redis 8.6.4-alpine-tpio.1 grype

Critical0
High0
Medium3
Low1
Gate passed

publish scan at 2026-10-09T13:15:16Z. Digest: sha256:83b6e02798f8896d6eddd4f6c977a821ac4fe8a12d0bd886e1db9cb775114145.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): dd7eb319a9a327714a6dfe8fb3b15e306d6456be5e8d8128038c31fadfcec83b.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/redis@sha256:83b6e02798f8896d6eddd4f6c977a821ac4fe8a12d0bd886e1db9cb775114145 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Full grype.json JSON

CVE-2025-60876busybox1.37.0-r30not availableMediumnot suppressed
CVE-2025-60876busybox-binsh1.37.0-r30not availableMediumnot suppressed
CVE-2025-60876ssl_client1.37.0-r30not availableMediumnot suppressed
CVE-2025-49112redis8.6.4not availableLownot suppressed

4 findings, including suppressed matches where reported.