prometheus v3.15.0-tpio.1 trivy

prometheus image page

publish scan at 2026-10-15T16:38:16Z. Digest: sha256:f8c829d00ae3279be237c9f47fae6576a88d94da740112885953f4c1038a9279.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/trivy-report/v1. SHA-256 of original predicate (compact JSON plus newline): b0045820945bc2a57ee7e042b1bd06670bd6c607522f27d2e53bfcdfecb77de6.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/trivy-report/v1 oci.thepeoples.io/hardened/prometheus@sha256:f8c829d00ae3279be237c9f47fae6576a88d94da740112885953f4c1038a9279 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Full trivy.json JSON

2 findings, including suppressed matches where reported.