traefik v3.7.14-tpio.1 trivy

Traefik image page

publish scan at 2026-10-10T21:46:50Z. Digest: sha256:409042a74e0c1a0f882dc90c7694b4933e13ade589defe4e814882a151427ef5.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/trivy-report/v1. SHA-256 of original predicate (compact JSON plus newline): 87b4fd8bb6e33b38c08c41099fd5f4300a9d84b6ed834b6a32cf3dc019b9a800.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/trivy-report/v1 oci.thepeoples.io/hardened/traefik@sha256:409042a74e0c1a0f882dc90c7694b4933e13ade589defe4e814882a151427ef5 | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Full trivy.json JSON

1 findings, including suppressed matches where reported.