Quarry 20260910

First Shape A release for Quarry. Binds git tag 20260910 (commit 303c4631fcc781d52b85478f26686c376e47915f) to public OCI image oci.thepeoples.io/desktop/quarry:stable @ sha256:c413f846832e92858e6772e8dbb7f6c38340ec4622f1a0b40a68de778e2ae65b (also tagged git-303c463). Cosign-verified with thepeoples.io OCI pubkey.

Release scan 2026-11-07 · not inventoried

Release

project
desktop-quarry
version
20260910
commit
303c4631fcc781d52b85478f26686c376e47915f
built_at
2026-09-10T19:48:00Z

Files

namesha256content type
quarry-stable.oci-pointer.jsonf269eda553ee7bd430f6c26863810a6360ab894b9759daeb834796826249af48application/json

Release scan

Release sbom sbom.spdx.json scanned with Trivy. 2026-11-07 06:48 UTC · trivy 0.73.0. Gate fails on release CRITICAL.

Release

Trivy could not map packages in this SBOM. That is not a clean bill of health.

not inventoried

sbom named no packages Trivy can map

gate pass

Full report (JSON)

Previous scans

Daily Trivy refresh of release SBOMs. Current report plus the last 14 full scans.

ScannedVuln DBVersionReleaseReport
2026-11-06 06:48 UTC—20260910noneJSON
2026-11-05 06:48 UTC—20260910noneJSON
2026-11-03 06:48 UTC—20260910noneJSON
2026-11-02 06:48 UTC—20260910noneJSON
2026-11-01 06:48 UTC—20260910noneJSON
2026-10-31 06:48 UTC—20260910noneJSON
2026-10-30 06:49 UTC—20260910noneJSON
2026-10-29 06:49 UTC—20260910noneJSON
2026-10-28 06:49 UTC—20260910noneJSON
2026-10-27 06:48 UTC—20260910noneJSON
2026-10-26 06:48 UTC—20260910noneJSON
2026-10-25 06:49 UTC—20260910noneJSON
2026-10-24 06:48 UTC—20260910noneJSON
2026-10-23 06:49 UTC—20260910noneJSON