openbao v2.7.1-tpio.1 grype

Critical0

High0

Medium0

Low0

Gate passed

publish scan at 2026-10-22T15:17:19Z. Digest: sha256:d7bc22f2f86c33ed96e29ba3d10975def3d492a83914caa00994e3e2b948d79a.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): 8e7d8bb6e0b019291acb23e3190eb81de0479b5a55a5890ff505d9e87a37efb8.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/openbao@sha256:d7bc22f2f86c33ed96e29ba3d10975def3d492a83914caa00994e3e2b948d79a | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Full grype.json JSON

0 findings, including suppressed matches where reported.