victoria-metrics v1.154.0-tpio.2 grype

VictoriaMetrics image page

publish scan at 2026-10-22T00:27:27Z. Digest: sha256:f8bdff5c1c00d0a02941b47aa29e352a40bec5b84ff4a32815ace2c5dfed7a3c.

Predicates verified from the signed registry attestations.

Predicate type: https://thepeoples.io/attestations/grype-report/v1. SHA-256 of original predicate (compact JSON plus newline): 8a2298a338bf08ed92e5a5e0d9d6ec96f65846b98ba7e8b27c7b86281e1f6378.

cosign verify-attestation --key https://thepeoples.io/keys/oci.thepeoples.io.pub --insecure-ignore-tlog --type https://thepeoples.io/attestations/grype-report/v1 oci.thepeoples.io/hardened/victoria-metrics@sha256:f8bdff5c1c00d0a02941b47aa29e352a40bec5b84ff4a32815ace2c5dfed7a3c | jq -r '.payload' | base64 -d | jq -c '.predicate' | sha256sum

Private fields prevent static publication of the original JSON. The view below shows public fields. Fetch the unchanged signed original with the command above.

0 findings, including suppressed matches where reported.