/oauth2-proxy/oauth2-proxy","org.opencontainers.image.version":"v7.15.5"}}},"distro":{"name":"","version":"","idLike":null},"descriptor":{"name":"grype","version":"0.120.1","configuration":{"output":["json"],"file":"","pretty":false,"distro":"","add-cpes-if-none":false,"output-template-file":"","check-for-app-update":true,"only-fixed":false,"only-notfixed":false,"ignore-wontfix":"","platform":"linux/amd64","search":{"scope":"squashed","unindexed-archives":false,"indexed-archives":true},"ignore":[{"vulnerability":"","include-aliases":false,"reason":"","namespace":"","fix-state":"","package":{"name":"kernel-headers","version":"","language":"","type":"rpm","location":"","upstream-name":"kernel"},"vex-status":"","vex-justification":"","match-type":"exact-indirect-match"},{"vulnerability":"","include-aliases":false,"reason":"","namespace":"","fix-state":"","package":{"name":"linux(-.*)?-headers-.*","version":"","language":"","type":"deb","location":"","upstream-name":"linux.*"},"vex-status":"","vex-justification":"","match-type":"exact-indirect-match"},{"vulnerability":"","include-aliases":false,"reason":"","namespace":"","fix-state":"","package":{"name":"linux-libc-dev","version":"","language":"","type":"deb","location":"","upstream-name":"linux"},"vex-status":"","vex-justification":"","match-type":"exact-indirect-match"},{"vulnerability":"","include-aliases":false,"reason":"","namespace":"","fix-state":"","package":{"name":"linux-kbuild-.*","version":"","language":"","type":"deb","location":"","upstream-name":"linux.*"},"vex-status":"","vex-justification":"","match-type":"exact-indirect-match"}],"exclude":[],"externalSources":{"enable":false,"maven":{"searchUpstreamBySha1":true,"baseUrl":"https://search.maven.org/solrsearch/select","rateLimit":300000000}},"match":{"java":{"using-cpes":false},"jvm":{"using-cpes":true},"dotnet":{"using-cpes":false},"golang":{"using-cpes":false,"always-use-cpe-for-stdlib":false,"allow-main-module-pseudo-version-comparison":false},"javascript":{"using-cpes":false},"python":{"using-cpes":false},"ruby":{"using-cpes":false},"rust":{"using-cpes":false},"hex":{"using-cpes":false},"stock":{"using-cpes":true},"dpkg":{"using-cpes":false,"missing-epoch-strategy":"zero","use-cpes-for-eol":false},"rpm":{"using-cpes":false,"missing-epoch-strategy":"auto","use-cpes-for-eol":false}},"fail-on-severity":"","registry":{"insecure-skip-tls-verify":false,"insecure-use-http":false,"ca-cert":""},"show-suppressed":false,"include-matcher-suppressions":false,"by-cve":false,"SortBy":{"sort-by":"risk"},"name":"","default-image-pull-source":"","from":null,"vex-documents":[],"vex-add":[],"match-upstream-kernel-headers":false,"fix-channel":{"redhat-eus":{"apply":"auto","versions":">= 8.0"},"ubuntu-esm":{"apply":"auto","versions":""}},"timestamp":true,"alerts":{"enable-eol-distro-warnings":true},"db":{"cache-dir":"/tmp/hardened-scanner-session.YyPreY/grype","update-url":"https://grype.anchore.io/databases","ca-cert":"","auto-update":true,"validate-by-hash-on-start":true,"validate-age":true,"max-allowed-built-age":432000000000000,"require-update-check":false,"update-available-timeout":30000000000,"update-download-timeout":300000000000,"max-update-check-frequency":7200000000000},"exp":{},"dev":{"db":{"debug":false}}},"db":{"status":{"schemaVersion":"v6.1.10","from":"https://grype.anchore.io/databases/v6/vulnerability-db_v6.1.10_2026-10-19T00:32:50Z_1792391955.tar.zst?checksum=sha256%3A13a192236b248579678bbf06cefb2a07a5dcbd00da110cfb5c3e26eb68a7ce58","built":"2026-10-19T06:39:15Z","path":"/tmp/hardened-scanner-session.YyPreY/grype/6/vulnerability.db","valid":true},"providers":{"alma":{"captured":"2026-10-19T00:32:51Z","input":"xxh64:5c542a957c117376"},"alpine":{"captured":"2026-10-19T00:33:02Z","input":"xxh64:5f363779c674ada4"},"amazon":{"captured":"2026-10-19T00:33:21Z","input":"xxh64:52a47ee649cc127e"},"arch":{"captured":"2026-10-19T00:33:49Z","input":"xxh64:5f557552bade4ac3"},"bitnami":{"captured":"2026-10-19T00:33:38Z","input":"xxh64:e6182d154b45ad72"},"chainguard":{"captured":"2026-10-19T00:33:17Z","input":"xxh64:8eda0d0e268f8edf"},"chainguard-libraries":{"captured":"2026-10-19T00:32:52Z","input":"xxh64:42950b1eccce3da8"},"debian":{"captured":"2026-10-19T00:33:45Z","input":"xxh64:a122e93b1be7cc47"},"echo":{"captured":"2026-10-19T00:33:11Z","input":"xxh64:98bb6f68e501aa41"},"eol":{"captured":"2026-10-19T00:32:54Z","input":"xxh64:0771c1acc8382c98"},"epss":{"captured":"2026-10-19T00:33:01Z","input":"xxh64:c38e4633ffebe443"},"fedora":{"captured":"2026-10-19T00:33:00Z","input":"xxh64:c6007579e02c4d08"},"github":{"captured":"2026-10-19T00:33:11Z","input":"xxh64:80b0f7c5ed9125cc"},"govulndb":{"captured":"2026-10-19T00:32:56Z","input":"xxh64:d5aff9670480489c"},"hummingbird":{"captured":"2026-10-19T00:36:36Z","input":"xxh64:e17745d368d13ff4"},"kev":{"captured":"2026-10-19T00:32:58Z","input":"xxh64:0e36abba80f004a5"},"mariner":{"captured":"2026-10-19T00:32:54Z","input":"xxh64:9875358e4f290aff"},"minimos":{"captured":"2026-10-19T00:33:06Z","input":"xxh64:d74dd905a7d08bdb"},"nvd":{"captured":"2026-10-19T00:34:25Z","input":"xxh64:50523c3038eff7c9"},"oracle":{"captured":"2026-10-19T00:33:21Z","input":"xxh64:b4034548afc6165c"},"photon":{"captured":"2026-10-19T00:33:35Z","input":"xxh64:f036afbc998077b9"},"rhel":{"captured":"2026-10-19T00:34:49Z","input":"xxh64:7058a90e23573e8d"},"secureos":{"captured":"2026-10-19T00:32:50Z","input":"xxh64:51c46a7d8bd2c9db"},"sles":{"captured":"2026-10-19T00:35:40Z","input":"xxh64:dc04a98609632d1d"},"ubuntu":{"captured":"2026-10-19T00:34:31Z","input":"xxh64:879416a4f22e3e89"},"wolfi":{"captured":"2026-10-19T00:33:24Z","input":"xxh64:5847deacb68ce005"}}},"timestamp":"2026-10-20T04:25:57.656917224Z"}}