opentelemetry-collector 0.162.0-tpio.1 grype

opentelemetry-collector image page

publish scan at 2026-10-15T16:54:28Z. Digest: sha256:4b1a6e46a15e2c58f204c2a42c62540101fd5e190f389f91ff49af69b4ff3afd.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): c237fa84b01bdda5d13117bf7463ab65f0c666492cb39ca437e4e50a8b7b954c.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/opentelemetry-collector@sha256:4b1a6e46a15e2c58f204c2a42c62540101fd5e190f389f91ff49af69b4ff3afd | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Private fields prevent static publication of the original JSON. The view below shows public fields. Fetch the unchanged signed original with the command above.

0 findings, including suppressed matches where reported.