{"SchemaVersion":2,"Trivy":{"Version":"0.75.0"},"ReportID":"01a16101-747f-766e-88ef-8540b046b4dc","CreatedAt":"2026-10-22T00:27:27.743423678Z","ArtifactID":"sha256:dbd61f5e45aa153528031fdedcadf24641f7f736ed6a71326dcf5f69f462ff96","ArtifactName":"build/payload/victoria-metrics-v1.154.0-tpio.2","ArtifactType":"container_image","Metadata":{"Size":19208704,"ImageID":"sha256:dbd61f5e45aa153528031fdedcadf24641f7f736ed6a71326dcf5f69f462ff96","DiffIDs":["sha256:7b8b976f9a7982ebb5d599662fe11e4eed5c861e3644f377bb5addc0e7b75292","sha256:78478f0224f8e42062cc71c049d586ea4c10e2b8e5bae1955607fabd08c71dfc","sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806","sha256:7fe382f6a95119c0b05882a0598568c940e2bf2828ae872b8b8e85d76064ea55"],"ImageConfig":{"architecture":"amd64","created":"2026-10-21T21:30:32.859502039Z","history":[{"created":"2026-10-21T21:30:19.873000866Z","created_by":"/bin/sh -c #(nop) ARG GO_IMAGE","empty_layer":true},{"created":"2026-10-21T21:30:20.569901907Z","created_by":"/bin/sh -c #(nop) COPY dir:9a03f19d6e737aefeb53249fc1dd8c1cc48d73e317c56d4b4eb134bbaa76a8e2 in /      "},{"created":"2026-10-21T21:30:22.000973381Z","created_by":"/bin/sh -c #(nop) COPY file:1af288bbd4686792413d89889328f3cb1c24df2b8ce5b1979abc2daa7c8a25fd in /etc/ssl/certs/ca-certificates.crt      "},{"created":"2026-10-21T21:30:24.000957684Z","created_by":"/bin/sh -c #(nop) COPY file:5684b0aaf488728fc00f69f4aa9f07afea742c8aed75eb0ecac659c1a16d7ffb in /victoria-metrics-prod      "},{"created":"2026-10-21T21:30:26.001120367Z","created_by":"/bin/sh -c #(nop) COPY dir:8aa2ea0ee2c6acebc376716b93f5b128146d44ec4b4f73ef2afb18391eef67eb in /usr/share/tp-hardened/victoria-metrics/      "},{"created":"2026-10-21T21:30:26.772259425Z","created_by":"/bin/sh -c #(nop) USER 65532:65532","empty_layer":true},{"created":"2026-10-21T21:30:27.277604055Z","created_by":"/bin/sh -c #(nop) WORKDIR /","empty_layer":true},{"created":"2026-10-21T21:30:28.482454786Z","created_by":"/bin/sh -c #(nop) EXPOSE 8428","empty_layer":true},{"created":"2026-10-21T21:30:30.09058492Z","created_by":"/bin/sh -c #(nop) ENTRYPOINT [\"/victoria-metrics-prod\"]","empty_layer":true},{"created":"2026-10-21T21:30:31.287415093Z","created_by":"/bin/sh -c #(nop) CMD [\"-storageDataPath=/storage\", \"-retentionPeriod=14d\", \"-httpListenAddr=:8428\"]","empty_layer":true},{"created":"2026-10-21T21:30:32.859637277Z","created_by":"/bin/sh -c #(nop) LABEL org.opencontainers.image.version=\"v1.154.0\"       org.opencontainers.image.source=\"https://github.com/VictoriaMetrics/VictoriaMetrics\"       org.opencontainers.image.revision=\"29c43cd2fee05409499a4d1b38e950e1b7f13bd4\"       org.opencontainers.image.licenses=\"Apache-2.0\"       io.thepeoples.hardened.distribution=\"vmsingle\"       io.thepeoples.hardened.ladder=\"b+minimize\"       io.thepeoples.hardened.toolchain=\"${GO_IMAGE}\"       io.thepeoples.hardened.source-status=\"upstream release tarball plus this Containerfile and recorded module changes\"","empty_layer":true}],"os":"linux","rootfs":{"type":"layers","diff_ids":["sha256:7b8b976f9a7982ebb5d599662fe11e4eed5c861e3644f377bb5addc0e7b75292","sha256:78478f0224f8e42062cc71c049d586ea4c10e2b8e5bae1955607fabd08c71dfc","sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806","sha256:7fe382f6a95119c0b05882a0598568c940e2bf2828ae872b8b8e85d76064ea55"]},"config":{"Cmd":["-storageDataPath=/storage","-retentionPeriod=14d","-httpListenAddr=:8428"],"Entrypoint":["/victoria-metrics-prod"],"Env":["PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"],"Labels":{"io.buildah.version":"1.43.1","io.thepeoples.hardened.distribution":"vmsingle","io.thepeoples.hardened.ladder":"b+minimize","io.thepeoples.hardened.source-status":"upstream release tarball plus this Containerfile and recorded module changes","io.thepeoples.hardened.toolchain":"docker.io/library/golang:1.27.3-alpine3.24@sha256:f2c872bcee949b7be9c490efd02b48a8a2fbf947cdf533f1c58525ec9d8170fd","org.opencontainers.image.licenses":"Apache-2.0","org.opencontainers.image.revision":"29c43cd2fee05409499a4d1b38e950e1b7f13bd4","org.opencontainers.image.source":"https://github.com/VictoriaMetrics/VictoriaMetrics","org.opencontainers.image.version":"v1.154.0"},"User":"65532:65532","WorkingDir":"/","ExposedPorts":{"8428/tcp":{}}}},"Layers":[{"Size":4608,"Digest":"sha256:f5b8ae1fe866de09af8403dc512dde364b8c2af4f15fbc0b59e708656dffe182","DiffID":"sha256:7b8b976f9a7982ebb5d599662fe11e4eed5c861e3644f377bb5addc0e7b75292"},{"Size":184832,"Digest":"sha256:dd8e5738421fa5588d826f757ddbdc72685a4dd984941316cfc8bc63a05ebdd2","DiffID":"sha256:78478f0224f8e42062cc71c049d586ea4c10e2b8e5bae1955607fabd08c71dfc"},{"Size":18798592,"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},{"Size":220672,"Digest":"sha256:033aeb21446c4b63e3520ee28815f54d67705ee1f8cdfcbe36bfc7c09d384ee2","DiffID":"sha256:7fe382f6a95119c0b05882a0598568c940e2bf2828ae872b8b8e85d76064ea55"}]},"Results":[{"Target":"victoria-metrics-prod","Class":"lang-pkgs","Type":"gobinary","Packages":[{"ID":"github.com/VictoriaMetrics/VictoriaMetrics","Name":"github.com/VictoriaMetrics/VictoriaMetrics","Identifier":{"PURL":"pkg:golang/github.com/victoriametrics/victoriametrics","UID":"73cb49b05e7fbd91"},"Relationship":"root","DependsOn":["cloud.google.com/go/compute/metadata@v0.10.0","github.com/VictoriaMetrics/easyproto@v1.2.0","github.com/VictoriaMetrics/fastcache@v1.13.3","github.com/VictoriaMetrics/metrics@v1.44.1","github.com/VictoriaMetrics/metricsql@v0.87.5","github.com/cespare/xxhash/v2@v2.3.0","github.com/golang/snappy@v1.0.0","github.com/klauspost/compress@v1.20.1","github.com/valyala/bytebufferpool@v1.0.0","github.com/valyala/fastjson@v1.6.10","github.com/valyala/fastrand@v1.1.0","github.com/valyala/fasttemplate@v1.2.2","github.com/valyala/histogram@v1.2.0","github.com/valyala/quicktemplate@v1.8.0","golang.org/x/net@v0.60.0","golang.org/x/oauth2@v0.37.0","golang.org/x/sys@v0.48.0","gopkg.in/yaml.v2@v2.4.0","stdlib@v1.27.3"],"Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"stdlib@v1.27.3","Name":"stdlib","Identifier":{"PURL":"pkg:golang/stdlib@v1.27.3","UID":"bb9c30d70f994d53"},"Version":"v1.27.3","Relationship":"direct","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"cloud.google.com/go/compute/metadata@v0.10.0","Name":"cloud.google.com/go/compute/metadata","Identifier":{"PURL":"pkg:golang/cloud.google.com/go/compute/metadata@v0.10.0","UID":"bbc770fd4e92fee8"},"Version":"v0.10.0","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"github.com/VictoriaMetrics/easyproto@v1.2.0","Name":"github.com/VictoriaMetrics/easyproto","Identifier":{"PURL":"pkg:golang/github.com/victoriametrics/easyproto@v1.2.0","UID":"e0d4a4699d3bf61c"},"Version":"v1.2.0","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"github.com/VictoriaMetrics/fastcache@v1.13.3","Name":"github.com/VictoriaMetrics/fastcache","Identifier":{"PURL":"pkg:golang/github.com/victoriametrics/fastcache@v1.13.3","UID":"289164f755a4e54a"},"Version":"v1.13.3","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"github.com/VictoriaMetrics/metrics@v1.44.1","Name":"github.com/VictoriaMetrics/metrics","Identifier":{"PURL":"pkg:golang/github.com/victoriametrics/metrics@v1.44.1","UID":"8e25027fef77d327"},"Version":"v1.44.1","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"github.com/VictoriaMetrics/metricsql@v0.87.5","Name":"github.com/VictoriaMetrics/metricsql","Identifier":{"PURL":"pkg:golang/github.com/victoriametrics/metricsql@v0.87.5","UID":"e5d9dbed5d3902fb"},"Version":"v0.87.5","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"github.com/cespare/xxhash/v2@v2.3.0","Name":"github.com/cespare/xxhash/v2","Identifier":{"PURL":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0","UID":"4ed47b4b0f0cfe41"},"Version":"v2.3.0","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"github.com/golang/snappy@v1.0.0","Name":"github.com/golang/snappy","Identifier":{"PURL":"pkg:golang/github.com/golang/snappy@v1.0.0","UID":"bdb1b761d0b1b5cf"},"Version":"v1.0.0","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"github.com/klauspost/compress@v1.20.1","Name":"github.com/klauspost/compress","Identifier":{"PURL":"pkg:golang/github.com/klauspost/compress@v1.20.1","UID":"253ee91f97120158"},"Version":"v1.20.1","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"github.com/valyala/bytebufferpool@v1.0.0","Name":"github.com/valyala/bytebufferpool","Identifier":{"PURL":"pkg:golang/github.com/valyala/bytebufferpool@v1.0.0","UID":"e3271e7cbad91a04"},"Version":"v1.0.0","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"github.com/valyala/fastjson@v1.6.10","Name":"github.com/valyala/fastjson","Identifier":{"PURL":"pkg:golang/github.com/valyala/fastjson@v1.6.10","UID":"5da955641baaca38"},"Version":"v1.6.10","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"github.com/valyala/fastrand@v1.1.0","Name":"github.com/valyala/fastrand","Identifier":{"PURL":"pkg:golang/github.com/valyala/fastrand@v1.1.0","UID":"dcf1dca21602c3b5"},"Version":"v1.1.0","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"github.com/valyala/fasttemplate@v1.2.2","Name":"github.com/valyala/fasttemplate","Identifier":{"PURL":"pkg:golang/github.com/valyala/fasttemplate@v1.2.2","UID":"17b6fac2b14ef4d6"},"Version":"v1.2.2","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"github.com/valyala/histogram@v1.2.0","Name":"github.com/valyala/histogram","Identifier":{"PURL":"pkg:golang/github.com/valyala/histogram@v1.2.0","UID":"9832a18e759a7333"},"Version":"v1.2.0","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"github.com/valyala/quicktemplate@v1.8.0","Name":"github.com/valyala/quicktemplate","Identifier":{"PURL":"pkg:golang/github.com/valyala/quicktemplate@v1.8.0","UID":"bbbedcf5b0064f1b"},"Version":"v1.8.0","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/net@v0.60.0","Name":"golang.org/x/net","Identifier":{"PURL":"pkg:golang/golang.org/x/net@v0.60.0","UID":"6adfc90205010f0e"},"Version":"v0.60.0","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/oauth2@v0.37.0","Name":"golang.org/x/oauth2","Identifier":{"PURL":"pkg:golang/golang.org/x/oauth2@v0.37.0","UID":"66012b5eb3648a35"},"Version":"v0.37.0","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"golang.org/x/sys@v0.48.0","Name":"golang.org/x/sys","Identifier":{"PURL":"pkg:golang/golang.org/x/sys@v0.48.0","UID":"aaa196b3f25bf88b"},"Version":"v0.48.0","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"},{"ID":"gopkg.in/yaml.v2@v2.4.0","Name":"gopkg.in/yaml.v2","Identifier":{"PURL":"pkg:golang/gopkg.in/yaml.v2@v2.4.0","UID":"870925001f5a4b30"},"Version":"v2.4.0","Layer":{"Digest":"sha256:081131f5587c104db3a779442fc47360203812c8d4855c51ec3f2c68a92377e9","DiffID":"sha256:50033a8da0eb7068e79780b54be52d4ad35f4e97ec876252665cca296adcf806"},"AnalyzedBy":"gobinary"}]}]}