{"SchemaVersion":2,"Trivy":{"Version":"0.75.0"},"ReportID":"01a1406e-c1a0-708a-bd8f-d6cb279fa2fe","CreatedAt":"2026-10-15T16:39:22.78403724Z","ArtifactID":"sha256:8821ff7e0206b0f3b5f4031bb875c90db05172551182d2bd59ade939f7965ff8","ArtifactName":"build/payload/redis-exporter-v1.93.0-tpio.1","ArtifactType":"container_image","Metadata":{"Size":21776896,"ImageID":"sha256:8821ff7e0206b0f3b5f4031bb875c90db05172551182d2bd59ade939f7965ff8","DiffIDs":["sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307","sha256:dd5e2a1031b34594af7c641af1727d0d6383b40c51e6f92917449ed25e6c9547","sha256:a4b67bef06aef8c85f5ce13cc24848e5670c0af719cef36b622672ae4b23ffb4","sha256:4d148b9671015fd660eb7fdf38e6cf6a166bdd8d481fb638282a3d1890efe181","sha256:35108119e6a4a67ec1b7f85fdcc738d5cec3476536c21d44381f893eca314e5e","sha256:883f204edbb039533361637b406e5f3c40ef51450523c3d20241b3eccbdcdbae"],"ImageConfig":{"architecture":"amd64","created":"2026-10-13T01:57:03.914684481Z","history":[{"created":"2026-10-01T05:15:01.841641515Z","created_by":"COPY /redis_exporter /redis_exporter # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-10-01T05:15:01.880236454Z","created_by":"COPY /etc/ssl/certs /etc/ssl/certs # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-10-01T05:15:01.893557535Z","created_by":"COPY /etc/nsswitch.conf /etc/nsswitch.conf # buildkit","comment":"buildkit.dockerfile.v0"},{"created":"2026-10-01T05:15:01.893557535Z","created_by":"USER 59000:59000","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2026-10-01T05:15:01.893557535Z","created_by":"EXPOSE [9121/tcp]","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2026-10-01T05:15:01.893557535Z","created_by":"ENTRYPOINT [\"/redis_exporter\"]","comment":"buildkit.dockerfile.v0","empty_layer":true},{"created":"2026-10-13T01:57:01.000934785Z","created_by":"/bin/sh -c #(nop) COPY file:f7eb47f0303b46cd6f5dfecc8ca1659c86014f6ca2ec69f20ba018206c6d291e in /redis_exporter      ","comment":"FROM ghcr.io/oliver006/redis_exporter@sha256:6ca518a72f30f7f576ef92963de1b91d3c3f5fd3aeac949f878bfda183587820"},{"created":"2026-10-13T01:57:02.000541283Z","created_by":"/bin/sh -c #(nop) COPY multi:bb48321cc2c2e72e318fdebe7d540300f1f26ad42bb93e36b518fdea42d60a1b in /usr/share/tp-hardened/redis-exporter/      "},{"created":"2026-10-13T01:57:03.001095417Z","created_by":"/bin/sh -c #(nop) COPY dir:01883db3163ec867c71d416808cbfe2343adec6493266554b7078d015465f322 in /usr/share/tp-hardened/redis-exporter/licenses/      "},{"created":"2026-10-13T01:57:03.729441474Z","created_by":"/bin/sh -c #(nop) USER 59000:59000","empty_layer":true},{"created":"2026-10-13T01:57:03.914845929Z","created_by":"/bin/sh -c #(nop) LABEL org.opencontainers.image.version=\"v1.93.0\"       org.opencontainers.image.source=\"https://github.com/oliver006/redis_exporter\"       org.opencontainers.image.revision=\"589a1cd930d62ba449a5207179ab44252e359c66\"       io.thepeoples.hardened.upstream=\"ghcr.io/oliver006/redis_exporter:v1.93.0@sha256:6ca518a72f30f7f576ef92963de1b91d3c3f5fd3aeac949f878bfda183587820\"       io.thepeoples.hardened.ladder=\"b\"       io.thepeoples.hardened.toolchain=\"go1.27.2\"       io.thepeoples.hardened.source-status=\"export vendor and base sources before publication\"","empty_layer":true}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307","sha256:dd5e2a1031b34594af7c641af1727d0d6383b40c51e6f92917449ed25e6c9547","sha256:a4b67bef06aef8c85f5ce13cc24848e5670c0af719cef36b622672ae4b23ffb4","sha256:4d148b9671015fd660eb7fdf38e6cf6a166bdd8d481fb638282a3d1890efe181","sha256:35108119e6a4a67ec1b7f85fdcc738d5cec3476536c21d44381f893eca314e5e","sha256:883f204edbb039533361637b406e5f3c40ef51450523c3d20241b3eccbdcdbae"]},"config":{"Entrypoint":["/redis_exporter"],"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"],"Labels":{"io.buildah.version":"1.43.1","io.thepeoples.hardened.ladder":"b","io.thepeoples.hardened.source-status":"export vendor and base sources before publication","io.thepeoples.hardened.toolchain":"go1.27.2","io.thepeoples.hardened.upstream":"ghcr.io/oliver006/redis_exporter:v1.93.0@sha256:6ca518a72f30f7f576ef92963de1b91d3c3f5fd3aeac949f878bfda183587820","org.opencontainers.image.created":"2026-10-01T05:14:06.551Z","org.opencontainers.image.description":"Prometheus Exporter for Valkey & Redis Metrics. Supports Valkey 9.x, 8.x, 7.x and various Redis versions","org.opencontainers.image.licenses":"MIT","org.opencontainers.image.revision":"589a1cd930d62ba449a5207179ab44252e359c66","org.opencontainers.image.source":"https://github.com/oliver006/redis_exporter","org.opencontainers.image.title":"redis_exporter","org.opencontainers.image.url":"https://github.com/oliver006/redis_exporter","org.opencontainers.image.version":"v1.93.0"},"User":"59000:59000","WorkingDir":"/","ExposedPorts":{"9121/tcp":{}}}},"Layers":[{"Size":10721280,"Digest":"sha256:457866cd7c2406ef0fa8dffec56fc61a5649f475ffdea8f76023c9ea2a3448c3","DiffID":"sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307"},{"Size":310784,"Digest":"sha256:388e6b0a27ea5183aedc6f7239fbe009d25172d712cc13e8aedc93079ac3f493","DiffID":"sha256:dd5e2a1031b34594af7c641af1727d0d6383b40c51e6f92917449ed25e6c9547"},{"Size":2560,"Digest":"sha256:6f08e7d90384e2a9cf8a8351bc3374a8fda524d218de757d5d275be94501b6c3","DiffID":"sha256:a4b67bef06aef8c85f5ce13cc24848e5670c0af719cef36b622672ae4b23ffb4"},{"Size":10717184,"Digest":"sha256:3dec5ca199700e914fc7ccd99943b0a6f43a55de6e3b67d25f17a7b27ae886c7","DiffID":"sha256:4d148b9671015fd660eb7fdf38e6cf6a166bdd8d481fb638282a3d1890efe181"},{"Size":19456,"Digest":"sha256:74c600208a456260539b09ab3cd507798b40ac0209a570b8861944d9c1122b14","DiffID":"sha256:35108119e6a4a67ec1b7f85fdcc738d5cec3476536c21d44381f893eca314e5e"},{"Size":5632,"Digest":"sha256:c96f12b11dba6bc34d2758fd2615721fcd893d551cc37ba8b480f0aeb7385e9d","DiffID":"sha256:883f204edbb039533361637b406e5f3c40ef51450523c3d20241b3eccbdcdbae"}]},"Results":[{"Target":"redis_exporter","Class":"lang-pkgs","Type":"gobinary","Packages":[{"ID":"github.com/oliver006/redis_exporter","Name":"github.com/oliver006/redis_exporter","Identifier":{"PURL":"pkg:golang/github.com/oliver006/redis_exporter","UID":"d15b7597ed718199"},"Relationship":"root","DependsOn":["github.com/beorn7/perks@v1.0.1","github.com/cespare/xxhash/v2@v2.3.0","github.com/gomodule/redigo@v1.9.3","github.com/klauspost/compress@v1.19.1","github.com/mna/redisc@v1.4.0","github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","github.com/prometheus/client_golang@v1.24.1","github.com/prometheus/client_model@v0.6.3","github.com/prometheus/common@v0.70.1","github.com/prometheus/procfs@v0.21.1","github.com/sirupsen/logrus@v1.10.2","golang.org/x/crypto@v0.57.0","golang.org/x/sys@v0.48.0","google.golang.org/protobuf@v1.36.12","stdlib@v1.27.2"],"Layer":{"Digest":"sha256:3dec5ca199700e914fc7ccd99943b0a6f43a55de6e3b67d25f17a7b27ae886c7","DiffID":"sha256:4d148b9671015fd660eb7fdf38e6cf6a166bdd8d481fb638282a3d1890efe181"},"AnalyzedBy":"gobinary"},{"ID":"stdlib@v1.27.2","Name":"stdlib","Identifier":{"PURL":"pkg:golang/stdlib@v1.27.2","UID":"56437f0f258f687c"},"Version":"v1.27.2","Relationship":"direct","Layer":{"Digest":"sha256:3dec5ca199700e914fc7ccd99943b0a6f43a55de6e3b67d25f17a7b27ae886c7","DiffID":"sha256:4d148b9671015fd660eb7fdf38e6cf6a166bdd8d481fb638282a3d1890efe181"},"AnalyzedBy":"gobinary"},{"ID":"github.com/beorn7/perks@v1.0.1","Name":"github.com/beorn7/perks","Identifier":{"PURL":"pkg:golang/github.com/beorn7/perks@v1.0.1","UID":"a2c54a75f8927585"},"Version":"v1.0.1","Layer":{"Digest":"sha256:457866cd7c2406ef0fa8dffec56fc61a5649f475ffdea8f76023c9ea2a3448c3","DiffID":"sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307"},"AnalyzedBy":"gobinary"},{"ID":"github.com/cespare/xxhash/v2@v2.3.0","Name":"github.com/cespare/xxhash/v2","Identifier":{"PURL":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0","UID":"4c3f6e03dac7ab88"},"Version":"v2.3.0","Layer":{"Digest":"sha256:457866cd7c2406ef0fa8dffec56fc61a5649f475ffdea8f76023c9ea2a3448c3","DiffID":"sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307"},"AnalyzedBy":"gobinary"},{"ID":"github.com/gomodule/redigo@v1.9.3","Name":"github.com/gomodule/redigo","Identifier":{"PURL":"pkg:golang/github.com/gomodule/redigo@v1.9.3","UID":"6146dab379acc11f"},"Version":"v1.9.3","Layer":{"Digest":"sha256:457866cd7c2406ef0fa8dffec56fc61a5649f475ffdea8f76023c9ea2a3448c3","DiffID":"sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307"},"AnalyzedBy":"gobinary"},{"ID":"github.com/klauspost/compress@v1.19.1","Name":"github.com/klauspost/compress","Identifier":{"PURL":"pkg:golang/github.com/klauspost/compress@v1.19.1","UID":"69dc3d636d45cf8c"},"Version":"v1.19.1","Layer":{"Digest":"sha256:457866cd7c2406ef0fa8dffec56fc61a5649f475ffdea8f76023c9ea2a3448c3","DiffID":"sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307"},"AnalyzedBy":"gobinary"},{"ID":"github.com/mna/redisc@v1.4.0","Name":"github.com/mna/redisc","Identifier":{"PURL":"pkg:golang/github.com/mna/redisc@v1.4.0","UID":"4ee5c89252edb8ed"},"Version":"v1.4.0","Layer":{"Digest":"sha256:457866cd7c2406ef0fa8dffec56fc61a5649f475ffdea8f76023c9ea2a3448c3","DiffID":"sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307"},"AnalyzedBy":"gobinary"},{"ID":"github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","Name":"github.com/munnerz/goautoneg","Identifier":{"PURL":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","UID":"7a7a36c429ac9635"},"Version":"v0.0.0-20191010083416-a7dc8b61c822","Layer":{"Digest":"sha256:457866cd7c2406ef0fa8dffec56fc61a5649f475ffdea8f76023c9ea2a3448c3","DiffID":"sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307"},"AnalyzedBy":"gobinary"},{"ID":"github.com/prometheus/client_golang@v1.24.1","Name":"github.com/prometheus/client_golang","Identifier":{"PURL":"pkg:golang/github.com/prometheus/client_golang@v1.24.1","UID":"4c4b40923e7b04a8"},"Version":"v1.24.1","Layer":{"Digest":"sha256:457866cd7c2406ef0fa8dffec56fc61a5649f475ffdea8f76023c9ea2a3448c3","DiffID":"sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307"},"AnalyzedBy":"gobinary"},{"ID":"github.com/prometheus/client_model@v0.6.3","Name":"github.com/prometheus/client_model","Identifier":{"PURL":"pkg:golang/github.com/prometheus/client_model@v0.6.3","UID":"43ecf4a684dcd4"},"Version":"v0.6.3","Layer":{"Digest":"sha256:457866cd7c2406ef0fa8dffec56fc61a5649f475ffdea8f76023c9ea2a3448c3","DiffID":"sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307"},"AnalyzedBy":"gobinary"},{"ID":"github.com/prometheus/common@v0.70.1","Name":"github.com/prometheus/common","Identifier":{"PURL":"pkg:golang/github.com/prometheus/common@v0.70.1","UID":"a610a0afa8989283"},"Version":"v0.70.1","Layer":{"Digest":"sha256:457866cd7c2406ef0fa8dffec56fc61a5649f475ffdea8f76023c9ea2a3448c3","DiffID":"sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307"},"AnalyzedBy":"gobinary"},{"ID":"github.com/prometheus/procfs@v0.21.1","Name":"github.com/prometheus/procfs","Identifier":{"PURL":"pkg:golang/github.com/prometheus/procfs@v0.21.1","UID":"76b3588550da5ced"},"Version":"v0.21.1","Layer":{"Digest":"sha256:457866cd7c2406ef0fa8dffec56fc61a5649f475ffdea8f76023c9ea2a3448c3","DiffID":"sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307"},"AnalyzedBy":"gobinary"},{"ID":"github.com/sirupsen/logrus@v1.10.2","Name":"github.com/sirupsen/logrus","Identifier":{"PURL":"pkg:golang/github.com/sirupsen/logrus@v1.10.2","UID":"2f29407df059529c"},"Version":"v1.10.2","Layer":{"Digest":"sha256:457866cd7c2406ef0fa8dffec56fc61a5649f475ffdea8f76023c9ea2a3448c3","DiffID":"sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/crypto@v0.57.0","Name":"golang.org/x/crypto","Identifier":{"PURL":"pkg:golang/golang.org/x/crypto@v0.57.0","UID":"757c78943de60f76"},"Version":"v0.57.0","Layer":{"Digest":"sha256:457866cd7c2406ef0fa8dffec56fc61a5649f475ffdea8f76023c9ea2a3448c3","DiffID":"sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/sys@v0.48.0","Name":"golang.org/x/sys","Identifier":{"PURL":"pkg:golang/golang.org/x/sys@v0.48.0","UID":"fa0f5201b9b38df6"},"Version":"v0.48.0","Layer":{"Digest":"sha256:457866cd7c2406ef0fa8dffec56fc61a5649f475ffdea8f76023c9ea2a3448c3","DiffID":"sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307"},"AnalyzedBy":"gobinary"},{"ID":"google.golang.org/protobuf@v1.36.12","Name":"google.golang.org/protobuf","Identifier":{"PURL":"pkg:golang/google.golang.org/protobuf@v1.36.12","UID":"72828ec1b42e74e2"},"Version":"v1.36.12","Layer":{"Digest":"sha256:457866cd7c2406ef0fa8dffec56fc61a5649f475ffdea8f76023c9ea2a3448c3","DiffID":"sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307"},"AnalyzedBy":"gobinary"}],"Vulnerabilities":[{"VulnerabilityID":"GO-2026-5932","PkgID":"golang.org/x/crypto@v0.57.0","PkgName":"golang.org/x/crypto","PkgIdentifier":{"PURL":"pkg:golang/golang.org/x/crypto@v0.57.0","UID":"757c78943de60f76"},"InstalledVersion":"v0.57.0","Status":"affected","Layer":{"Digest":"sha256:457866cd7c2406ef0fa8dffec56fc61a5649f475ffdea8f76023c9ea2a3448c3","DiffID":"sha256:646cedee1f3bfcb34c1335e30d885558a302ddcfdafd821a928f27f1ac7c5307"},"DataSource":{"ID":"govulndb","Name":"The Go Vulnerability Database","URL":"https://pkg.go.dev/vuln/"},"Fingerprint":"sha256:fb87e81e76e0f340c5d058e64c3eba11fee874c73d4b45785d2ec3b7b079acea","Title":"The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues","Description":"The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used.\n\nIf you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package.","Severity":"UNKNOWN","References":["https://go.dev/issue/44226","https://pkg.go.dev/vuln/GO-2026-5932"]}]}]}