{
  "images": [
    {
      "category": "Monitoring & Observability",
      "description": "Prometheus Alertmanager built from pinned upstream source.",
      "digest": "sha256:9bc15d42a9e44cd68f3eb90b8cf01f6d3016e48729bbed6d5fdb2b5b3d3f5a53",
      "inputDigest": "sha256:e885a83fb1763cd410cd36eebb3364250871541f0afd6feb7e465421de0b7dc9",
      "name": "alertmanager",
      "reference": "ghcr.io/tektum/alertmanager@sha256:9bc15d42a9e44cd68f3eb90b8cf01f6d3016e48729bbed6d5fdb2b5b3d3f5a53",
      "registry": "ghcr.io/tektum/alertmanager",
      "runId": "34625288376",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34625288376",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-alertmanager-0",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "0",
        "0-20260911",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-11T17:15:11Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/alertmanager@sha256:9bc15d42a9e44cd68f3eb90b8cf01f6d3016e48729bbed6d5fdb2b5b3d3f5a53 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/alertmanager@sha256:9bc15d42a9e44cd68f3eb90b8cf01f6d3016e48729bbed6d5fdb2b5b3d3f5a53",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/alertmanager@sha256:9bc15d42a9e44cd68f3eb90b8cf01f6d3016e48729bbed6d5fdb2b5b3d3f5a53"
      },
      "version": "0"
    },
    {
      "description": "Argo Workflows executor built from a pinned upstream source release.",
      "digest": "sha256:86206cabd4af89bf19cae163d92fb102292b235f65f601ae7e046642064cd585",
      "inputDigest": "sha256:61d152ac6fc9febeea2c1776111c830713d454054770cff264770419053066ea",
      "name": "argo-workflows",
      "reference": "ghcr.io/tektum/argo-workflows@sha256:86206cabd4af89bf19cae163d92fb102292b235f65f601ae7e046642064cd585",
      "registry": "ghcr.io/tektum/argo-workflows",
      "runId": "34454316811",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34454316811",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-argo-workflows-4.1",
      "sourceCommit": "caa6704b83557ae002a27fc5e664f22d5f87c9a9",
      "tags": [
        "4.1",
        "4.1-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T09:03:52Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/argo-workflows@sha256:86206cabd4af89bf19cae163d92fb102292b235f65f601ae7e046642064cd585 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/argo-workflows@sha256:86206cabd4af89bf19cae163d92fb102292b235f65f601ae7e046642064cd585",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/argo-workflows@sha256:86206cabd4af89bf19cae163d92fb102292b235f65f601ae7e046642064cd585"
      },
      "version": "4.1"
    },
    {
      "description": "Argo CD built from a pinned upstream source release.",
      "digest": "sha256:0004bf91b335fdd8c2bc79125f254a84accc8eb53acc7702b0fe7e54ab5620de",
      "inputDigest": "sha256:07073db70d541ca88f94af69391eebc463cec37835b4556b713aceead29814da",
      "name": "argocd",
      "reference": "ghcr.io/tektum/argocd@sha256:0004bf91b335fdd8c2bc79125f254a84accc8eb53acc7702b0fe7e54ab5620de",
      "registry": "ghcr.io/tektum/argocd",
      "runId": "34454319239",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34454319239",
      "scan": {
        "all": {
          "low": 2,
          "medium": 2,
          "unknown": 6
        },
        "fixable": 0
      },
      "scanArtifact": "scan-argocd-3.5",
      "sourceCommit": "caa6704b83557ae002a27fc5e664f22d5f87c9a9",
      "tags": [
        "3.5",
        "3.5-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T09:18:46Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/argocd@sha256:0004bf91b335fdd8c2bc79125f254a84accc8eb53acc7702b0fe7e54ab5620de --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/argocd@sha256:0004bf91b335fdd8c2bc79125f254a84accc8eb53acc7702b0fe7e54ab5620de",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/argocd@sha256:0004bf91b335fdd8c2bc79125f254a84accc8eb53acc7702b0fe7e54ab5620de"
      },
      "version": "3.5"
    },
    {
      "category": "Base & Utilities",
      "description": "Syntax-highlighting cat replacement assembled from Wolfi packages.",
      "digest": "sha256:7cce676678eb5d0bbbee6d94454739312b7d5b0ac5f9adfe0be3566e0baeae69",
      "inputDigest": "sha256:3e4e3c42bbeb0ab61449ac5e87c1d1e963e06b5b4da44164a9ee2034bb904d55",
      "name": "bat",
      "reference": "ghcr.io/tektum/bat@sha256:7cce676678eb5d0bbbee6d94454739312b7d5b0ac5f9adfe0be3566e0baeae69",
      "registry": "ghcr.io/tektum/bat",
      "runId": "34682301247",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682301247",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-bat-0",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "0",
        "0-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:38:16Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/bat@sha256:7cce676678eb5d0bbbee6d94454739312b7d5b0ac5f9adfe0be3566e0baeae69 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/bat@sha256:7cce676678eb5d0bbbee6d94454739312b7d5b0ac5f9adfe0be3566e0baeae69",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/bat@sha256:7cce676678eb5d0bbbee6d94454739312b7d5b0ac5f9adfe0be3566e0baeae69"
      },
      "version": "0"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Bazel build system assembled from Wolfi packages.",
      "digest": "sha256:2b8401cd823311082f78f4bfd387c4e0ce6fdce044a7f8d9f949a1f3442c8e17",
      "inputDigest": "sha256:c5c741ea01e07b2f1c91b80c9ff67a3998c0183f2f2ca28ffc0e51e713d9f868",
      "name": "bazel",
      "reference": "ghcr.io/tektum/bazel@sha256:2b8401cd823311082f78f4bfd387c4e0ce6fdce044a7f8d9f949a1f3442c8e17",
      "registry": "ghcr.io/tektum/bazel",
      "runId": "34717199876",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34717199876",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-bazel-9",
      "sourceCommit": "ec25770d2029bda5ca3fc5cb725efff9d04bbc39",
      "tags": [
        "9",
        "9-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T20:32:32Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/bazel@sha256:2b8401cd823311082f78f4bfd387c4e0ce6fdce044a7f8d9f949a1f3442c8e17 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/bazel@sha256:2b8401cd823311082f78f4bfd387c4e0ce6fdce044a7f8d9f949a1f3442c8e17",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/bazel@sha256:2b8401cd823311082f78f4bfd387c4e0ce6fdce044a7f8d9f949a1f3442c8e17"
      },
      "version": "9"
    },
    {
      "category": "Monitoring & Observability",
      "description": "Prometheus Blackbox Exporter built from pinned upstream source.",
      "digest": "sha256:b1fcf7d040712e6d487e988ccd87136b230298ef4b81dc3aa5e9d83c5d7701b4",
      "inputDigest": "sha256:f1eb22168143670886a059cc8b5c2db83666325762cb7c0de92727aeea266035",
      "name": "blackbox-exporter",
      "reference": "ghcr.io/tektum/blackbox-exporter@sha256:b1fcf7d040712e6d487e988ccd87136b230298ef4b81dc3aa5e9d83c5d7701b4",
      "registry": "ghcr.io/tektum/blackbox-exporter",
      "runId": "34454321535",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34454321535",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-blackbox-exporter-0.28.0",
      "sourceCommit": "caa6704b83557ae002a27fc5e664f22d5f87c9a9",
      "tags": [
        "0.28.0",
        "0.28.0-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T08:29:30Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/blackbox-exporter@sha256:b1fcf7d040712e6d487e988ccd87136b230298ef4b81dc3aa5e9d83c5d7701b4 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/blackbox-exporter@sha256:b1fcf7d040712e6d487e988ccd87136b230298ef4b81dc3aa5e9d83c5d7701b4",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/blackbox-exporter@sha256:b1fcf7d040712e6d487e988ccd87136b230298ef4b81dc3aa5e9d83c5d7701b4"
      },
      "version": "0.28.0"
    },
    {
      "category": "Base & Utilities",
      "description": "Docker Official BusyBox byte-identical mirror.",
      "digest": "sha256:1fb6008d891733dc177f67317d2fa13307d9fd91ade04aed760722ab0a6c0c8d",
      "inputDigest": "sha256:0295c637358406328ceb60c39d38b8447b1903494f365800093c3ab2c87368ea",
      "name": "busybox",
      "reference": "ghcr.io/tektum/busybox@sha256:1fb6008d891733dc177f67317d2fa13307d9fd91ade04aed760722ab0a6c0c8d",
      "registry": "ghcr.io/tektum/busybox",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "delta": {
          "high": 0
        },
        "final": {
          "high": 6
        },
        "fixable": 0,
        "upstream": {
          "high": 6
        }
      },
      "scanArtifact": "scan-busybox-1.38.0",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "1.38.0",
        "1.38.0-20260907",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-07T16:36:33Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/busybox@sha256:1fb6008d891733dc177f67317d2fa13307d9fd91ade04aed760722ab0a6c0c8d --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/busybox@sha256:1fb6008d891733dc177f67317d2fa13307d9fd91ade04aed760722ab0a6c0c8d",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/busybox@sha256:1fb6008d891733dc177f67317d2fa13307d9fd91ade04aed760722ab0a6c0c8d"
      },
      "version": "1.38.0"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Caddy built from pinned source with plain and Go FIPS flavors.",
      "digest": "sha256:8d67872c9f8969d58c436b1be7b10777ce49ddd15c471ae29c2a80039e9de412",
      "inputDigest": "sha256:694f51a31841dd84a6624bdc993cf610a029a876d94a69b4db1dc580416a7ce8",
      "name": "caddy",
      "reference": "ghcr.io/tektum/caddy@sha256:8d67872c9f8969d58c436b1be7b10777ce49ddd15c471ae29c2a80039e9de412",
      "registry": "ghcr.io/tektum/caddy",
      "runId": "34717494408",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34717494408",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-caddy-2.11.4",
      "sourceCommit": "b3b0b5f7fcdc1568d86676e640917d9f17ed9756",
      "tags": [
        "2",
        "2.11.4",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T20:50:46Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/caddy@sha256:8d67872c9f8969d58c436b1be7b10777ce49ddd15c471ae29c2a80039e9de412 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/caddy@sha256:8d67872c9f8969d58c436b1be7b10777ce49ddd15c471ae29c2a80039e9de412",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/caddy@sha256:8d67872c9f8969d58c436b1be7b10777ce49ddd15c471ae29c2a80039e9de412"
      },
      "version": "2.11.4"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Caddy built from pinned source with plain and Go FIPS flavors.",
      "digest": "sha256:81f5f22f0687ab8b3728fcd9adec1cc9cbfbeec9f856851051ada0f9febfd690",
      "inputDigest": "sha256:5c636d1f09d0c23275d0aa93a79f8081c947d93b1b43d502b7bba60ba8ab01a1",
      "name": "caddy",
      "reference": "ghcr.io/tektum/caddy@sha256:81f5f22f0687ab8b3728fcd9adec1cc9cbfbeec9f856851051ada0f9febfd690",
      "registry": "ghcr.io/tektum/caddy",
      "runId": "34717494408",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34717494408",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-caddy-2.11.4-fips",
      "sourceCommit": "b3b0b5f7fcdc1568d86676e640917d9f17ed9756",
      "tags": [
        "2-fips",
        "2.11.4-fips",
        "latest-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T20:50:50Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/caddy@sha256:81f5f22f0687ab8b3728fcd9adec1cc9cbfbeec9f856851051ada0f9febfd690 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/caddy@sha256:81f5f22f0687ab8b3728fcd9adec1cc9cbfbeec9f856851051ada0f9febfd690",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/caddy@sha256:81f5f22f0687ab8b3728fcd9adec1cc9cbfbeec9f856851051ada0f9febfd690"
      },
      "version": "2.11.4-fips"
    },
    {
      "category": "Databases & Caching",
      "description": "Apache Cassandra distributed NoSQL database assembled from Wolfi packages.",
      "digest": "sha256:0260a9e4e9012ac42e5958b5c0121440b19a310801e2b100f7a8ad5e8c267db3",
      "inputDigest": "sha256:77451432818c52cbcf8401435ac814a106fc5e990400c7cc7b5eabb5a73dc850",
      "name": "cassandra",
      "reference": "ghcr.io/tektum/cassandra@sha256:0260a9e4e9012ac42e5958b5c0121440b19a310801e2b100f7a8ad5e8c267db3",
      "registry": "ghcr.io/tektum/cassandra",
      "runId": "34691454673",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34691454673",
      "scan": {
        "all": {
          "high": 2,
          "low": 2,
          "medium": 12,
          "negligible": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-cassandra-5.0",
      "sourceCommit": "bd336904064e864b27e07b46a4e70d46cfacd5d2",
      "tags": [
        "5.0",
        "5.0-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T12:16:56Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/cassandra@sha256:0260a9e4e9012ac42e5958b5c0121440b19a310801e2b100f7a8ad5e8c267db3 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cassandra@sha256:0260a9e4e9012ac42e5958b5c0121440b19a310801e2b100f7a8ad5e8c267db3",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cassandra@sha256:0260a9e4e9012ac42e5958b5c0121440b19a310801e2b100f7a8ad5e8c267db3"
      },
      "version": "5.0"
    },
    {
      "description": "Kubernetes controller for automated certificate issuance and renewal.",
      "digest": "sha256:ef972928d426edce6bdd6bb05ef487f32977aa89a33521da91093b81f9bd373d",
      "inputDigest": "sha256:397871b6484727612fd68cd740af67704649784ae8501c5ec5d1d7e4df18f817",
      "name": "cert-manager-controller",
      "reference": "ghcr.io/tektum/cert-manager-controller@sha256:ef972928d426edce6bdd6bb05ef487f32977aa89a33521da91093b81f9bd373d",
      "registry": "ghcr.io/tektum/cert-manager-controller",
      "runId": "34454330984",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34454330984",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-cert-manager-controller-1.19",
      "sourceCommit": "caa6704b83557ae002a27fc5e664f22d5f87c9a9",
      "tags": [
        "1.19",
        "1.19-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T08:36:45Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/cert-manager-controller@sha256:ef972928d426edce6bdd6bb05ef487f32977aa89a33521da91093b81f9bd373d --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cert-manager-controller@sha256:ef972928d426edce6bdd6bb05ef487f32977aa89a33521da91093b81f9bd373d",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cert-manager-controller@sha256:ef972928d426edce6bdd6bb05ef487f32977aa89a33521da91093b81f9bd373d"
      },
      "version": "1.19"
    },
    {
      "category": "Databases & Caching",
      "description": "ClickHouse column-oriented database assembled from Wolfi packages.",
      "digest": "sha256:ed7b08f66c40f5e330065dd55a32153cab05479b94f9dde3641f985337a26976",
      "inputDigest": "sha256:f495adafe4974e90abc6543f1f379eef96bf9d22f1edf1959c4c01802c33a4ff",
      "name": "clickhouse",
      "reference": "ghcr.io/tektum/clickhouse@sha256:ed7b08f66c40f5e330065dd55a32153cab05479b94f9dde3641f985337a26976",
      "registry": "ghcr.io/tektum/clickhouse",
      "runId": "34719497856",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34719497856",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-clickhouse-26.5",
      "sourceCommit": "cc8a1ec946aca9c348c01feb966aa3ae7b6208d6",
      "tags": [
        "26.5",
        "26.5-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T21:20:45Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/clickhouse@sha256:ed7b08f66c40f5e330065dd55a32153cab05479b94f9dde3641f985337a26976 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/clickhouse@sha256:ed7b08f66c40f5e330065dd55a32153cab05479b94f9dde3641f985337a26976",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/clickhouse@sha256:ed7b08f66c40f5e330065dd55a32153cab05479b94f9dde3641f985337a26976"
      },
      "version": "26.5"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes Cluster Autoscaler assembled from Wolfi packages.",
      "digest": "sha256:4f890a8d7aed0fad93f7b66975283dc8b48cb2b29122c56d94b3503828fb1a8c",
      "inputDigest": "sha256:6e035609f03c405056e52bb0bb5efd44571a59de61ff9b1bd15036b98cbccf4c",
      "name": "cluster-autoscaler",
      "reference": "ghcr.io/tektum/cluster-autoscaler@sha256:4f890a8d7aed0fad93f7b66975283dc8b48cb2b29122c56d94b3503828fb1a8c",
      "registry": "ghcr.io/tektum/cluster-autoscaler",
      "runId": "34454333637",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34454333637",
      "scan": {
        "all": {
          "low": 2,
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-cluster-autoscaler-1.36",
      "sourceCommit": "caa6704b83557ae002a27fc5e664f22d5f87c9a9",
      "tags": [
        "1.36",
        "1.36-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T08:53:10Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/cluster-autoscaler@sha256:4f890a8d7aed0fad93f7b66975283dc8b48cb2b29122c56d94b3503828fb1a8c --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cluster-autoscaler@sha256:4f890a8d7aed0fad93f7b66975283dc8b48cb2b29122c56d94b3503828fb1a8c",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cluster-autoscaler@sha256:4f890a8d7aed0fad93f7b66975283dc8b48cb2b29122c56d94b3503828fb1a8c"
      },
      "version": "1.36"
    },
    {
      "description": "Cross-platform build system assembled from pinned upstream source.",
      "digest": "sha256:34c420456097da474116c9ea042bd5a558e512c79df7e82284d325b28a649706",
      "inputDigest": "sha256:54b9cbd5d2a67c4351337b69fed0b089abb6de9e88aa79412ea40632b1fac75a",
      "name": "cmake",
      "reference": "ghcr.io/tektum/cmake@sha256:34c420456097da474116c9ea042bd5a558e512c79df7e82284d325b28a649706",
      "registry": "ghcr.io/tektum/cmake",
      "runId": "34682307051",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682307051",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-cmake-4.1",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "4.1",
        "4.1-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T09:14:36Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/cmake@sha256:34c420456097da474116c9ea042bd5a558e512c79df7e82284d325b28a649706 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cmake@sha256:34c420456097da474116c9ea042bd5a558e512c79df7e82284d325b28a649706",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cmake@sha256:34c420456097da474116c9ea042bd5a558e512c79df7e82284d325b28a649706"
      },
      "version": "4.1"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "ConfigMap and Secret volume watcher with webhook-triggered reloads.",
      "digest": "sha256:bd4b16792592559d2e2e28d97c4a341b33ff1ffccebb4d2a104ec35aa256c468",
      "inputDigest": "sha256:a024c2de945170f5fd1ee47c7016237437cfcd805b4f984cd4498058b8080906",
      "name": "configmap-reload",
      "reference": "ghcr.io/tektum/configmap-reload@sha256:bd4b16792592559d2e2e28d97c4a341b33ff1ffccebb4d2a104ec35aa256c468",
      "registry": "ghcr.io/tektum/configmap-reload",
      "runId": "34682308144",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682308144",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-configmap-reload-latest",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "latest",
        "latest-20260912"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:13:03Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/configmap-reload@sha256:bd4b16792592559d2e2e28d97c4a341b33ff1ffccebb4d2a104ec35aa256c468 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/configmap-reload@sha256:bd4b16792592559d2e2e28d97c4a341b33ff1ffccebb4d2a104ec35aa256c468",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/configmap-reload@sha256:bd4b16792592559d2e2e28d97c4a341b33ff1ffccebb4d2a104ec35aa256c468"
      },
      "version": "latest"
    },
    {
      "description": "Contour Kubernetes ingress controller built from a pinned upstream source commit.",
      "digest": "sha256:161c9110bd19f1ec9acd5e35ecaa6499736419f667ae7828e64651f0dc756f82",
      "inputDigest": "sha256:f9b925127c280d41abd92662383b030b44609f815ba76fff10d99cd9765ab073",
      "name": "contour",
      "reference": "ghcr.io/tektum/contour@sha256:161c9110bd19f1ec9acd5e35ecaa6499736419f667ae7828e64651f0dc756f82",
      "registry": "ghcr.io/tektum/contour",
      "runId": "34454335443",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34454335443",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-contour-1.33",
      "sourceCommit": "caa6704b83557ae002a27fc5e664f22d5f87c9a9",
      "tags": [
        "1.33",
        "1.33-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T08:35:43Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/contour@sha256:161c9110bd19f1ec9acd5e35ecaa6499736419f667ae7828e64651f0dc756f82 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/contour@sha256:161c9110bd19f1ec9acd5e35ecaa6499736419f667ae7828e64651f0dc756f82",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/contour@sha256:161c9110bd19f1ec9acd5e35ecaa6499736419f667ae7828e64651f0dc756f82"
      },
      "version": "1.33"
    },
    {
      "category": "Service Mesh & Networking",
      "description": "Extensible DNS server with a plugin-based configuration model.",
      "digest": "sha256:6ee4b48f3534fc2fa9d6f320ca7f74d43dd9d446a46007ca7c46ede8525aeb7e",
      "inputDigest": "sha256:1f52d15aa6e7f1a988fa3bb294158b46347f79e171ff43c210ec4c79e081cdef",
      "name": "coredns",
      "reference": "ghcr.io/tektum/coredns@sha256:6ee4b48f3534fc2fa9d6f320ca7f74d43dd9d446a46007ca7c46ede8525aeb7e",
      "registry": "ghcr.io/tektum/coredns",
      "runId": "34454337594",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34454337594",
      "scan": {
        "all": {
          "medium": 2,
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-coredns-1.14",
      "sourceCommit": "caa6704b83557ae002a27fc5e664f22d5f87c9a9",
      "tags": [
        "1.14",
        "1.14-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T08:36:09Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/coredns@sha256:6ee4b48f3534fc2fa9d6f320ca7f74d43dd9d446a46007ca7c46ede8525aeb7e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/coredns@sha256:6ee4b48f3534fc2fa9d6f320ca7f74d43dd9d446a46007ca7c46ede8525aeb7e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/coredns@sha256:6ee4b48f3534fc2fa9d6f320ca7f74d43dd9d446a46007ca7c46ede8525aeb7e"
      },
      "version": "1.14"
    },
    {
      "category": "Security & Identity",
      "description": "Minimal Sigstore Cosign image assembled from Wolfi packages.",
      "digest": "sha256:0039df7a736e45b08481e7a5d7a35395477e61db36c869955c553156ac2a07c9",
      "inputDigest": "sha256:843d420cb6e05a22375e6b3892e9703a3c22a7b3c864d7447a65b8f6a8a585bf",
      "name": "cosign",
      "reference": "ghcr.io/tektum/cosign@sha256:0039df7a736e45b08481e7a5d7a35395477e61db36c869955c553156ac2a07c9",
      "registry": "ghcr.io/tektum/cosign",
      "runId": "34530490535",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34530490535",
      "scan": {
        "all": {
          "unknown": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-cosign-2",
      "sourceCommit": "25cdc4b26dc80957f804098e1c8ebd4a48a0ed30",
      "tags": [
        "2",
        "2-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T21:12:46Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/cosign@sha256:0039df7a736e45b08481e7a5d7a35395477e61db36c869955c553156ac2a07c9 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cosign@sha256:0039df7a736e45b08481e7a5d7a35395477e61db36c869955c553156ac2a07c9",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cosign@sha256:0039df7a736e45b08481e7a5d7a35395477e61db36c869955c553156ac2a07c9"
      },
      "version": "2"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Crossplane cloud native control plane built from pinned source.",
      "digest": "sha256:6e12a189e280c9d7734aa6d831ad6d9504c6918757641c4d0868dca328100c54",
      "inputDigest": "sha256:c51bfb44c8e6f8218c357bff434da54a24a1194dc01b10d489431891f86866ec",
      "name": "crossplane",
      "reference": "ghcr.io/tektum/crossplane@sha256:6e12a189e280c9d7734aa6d831ad6d9504c6918757641c4d0868dca328100c54",
      "registry": "ghcr.io/tektum/crossplane",
      "runId": "34454342245",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34454342245",
      "scan": {
        "all": {
          "unknown": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-crossplane-2.3.4",
      "sourceCommit": "caa6704b83557ae002a27fc5e664f22d5f87c9a9",
      "tags": [
        "2",
        "2.3.4",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T08:38:33Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/crossplane@sha256:6e12a189e280c9d7734aa6d831ad6d9504c6918757641c4d0868dca328100c54 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/crossplane@sha256:6e12a189e280c9d7734aa6d831ad6d9504c6918757641c4d0868dca328100c54",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/crossplane@sha256:6e12a189e280c9d7734aa6d831ad6d9504c6918757641c4d0868dca328100c54"
      },
      "version": "2.3.4"
    },
    {
      "category": "Base & Utilities",
      "description": "curl HTTP client.",
      "digest": "sha256:f7b07ad91e526b3b51d09d7db3b4a14116f725c7fa187d33735b1072164d2961",
      "inputDigest": "sha256:22e30942685b962e8d67da0c83a85da0a4117d5f5ca0870ce62f55d1fc114c6c",
      "name": "curl",
      "reference": "ghcr.io/tektum/curl@sha256:f7b07ad91e526b3b51d09d7db3b4a14116f725c7fa187d33735b1072164d2961",
      "registry": "ghcr.io/tektum/curl",
      "runId": "34717869795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34717869795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-curl-8",
      "sourceCommit": "1548efa2b3ec36d24d9cfc433c48366a17246e9f",
      "tags": [
        "8",
        "8-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T20:54:22Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/curl@sha256:f7b07ad91e526b3b51d09d7db3b4a14116f725c7fa187d33735b1072164d2961 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/curl@sha256:f7b07ad91e526b3b51d09d7db3b4a14116f725c7fa187d33735b1072164d2961",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/curl@sha256:f7b07ad91e526b3b51d09d7db3b4a14116f725c7fa187d33735b1072164d2961"
      },
      "version": "8"
    },
    {
      "category": "Base & Utilities",
      "description": "Debian slim patched with Copacetic from fixable Trivy findings.",
      "digest": "sha256:caefa180332056a4b0d6d2b0acb6a67df359c796273948348c3bd5846daf9c74",
      "inputDigest": "sha256:e7bc34ba8145b64ba9cae0202893d7c403b4ab1ed7e129fc838db2a2261eee26",
      "name": "debian-12-slim",
      "reference": "ghcr.io/tektum/debian-12-slim@sha256:caefa180332056a4b0d6d2b0acb6a67df359c796273948348c3bd5846daf9c74",
      "registry": "ghcr.io/tektum/debian-12-slim",
      "runId": "34528111898",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34528111898",
      "scan": {
        "delta": {
          "critical": 0,
          "high": -2,
          "low": 0,
          "medium": 0,
          "negligible": 0,
          "unknown": 0
        },
        "final": {
          "critical": 14,
          "high": 100,
          "low": 16,
          "medium": 126,
          "negligible": 116,
          "unknown": 48
        },
        "fixable": 0,
        "upstream": {
          "critical": 14,
          "high": 102,
          "low": 16,
          "medium": 126,
          "negligible": 116,
          "unknown": 48
        }
      },
      "scanArtifact": "scan-debian-12-slim-12",
      "sourceCommit": "0375dae63ae3bfb02663f692a4a1bf660b9614e2",
      "tags": [
        "12",
        "12-20260910",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-10T20:47:30Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/debian-12-slim@sha256:caefa180332056a4b0d6d2b0acb6a67df359c796273948348c3bd5846daf9c74 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/debian-12-slim@sha256:caefa180332056a4b0d6d2b0acb6a67df359c796273948348c3bd5846daf9c74",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/debian-12-slim@sha256:caefa180332056a4b0d6d2b0acb6a67df359c796273948348c3bd5846daf9c74"
      },
      "version": "12"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Deno JavaScript and TypeScript runtime assembled from Wolfi packages.",
      "digest": "sha256:5c43d1e9721bfe2ce085c9a200ae61fbcd2cbd7ab8c37bd5f0a4edc06e4b460e",
      "inputDigest": "sha256:d4f34c4a30d1df1d9e969b56ca1e1f6462e0e1b291052e75e4bf61f12781415a",
      "name": "deno",
      "reference": "ghcr.io/tektum/deno@sha256:5c43d1e9721bfe2ce085c9a200ae61fbcd2cbd7ab8c37bd5f0a4edc06e4b460e",
      "registry": "ghcr.io/tektum/deno",
      "runId": "34698289265",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34698289265",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-deno-2",
      "sourceCommit": "ddbbd1a9b2349195c7ac96cdf05c70ce33043cd9",
      "tags": [
        "2",
        "2-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T17:39:13Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/deno@sha256:5c43d1e9721bfe2ce085c9a200ae61fbcd2cbd7ab8c37bd5f0a4edc06e4b460e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/deno@sha256:5c43d1e9721bfe2ce085c9a200ae61fbcd2cbd7ab8c37bd5f0a4edc06e4b460e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/deno@sha256:5c43d1e9721bfe2ce085c9a200ae61fbcd2cbd7ab8c37bd5f0a4edc06e4b460e"
      },
      "version": "2"
    },
    {
      "category": "Logging",
      "description": "Elastic Cloud on Kubernetes operator.",
      "digest": "sha256:d788ac7b5d21eefd534208854c729935d75d2d406b80a8473fbe1b4066ebd65f",
      "inputDigest": "sha256:afbc84e263fad9185e6a34e1a6914135abc07426e8783c7c2fd71f68c3a33ef9",
      "name": "eck-operator",
      "reference": "ghcr.io/tektum/eck-operator@sha256:d788ac7b5d21eefd534208854c729935d75d2d406b80a8473fbe1b4066ebd65f",
      "registry": "ghcr.io/tektum/eck-operator",
      "runId": "34477660037",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34477660037",
      "scan": {
        "delta": {
          "high": -24,
          "medium": -8,
          "unknown": 0
        },
        "final": {
          "unknown": 2
        },
        "fixable": 0,
        "upstream": {
          "high": 24,
          "medium": 8,
          "unknown": 2
        }
      },
      "scanArtifact": "scan-eck-operator-3.5.0",
      "sourceCommit": "75a55b7d808ab2dc3bd4741a1a9ae51851f95eb0",
      "tags": [
        "3.5.0",
        "3.5.0-20260910",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-10T12:44:04Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/eck-operator@sha256:d788ac7b5d21eefd534208854c729935d75d2d406b80a8473fbe1b4066ebd65f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/eck-operator@sha256:d788ac7b5d21eefd534208854c729935d75d2d406b80a8473fbe1b4066ebd65f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/eck-operator@sha256:d788ac7b5d21eefd534208854c729935d75d2d406b80a8473fbe1b4066ebd65f"
      },
      "version": "3.5.0"
    },
    {
      "description": "EMQX patched from the official image.",
      "digest": "sha256:781c10c0c5ece2f38349ee77e25e113c4d980fa3c8ed86f0e88aca5f168e70b3",
      "inputDigest": "sha256:d7dd6c5d5e2f2a7959184ae7fb42b36ba0023db5da1126d51cd35432f6ac2dee",
      "name": "emqx",
      "reference": "ghcr.io/tektum/emqx@sha256:781c10c0c5ece2f38349ee77e25e113c4d980fa3c8ed86f0e88aca5f168e70b3",
      "registry": "ghcr.io/tektum/emqx",
      "runId": "34816614775",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34816614775",
      "scan": {
        "delta": {
          "critical": -10,
          "high": -92,
          "low": -18,
          "medium": -69,
          "negligible": 18,
          "unknown": -72
        },
        "final": {
          "critical": 32,
          "high": 132,
          "low": 12,
          "medium": 90,
          "negligible": 156,
          "unknown": 16
        },
        "fixable": 0,
        "upstream": {
          "critical": 42,
          "high": 224,
          "low": 30,
          "medium": 159,
          "negligible": 138,
          "unknown": 88
        }
      },
      "scanArtifact": "scan-emqx-5.10.4",
      "sourceCommit": "6772c7054372b5ecd42990c94ae637fe5e8ea599",
      "tags": [
        "5",
        "5.10.4",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-14T07:18:15Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/emqx@sha256:781c10c0c5ece2f38349ee77e25e113c4d980fa3c8ed86f0e88aca5f168e70b3 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/emqx@sha256:781c10c0c5ece2f38349ee77e25e113c4d980fa3c8ed86f0e88aca5f168e70b3",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/emqx@sha256:781c10c0c5ece2f38349ee77e25e113c4d980fa3c8ed86f0e88aca5f168e70b3"
      },
      "version": "5.10.4"
    },
    {
      "category": "Service Mesh & Networking",
      "description": "Cloud-native high-performance edge/middle/service proxy built from Wolfi packages.",
      "digest": "sha256:a9bba261e50b868bd53129e9e6c14322fe906bed11112ca969af0a73957e81d7",
      "inputDigest": "sha256:54398382ceb7013ed9a06d69fcfab3df0b7828f3bc32e4c9a0f6c737b00ac9ce",
      "name": "envoy",
      "reference": "ghcr.io/tektum/envoy@sha256:a9bba261e50b868bd53129e9e6c14322fe906bed11112ca969af0a73957e81d7",
      "registry": "ghcr.io/tektum/envoy",
      "runId": "34718315324",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34718315324",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-envoy-1.37",
      "sourceCommit": "b35fc153d9f313f465e1ee7c71df380c19a380b4",
      "tags": [
        "1.37",
        "1.37-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T20:57:56Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/envoy@sha256:a9bba261e50b868bd53129e9e6c14322fe906bed11112ca969af0a73957e81d7 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/envoy@sha256:a9bba261e50b868bd53129e9e6c14322fe906bed11112ca969af0a73957e81d7",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/envoy@sha256:a9bba261e50b868bd53129e9e6c14322fe906bed11112ca969af0a73957e81d7"
      },
      "version": "1.37"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Erlang/OTP runtime assembled from Wolfi packages.",
      "digest": "sha256:d784205e2e06d4e40bcf1ae8b2a3a7059273aeab6a548e1b1a5e1d5d8e2817d2",
      "inputDigest": "sha256:2d2512cfcffb01cf8df07e7d9d04f9ba7ffbbaef93f04c01d624831f453bda72",
      "name": "erlang",
      "reference": "ghcr.io/tektum/erlang@sha256:d784205e2e06d4e40bcf1ae8b2a3a7059273aeab6a548e1b1a5e1d5d8e2817d2",
      "registry": "ghcr.io/tektum/erlang",
      "runId": "34718974314",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34718974314",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-erlang-28",
      "sourceCommit": "5330a698b06b4d06f4de309243bc03520f715cfc",
      "tags": [
        "28",
        "28-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T21:11:58Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/erlang@sha256:d784205e2e06d4e40bcf1ae8b2a3a7059273aeab6a548e1b1a5e1d5d8e2817d2 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/erlang@sha256:d784205e2e06d4e40bcf1ae8b2a3a7059273aeab6a548e1b1a5e1d5d8e2817d2",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/erlang@sha256:d784205e2e06d4e40bcf1ae8b2a3a7059273aeab6a548e1b1a5e1d5d8e2817d2"
      },
      "version": "28"
    },
    {
      "category": "Databases & Caching",
      "description": "Distributed reliable key-value store for shared configuration and service discovery.",
      "digest": "sha256:a8f6b70986e117790f255a7e5429b3c228c22e4302fe4c3773d7538c7f5aaa43",
      "inputDigest": "sha256:40995edbe17fbb9911bd5aedd521ef48fb695ebeb4a641d7534fd3ba1dd792eb",
      "name": "etcd",
      "reference": "ghcr.io/tektum/etcd@sha256:a8f6b70986e117790f255a7e5429b3c228c22e4302fe4c3773d7538c7f5aaa43",
      "registry": "ghcr.io/tektum/etcd",
      "runId": "34682313488",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682313488",
      "scan": {
        "all": {
          "unknown": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-etcd-3.7",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "3.7",
        "3.7-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:21:27Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/etcd@sha256:a8f6b70986e117790f255a7e5429b3c228c22e4302fe4c3773d7538c7f5aaa43 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/etcd@sha256:a8f6b70986e117790f255a7e5429b3c228c22e4302fe4c3773d7538c7f5aaa43",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/etcd@sha256:a8f6b70986e117790f255a7e5429b3c228c22e4302fe4c3773d7538c7f5aaa43"
      },
      "version": "3.7"
    },
    {
      "description": "Kubernetes DNS record controller built from a pinned upstream source commit.",
      "digest": "sha256:1f60d41763c82b2f60d4b022fabe41499ec35e0bb3792935b091bce7c2065d2c",
      "inputDigest": "sha256:62afdba269665a4c754bf047f67efffe54bf65780ea2fe6d37b7650fb7dd959e",
      "name": "external-dns",
      "reference": "ghcr.io/tektum/external-dns@sha256:1f60d41763c82b2f60d4b022fabe41499ec35e0bb3792935b091bce7c2065d2c",
      "registry": "ghcr.io/tektum/external-dns",
      "runId": "34454346720",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34454346720",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-external-dns-0.19.0",
      "sourceCommit": "caa6704b83557ae002a27fc5e664f22d5f87c9a9",
      "tags": [
        "0.19.0",
        "0.19.0-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T08:45:28Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/external-dns@sha256:1f60d41763c82b2f60d4b022fabe41499ec35e0bb3792935b091bce7c2065d2c --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/external-dns@sha256:1f60d41763c82b2f60d4b022fabe41499ec35e0bb3792935b091bce7c2065d2c",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/external-dns@sha256:1f60d41763c82b2f60d4b022fabe41499ec35e0bb3792935b091bce7c2065d2c"
      },
      "version": "0.19.0"
    },
    {
      "category": "Security & Identity",
      "description": "External Secrets Operator built from pinned upstream source.",
      "digest": "sha256:d7c6078608f9b5f78b63fdc956659494af096199d006bf82e97cd3a639617093",
      "inputDigest": "sha256:dfa8f53a61953208cc4bc234926016f0d5b16be450123a828c324a61328ce5b3",
      "name": "external-secrets",
      "reference": "ghcr.io/tektum/external-secrets@sha256:d7c6078608f9b5f78b63fdc956659494af096199d006bf82e97cd3a639617093",
      "registry": "ghcr.io/tektum/external-secrets",
      "runId": "34585333849",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34585333849",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-external-secrets-2.6.0",
      "sourceCommit": "e9fae8cdfbbe8cc223c6514d8cb6008bdd3b7d22",
      "tags": [
        "2.6.0",
        "2.6.0-20260911",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-11T10:23:19Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/external-secrets@sha256:d7c6078608f9b5f78b63fdc956659494af096199d006bf82e97cd3a639617093 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/external-secrets@sha256:d7c6078608f9b5f78b63fdc956659494af096199d006bf82e97cd3a639617093",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/external-secrets@sha256:d7c6078608f9b5f78b63fdc956659494af096199d006bf82e97cd3a639617093"
      },
      "version": "2.6.0"
    },
    {
      "category": "Base & Utilities",
      "description": "Minimal fd image built from pinned upstream source.",
      "digest": "sha256:657e6d9d0c283cf561d1ce2e2535c6953847d683f99aeb90c8635fdbb9c04379",
      "inputDigest": "sha256:4afecd8b9895ee510fb14ef444b88c269d99d17359f46f98df5991d47f51355a",
      "name": "fd",
      "reference": "ghcr.io/tektum/fd@sha256:657e6d9d0c283cf561d1ce2e2535c6953847d683f99aeb90c8635fdbb9c04379",
      "registry": "ghcr.io/tektum/fd",
      "runId": "34682314531",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682314531",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-fd-10",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "10",
        "10-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:30:57Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/fd@sha256:657e6d9d0c283cf561d1ce2e2535c6953847d683f99aeb90c8635fdbb9c04379 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/fd@sha256:657e6d9d0c283cf561d1ce2e2535c6953847d683f99aeb90c8635fdbb9c04379",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/fd@sha256:657e6d9d0c283cf561d1ce2e2535c6953847d683f99aeb90c8635fdbb9c04379"
      },
      "version": "10"
    },
    {
      "description": "Fluent Bit log processor and forwarder built from source.",
      "digest": "sha256:033ade62ab09e723ca86d8d4f3d6e27cdabbaef1e83e2b7bc7709a063c77d254",
      "inputDigest": "sha256:d5a22679bc2817e27d7b023345e10903a5a2eb80d3982991d5e3e1a1e8143a6f",
      "name": "fluent-bit",
      "reference": "ghcr.io/tektum/fluent-bit@sha256:033ade62ab09e723ca86d8d4f3d6e27cdabbaef1e83e2b7bc7709a063c77d254",
      "registry": "ghcr.io/tektum/fluent-bit",
      "runId": "34682315756",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682315756",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-fluent-bit-4.2",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "4.2",
        "4.2-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:37:10Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/fluent-bit@sha256:033ade62ab09e723ca86d8d4f3d6e27cdabbaef1e83e2b7bc7709a063c77d254 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/fluent-bit@sha256:033ade62ab09e723ca86d8d4f3d6e27cdabbaef1e83e2b7bc7709a063c77d254",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/fluent-bit@sha256:033ade62ab09e723ca86d8d4f3d6e27cdabbaef1e83e2b7bc7709a063c77d254"
      },
      "version": "4.2"
    },
    {
      "description": "Flux Helm Controller built from a pinned upstream source commit.",
      "digest": "sha256:890a5f13556a3df42576fac65c836111a780961e169c757163f6c0eba35ceb05",
      "inputDigest": "sha256:b712d005adaff36cda5d0cb57ff1eb028920370419fbf5cf0a3274ab6ec706aa",
      "name": "flux-helm-controller",
      "reference": "ghcr.io/tektum/flux-helm-controller@sha256:890a5f13556a3df42576fac65c836111a780961e169c757163f6c0eba35ceb05",
      "registry": "ghcr.io/tektum/flux-helm-controller",
      "runId": "34454350366",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34454350366",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-flux-helm-controller-1.6",
      "sourceCommit": "caa6704b83557ae002a27fc5e664f22d5f87c9a9",
      "tags": [
        "1.6",
        "1.6-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T08:37:42Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/flux-helm-controller@sha256:890a5f13556a3df42576fac65c836111a780961e169c757163f6c0eba35ceb05 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/flux-helm-controller@sha256:890a5f13556a3df42576fac65c836111a780961e169c757163f6c0eba35ceb05",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/flux-helm-controller@sha256:890a5f13556a3df42576fac65c836111a780961e169c757163f6c0eba35ceb05"
      },
      "version": "1.6"
    },
    {
      "description": "Policy controller for Kubernetes admission and audit.",
      "digest": "sha256:9af87925a2f4d004983c08c5b9b1d3a76f0b892c53280589c6e4e0ea138526aa",
      "inputDigest": "sha256:056b4ea4fd66b7951d8767b069c4506614a42d168a1142245bacbef5ee8b11a8",
      "name": "gatekeeper",
      "reference": "ghcr.io/tektum/gatekeeper@sha256:9af87925a2f4d004983c08c5b9b1d3a76f0b892c53280589c6e4e0ea138526aa",
      "registry": "ghcr.io/tektum/gatekeeper",
      "runId": "34454352084",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34454352084",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-gatekeeper-3.19",
      "sourceCommit": "caa6704b83557ae002a27fc5e664f22d5f87c9a9",
      "tags": [
        "3.19",
        "3.19-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T08:44:39Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/gatekeeper@sha256:9af87925a2f4d004983c08c5b9b1d3a76f0b892c53280589c6e4e0ea138526aa --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gatekeeper@sha256:9af87925a2f4d004983c08c5b9b1d3a76f0b892c53280589c6e4e0ea138526aa",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gatekeeper@sha256:9af87925a2f4d004983c08c5b9b1d3a76f0b892c53280589c6e4e0ea138526aa"
      },
      "version": "3.19"
    },
    {
      "category": "Languages & Build Tools",
      "description": "GCC compiler toolchain assembled from Wolfi packages.",
      "digest": "sha256:5a1aa5df55217e42f2610e0fd712523926e09b9de23c9356abd559b48f281f48",
      "inputDigest": "sha256:8e50bf9539de2755f9b1d7c9670642b6d0e3d9110da4e80288cd186e3baaba3e",
      "name": "gcc",
      "reference": "ghcr.io/tektum/gcc@sha256:5a1aa5df55217e42f2610e0fd712523926e09b9de23c9356abd559b48f281f48",
      "registry": "ghcr.io/tektum/gcc",
      "runId": "34719497856",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34719497856",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-gcc-15",
      "sourceCommit": "cc8a1ec946aca9c348c01feb966aa3ae7b6208d6",
      "tags": [
        "15",
        "15-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T21:20:11Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/gcc@sha256:5a1aa5df55217e42f2610e0fd712523926e09b9de23c9356abd559b48f281f48 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gcc@sha256:5a1aa5df55217e42f2610e0fd712523926e09b9de23c9356abd559b48f281f48",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gcc@sha256:5a1aa5df55217e42f2610e0fd712523926e09b9de23c9356abd559b48f281f48"
      },
      "version": "15"
    },
    {
      "description": "GitLab Runner with the shell executor, built from pinned source on Wolfi.",
      "digest": "sha256:341120fc5ef0b08d2a72bd0fe75889b2ad6df3f9f4147e53c31466e7a6720447",
      "inputDigest": "sha256:fce7e7e0fc0a47ed729769d21b52c103eb68f2d4e0a4ae7c2214ae3ef97cc8ab",
      "name": "gitlab-runner",
      "reference": "ghcr.io/tektum/gitlab-runner@sha256:341120fc5ef0b08d2a72bd0fe75889b2ad6df3f9f4147e53c31466e7a6720447",
      "registry": "ghcr.io/tektum/gitlab-runner",
      "runId": "34454353650",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34454353650",
      "scan": {
        "all": {
          "medium": 2,
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-gitlab-runner-19.3",
      "sourceCommit": "caa6704b83557ae002a27fc5e664f22d5f87c9a9",
      "tags": [
        "19.3",
        "19.3-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T08:32:48Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/gitlab-runner@sha256:341120fc5ef0b08d2a72bd0fe75889b2ad6df3f9f4147e53c31466e7a6720447 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gitlab-runner@sha256:341120fc5ef0b08d2a72bd0fe75889b2ad6df3f9f4147e53c31466e7a6720447",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gitlab-runner@sha256:341120fc5ef0b08d2a72bd0fe75889b2ad6df3f9f4147e53c31466e7a6720447"
      },
      "version": "19.3"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Go toolchain packaged from pinned upstream releases with plain and FIPS flavors.",
      "digest": "sha256:2eba079464b95b0d724de8051bd65f73d18cd41d05249e6ba5753d634b60da1f",
      "inputDigest": "sha256:be4b5eb93ba69a58a8e69291273cec520a5839290914dc55dd5e752a20166254",
      "name": "go",
      "reference": "ghcr.io/tektum/go@sha256:2eba079464b95b0d724de8051bd65f73d18cd41d05249e6ba5753d634b60da1f",
      "registry": "ghcr.io/tektum/go",
      "runId": "34682317996",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682317996",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-go-1.25",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "1.25",
        "1.25-20260912"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:08:47Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/go@sha256:2eba079464b95b0d724de8051bd65f73d18cd41d05249e6ba5753d634b60da1f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:2eba079464b95b0d724de8051bd65f73d18cd41d05249e6ba5753d634b60da1f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:2eba079464b95b0d724de8051bd65f73d18cd41d05249e6ba5753d634b60da1f"
      },
      "version": "1.25"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Go toolchain packaged from pinned upstream releases with plain and FIPS flavors.",
      "digest": "sha256:df836cca8c3729fc63794fe8335dd2f517502c7f88e290e223351ab2d2a22fb4",
      "inputDigest": "sha256:67531f8a26e398051e42d2b6e646b67c4a48fb18c6cc0f64957264f5bb74e955",
      "name": "go",
      "reference": "ghcr.io/tektum/go@sha256:df836cca8c3729fc63794fe8335dd2f517502c7f88e290e223351ab2d2a22fb4",
      "registry": "ghcr.io/tektum/go",
      "runId": "34682319141",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682319141",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-go-1.25-fips",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "1.25-fips",
        "1.25-20260912-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:08:49Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/go@sha256:df836cca8c3729fc63794fe8335dd2f517502c7f88e290e223351ab2d2a22fb4 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:df836cca8c3729fc63794fe8335dd2f517502c7f88e290e223351ab2d2a22fb4",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:df836cca8c3729fc63794fe8335dd2f517502c7f88e290e223351ab2d2a22fb4"
      },
      "version": "1.25-fips"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Go toolchain packaged from pinned upstream releases with plain and FIPS flavors.",
      "digest": "sha256:61aaec3efdc3817e65be18b96f727233f682a8928eb544eb112af10ca791e014",
      "inputDigest": "sha256:00df75a885d94de47319fc8d221772c2004ac3a4a1565969f30829bd8f0738e8",
      "name": "go",
      "reference": "ghcr.io/tektum/go@sha256:61aaec3efdc3817e65be18b96f727233f682a8928eb544eb112af10ca791e014",
      "registry": "ghcr.io/tektum/go",
      "runId": "34682320178",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682320178",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-go-1.26",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "1.26",
        "1.26-20260912"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:08:44Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/go@sha256:61aaec3efdc3817e65be18b96f727233f682a8928eb544eb112af10ca791e014 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:61aaec3efdc3817e65be18b96f727233f682a8928eb544eb112af10ca791e014",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:61aaec3efdc3817e65be18b96f727233f682a8928eb544eb112af10ca791e014"
      },
      "version": "1.26"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Go toolchain packaged from pinned upstream releases with plain and FIPS flavors.",
      "digest": "sha256:902d38988b9e19431d138fd4731e05a33f028d50db5a79f628528bc9d74a1391",
      "inputDigest": "sha256:81edc240f16976d68c204f200218b4984b0ab1336186990e7527e248da2776a4",
      "name": "go",
      "reference": "ghcr.io/tektum/go@sha256:902d38988b9e19431d138fd4731e05a33f028d50db5a79f628528bc9d74a1391",
      "registry": "ghcr.io/tektum/go",
      "runId": "34528111898",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34528111898",
      "scan": {
        "all": {
          "medium": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-go-1.26-fips",
      "sourceCommit": "0375dae63ae3bfb02663f692a4a1bf660b9614e2",
      "tags": [
        "1.26-fips",
        "1.26-20260910-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T20:48:54Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/go@sha256:902d38988b9e19431d138fd4731e05a33f028d50db5a79f628528bc9d74a1391 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:902d38988b9e19431d138fd4731e05a33f028d50db5a79f628528bc9d74a1391",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:902d38988b9e19431d138fd4731e05a33f028d50db5a79f628528bc9d74a1391"
      },
      "version": "1.26-fips"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Go toolchain packaged from pinned upstream releases with plain and FIPS flavors.",
      "digest": "sha256:99a331caa362891607696404489a9f49d01bf3e3b06f7a48fbe0714a2e990fbb",
      "inputDigest": "sha256:df69b59d071313c760cabacfd0e34cdf401f1605d831710c96e6957b17047068",
      "name": "go",
      "reference": "ghcr.io/tektum/go@sha256:99a331caa362891607696404489a9f49d01bf3e3b06f7a48fbe0714a2e990fbb",
      "registry": "ghcr.io/tektum/go",
      "runId": "34682321307",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682321307",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-go-1.27",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "1.27",
        "1.27-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:08:54Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/go@sha256:99a331caa362891607696404489a9f49d01bf3e3b06f7a48fbe0714a2e990fbb --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:99a331caa362891607696404489a9f49d01bf3e3b06f7a48fbe0714a2e990fbb",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:99a331caa362891607696404489a9f49d01bf3e3b06f7a48fbe0714a2e990fbb"
      },
      "version": "1.27"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Go toolchain packaged from pinned upstream releases with plain and FIPS flavors.",
      "digest": "sha256:3739b2929bfa2ff993c0bdc413fe4ae8b15aa39c37b68868df53119295d3e8f2",
      "inputDigest": "sha256:db22e4f1f0e5c18e36393d2f84f5a312c20a39730ad3d922505860e20a177773",
      "name": "go",
      "reference": "ghcr.io/tektum/go@sha256:3739b2929bfa2ff993c0bdc413fe4ae8b15aa39c37b68868df53119295d3e8f2",
      "registry": "ghcr.io/tektum/go",
      "runId": "34682322387",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682322387",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-go-1.27-fips",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "1.27-fips",
        "1.27-20260912-fips",
        "latest-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:09:01Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/go@sha256:3739b2929bfa2ff993c0bdc413fe4ae8b15aa39c37b68868df53119295d3e8f2 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:3739b2929bfa2ff993c0bdc413fe4ae8b15aa39c37b68868df53119295d3e8f2",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:3739b2929bfa2ff993c0bdc413fe4ae8b15aa39c37b68868df53119295d3e8f2"
      },
      "version": "1.27-fips"
    },
    {
      "description": "Gradle build system assembled from Wolfi packages.",
      "digest": "sha256:9cb0de0372d52c28d651a964e7c1e07020815642b6f2a3723774d9b9f736667d",
      "inputDigest": "sha256:571ac5efd56d85b22591f6b1769c337caa0ff62179ec3d4a0c9e388ec1739479",
      "name": "gradle",
      "reference": "ghcr.io/tektum/gradle@sha256:9cb0de0372d52c28d651a964e7c1e07020815642b6f2a3723774d9b9f736667d",
      "registry": "ghcr.io/tektum/gradle",
      "runId": "34682323641",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682323641",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-gradle-9.7.0",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "9.7.0",
        "9.7.0-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:09:43Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/gradle@sha256:9cb0de0372d52c28d651a964e7c1e07020815642b6f2a3723774d9b9f736667d --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gradle@sha256:9cb0de0372d52c28d651a964e7c1e07020815642b6f2a3723774d9b9f736667d",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gradle@sha256:9cb0de0372d52c28d651a964e7c1e07020815642b6f2a3723774d9b9f736667d"
      },
      "version": "9.7.0"
    },
    {
      "category": "Monitoring & Observability",
      "description": "The open and composable observability and data visualization platform.",
      "digest": "sha256:12a08182f597bea301da9fc2ffacad6b663b34fb6e8a83032c3e3125b827682a",
      "inputDigest": "sha256:548e480bbd11568ff47b92bcbdaf50b4affd3040ffeee8fcf54ccecdd44726e5",
      "name": "grafana",
      "reference": "ghcr.io/tektum/grafana@sha256:12a08182f597bea301da9fc2ffacad6b663b34fb6e8a83032c3e3125b827682a",
      "registry": "ghcr.io/tektum/grafana",
      "runId": "34465918191",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34465918191",
      "scan": {
        "all": {
          "medium": 2,
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-grafana-13.2",
      "sourceCommit": "f287d22ad5fae4fab18ddddc4ee49a8ebce41c97",
      "tags": [
        "13.2",
        "13.2-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T12:14:52Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/grafana@sha256:12a08182f597bea301da9fc2ffacad6b663b34fb6e8a83032c3e3125b827682a --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/grafana@sha256:12a08182f597bea301da9fc2ffacad6b663b34fb6e8a83032c3e3125b827682a",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/grafana@sha256:12a08182f597bea301da9fc2ffacad6b663b34fb6e8a83032c3e3125b827682a"
      },
      "version": "13.2"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "High performance TCP/HTTP load balancer built from pinned upstream source.",
      "digest": "sha256:b6a4e46eb300d00000c13ca4cfb3e776743b4e140ceeef613025841473b8be79",
      "inputDigest": "sha256:c20f50c1e1af4cdb8238acc51c6b504bd9fa3e441e4b88bfca2b4b9e4637b764",
      "name": "haproxy",
      "reference": "ghcr.io/tektum/haproxy@sha256:b6a4e46eb300d00000c13ca4cfb3e776743b4e140ceeef613025841473b8be79",
      "registry": "ghcr.io/tektum/haproxy",
      "runId": "34682325514",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682325514",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-haproxy-3.4",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "3.4",
        "3.4-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:09:00Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/haproxy@sha256:b6a4e46eb300d00000c13ca4cfb3e776743b4e140ceeef613025841473b8be79 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/haproxy@sha256:b6a4e46eb300d00000c13ca4cfb3e776743b4e140ceeef613025841473b8be79",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/haproxy@sha256:b6a4e46eb300d00000c13ca4cfb3e776743b4e140ceeef613025841473b8be79"
      },
      "version": "3.4"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "HAProxy Ingress Controller assembled from Wolfi packages.",
      "digest": "sha256:17c0e96560e36bf7b6c1babdc8ed51c3b5f99489600f6a7ecf49758a5c543147",
      "inputDigest": "sha256:d8f687cd5b07c6b402cc593a4817f07838a6118fba6be22355fda834dfab2915",
      "name": "haproxy-ingress",
      "reference": "ghcr.io/tektum/haproxy-ingress@sha256:17c0e96560e36bf7b6c1babdc8ed51c3b5f99489600f6a7ecf49758a5c543147",
      "registry": "ghcr.io/tektum/haproxy-ingress",
      "runId": "34682324572",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682324572",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-haproxy-ingress-0",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "0",
        "0-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:20:09Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/haproxy-ingress@sha256:17c0e96560e36bf7b6c1babdc8ed51c3b5f99489600f6a7ecf49758a5c543147 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/haproxy-ingress@sha256:17c0e96560e36bf7b6c1babdc8ed51c3b5f99489600f6a7ecf49758a5c543147",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/haproxy-ingress@sha256:17c0e96560e36bf7b6c1babdc8ed51c3b5f99489600f6a7ecf49758a5c543147"
      },
      "version": "0"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Minimal Helm image assembled from Wolfi packages.",
      "digest": "sha256:3e6a3592f0e11435174e20ebac2376c1d05eaf57c486e80bbe1e9d8e6252e374",
      "inputDigest": "sha256:bb3fc3184768ea8d87d778251b1a5f3a824efe90c82d6021b910cb6bbd86b1aa",
      "name": "helm",
      "reference": "ghcr.io/tektum/helm@sha256:3e6a3592f0e11435174e20ebac2376c1d05eaf57c486e80bbe1e9d8e6252e374",
      "registry": "ghcr.io/tektum/helm",
      "runId": "34811853287",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34811853287",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-helm-4.2.4",
      "sourceCommit": "6772c7054372b5ecd42990c94ae637fe5e8ea599",
      "tags": [
        "4.2.4",
        "4.2.4-20260914",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-14T06:05:39Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/helm@sha256:3e6a3592f0e11435174e20ebac2376c1d05eaf57c486e80bbe1e9d8e6252e374 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/helm@sha256:3e6a3592f0e11435174e20ebac2376c1d05eaf57c486e80bbe1e9d8e6252e374",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/helm@sha256:3e6a3592f0e11435174e20ebac2376c1d05eaf57c486e80bbe1e9d8e6252e374"
      },
      "version": "4.2.4"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Minimal Apache HTTP Server image assembled from Wolfi packages.",
      "digest": "sha256:0e01b25e02e84044e90c410437e0207cbca72168b3b96f700d09cf18b8b3e708",
      "inputDigest": "sha256:f4da6b258e891b2e67bbb401911e10ae47662264b4da5018dfc61fc4d8ac7f9b",
      "name": "httpd",
      "reference": "ghcr.io/tektum/httpd@sha256:0e01b25e02e84044e90c410437e0207cbca72168b3b96f700d09cf18b8b3e708",
      "registry": "ghcr.io/tektum/httpd",
      "runId": "34719903841",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34719903841",
      "scan": {
        "all": {
          "medium": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-httpd-2.4",
      "sourceCommit": "826c3e17b2ace9c82fd495d9e7a24566acd17b57",
      "tags": [
        "2.4",
        "2.4-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T21:27:39Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/httpd@sha256:0e01b25e02e84044e90c410437e0207cbca72168b3b96f700d09cf18b8b3e708 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/httpd@sha256:0e01b25e02e84044e90c410437e0207cbca72168b3b96f700d09cf18b8b3e708",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/httpd@sha256:0e01b25e02e84044e90c410437e0207cbca72168b3b96f700d09cf18b8b3e708"
      },
      "version": "2.4"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Minimal Apache HTTP Server image assembled from Wolfi packages.",
      "digest": "sha256:6691b75dbf35c6bbcfb55efffc78a41237160620637c8627479189aef519e5df",
      "inputDigest": "sha256:da31adb60ab53d318c198c6cd29329286ffae4620fdb677d33467d19bed99544",
      "name": "httpd",
      "reference": "ghcr.io/tektum/httpd@sha256:6691b75dbf35c6bbcfb55efffc78a41237160620637c8627479189aef519e5df",
      "registry": "ghcr.io/tektum/httpd",
      "runId": "34719903841",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34719903841",
      "scan": {
        "all": {
          "medium": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-httpd-2.4-fips",
      "sourceCommit": "826c3e17b2ace9c82fd495d9e7a24566acd17b57",
      "tags": [
        "2.4-fips",
        "2.4-20260912-fips",
        "latest-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T21:27:53Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/httpd@sha256:6691b75dbf35c6bbcfb55efffc78a41237160620637c8627479189aef519e5df --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/httpd@sha256:6691b75dbf35c6bbcfb55efffc78a41237160620637c8627479189aef519e5df",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/httpd@sha256:6691b75dbf35c6bbcfb55efffc78a41237160620637c8627479189aef519e5df"
      },
      "version": "2.4-fips"
    },
    {
      "category": "Databases & Caching",
      "description": "InfluxDB time-series database with persistent file storage.",
      "digest": "sha256:06e9612f29afe0773faca52f5d565eb3a0acdfbaef2ade8493078e8434e5a923",
      "inputDigest": "sha256:c5e02b432b352f56dafa0b32f5e5b556403ea1645be6c19b0399daef1c110ce4",
      "name": "influxdb",
      "reference": "ghcr.io/tektum/influxdb@sha256:06e9612f29afe0773faca52f5d565eb3a0acdfbaef2ade8493078e8434e5a923",
      "registry": "ghcr.io/tektum/influxdb",
      "runId": "34720412109",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34720412109",
      "scan": {
        "all": {
          "low": 2,
          "medium": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-influxdb-3.8",
      "sourceCommit": "2a6252d90a166913ec6c8cb01ab32bf9fc85e5eb",
      "tags": [
        "3.8",
        "3.8-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T21:38:38Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/influxdb@sha256:06e9612f29afe0773faca52f5d565eb3a0acdfbaef2ade8493078e8434e5a923 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/influxdb@sha256:06e9612f29afe0773faca52f5d565eb3a0acdfbaef2ade8493078e8434e5a923",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/influxdb@sha256:06e9612f29afe0773faca52f5d565eb3a0acdfbaef2ade8493078e8434e5a923"
      },
      "version": "3.8"
    },
    {
      "category": "Base & Utilities",
      "description": "Command-line JSON processor.",
      "digest": "sha256:31cb08f5a8f7de8b57d6ad54455f5ffca00455b2ad83ecf1f00214e40a776f60",
      "inputDigest": "sha256:e0d86f069575c9f65de9b6a446a5868ed23835d0945cf6156a2261843daf1562",
      "name": "jq",
      "reference": "ghcr.io/tektum/jq@sha256:31cb08f5a8f7de8b57d6ad54455f5ffca00455b2ad83ecf1f00214e40a776f60",
      "registry": "ghcr.io/tektum/jq",
      "runId": "34720781440",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34720781440",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-jq-1",
      "sourceCommit": "67fd56363723d2427fb249d8751fa5e8eacfbf9b",
      "tags": [
        "1",
        "1-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T21:46:09Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/jq@sha256:31cb08f5a8f7de8b57d6ad54455f5ffca00455b2ad83ecf1f00214e40a776f60 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/jq@sha256:31cb08f5a8f7de8b57d6ad54455f5ffca00455b2ad83ecf1f00214e40a776f60",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/jq@sha256:31cb08f5a8f7de8b57d6ad54455f5ffca00455b2ad83ecf1f00214e40a776f60"
      },
      "version": "1"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes node autoscaler controller for AWS built from pinned upstream source.",
      "digest": "sha256:a75ded2558b58443bc5d2a4e7769f0d1863e55eabdea6328dd9eb37ee03493e0",
      "inputDigest": "sha256:3ad75537b957ca2c94179c5e980e200157b23d667b6802a266dd447492af5ab7",
      "name": "karpenter",
      "reference": "ghcr.io/tektum/karpenter@sha256:a75ded2558b58443bc5d2a4e7769f0d1863e55eabdea6328dd9eb37ee03493e0",
      "registry": "ghcr.io/tektum/karpenter",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-karpenter-1.14",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "1.14",
        "1.14-20260907",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-07T16:57:59Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/karpenter@sha256:a75ded2558b58443bc5d2a4e7769f0d1863e55eabdea6328dd9eb37ee03493e0 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/karpenter@sha256:a75ded2558b58443bc5d2a4e7769f0d1863e55eabdea6328dd9eb37ee03493e0",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/karpenter@sha256:a75ded2558b58443bc5d2a4e7769f0d1863e55eabdea6328dd9eb37ee03493e0"
      },
      "version": "1.14"
    },
    {
      "category": "CI/CD & GitOps",
      "description": "Go container image builder assembled from Wolfi packages.",
      "digest": "sha256:7d6118076f3d12b596005b43b5b678685bf77778be8ed866337a93bc35692b2e",
      "inputDigest": "sha256:2af6255e0dc87f290391a30a2f2fd519ac6084c884265277d7f0f9d2ea8c8fa0",
      "name": "ko",
      "reference": "ghcr.io/tektum/ko@sha256:7d6118076f3d12b596005b43b5b678685bf77778be8ed866337a93bc35692b2e",
      "registry": "ghcr.io/tektum/ko",
      "runId": "34566130443",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34566130443",
      "scan": {
        "all": {
          "unknown": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-ko-0.19.1",
      "sourceCommit": "1a54cde581d76cd1e16555a159483ab184cfdfb1",
      "tags": [
        "0.19.1",
        "0.19.1-20260911",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-11T05:32:25Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ko@sha256:7d6118076f3d12b596005b43b5b678685bf77778be8ed866337a93bc35692b2e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ko@sha256:7d6118076f3d12b596005b43b5b678685bf77778be8ed866337a93bc35692b2e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ko@sha256:7d6118076f3d12b596005b43b5b678685bf77778be8ed866337a93bc35692b2e"
      },
      "version": "0.19.1"
    },
    {
      "description": "Kubernetes API server assembled from Wolfi packages.",
      "digest": "sha256:9f55e114b4cc748c1f3dc8d174a3ad032b892bad256ffb527c78c4be69e680a5",
      "inputDigest": "sha256:98d31a000758f9544561c195570b302232f86473b2f06d2dcb785dfdc9b357d6",
      "name": "kube-apiserver",
      "reference": "ghcr.io/tektum/kube-apiserver@sha256:9f55e114b4cc748c1f3dc8d174a3ad032b892bad256ffb527c78c4be69e680a5",
      "registry": "ghcr.io/tektum/kube-apiserver",
      "runId": "34530500080",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34530500080",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-kube-apiserver-1.36",
      "sourceCommit": "25cdc4b26dc80957f804098e1c8ebd4a48a0ed30",
      "tags": [
        "1.36",
        "1.36-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T21:12:39Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kube-apiserver@sha256:9f55e114b4cc748c1f3dc8d174a3ad032b892bad256ffb527c78c4be69e680a5 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-apiserver@sha256:9f55e114b4cc748c1f3dc8d174a3ad032b892bad256ffb527c78c4be69e680a5",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-apiserver@sha256:9f55e114b4cc748c1f3dc8d174a3ad032b892bad256ffb527c78c4be69e680a5"
      },
      "version": "1.36"
    },
    {
      "description": "Kubernetes CIS benchmark checker.",
      "digest": "sha256:4795e247e50eacd457e81a6fa8d1e5d8bfe660481155a0f29490be28c20d8a24",
      "inputDigest": "sha256:f525fa288e7baa45707cca02ba7e10c12ee7ba0ca902fd23920a44753f1de8dd",
      "name": "kube-bench",
      "reference": "ghcr.io/tektum/kube-bench@sha256:4795e247e50eacd457e81a6fa8d1e5d8bfe660481155a0f29490be28c20d8a24",
      "registry": "ghcr.io/tektum/kube-bench",
      "runId": "34577988254",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34577988254",
      "scan": {
        "all": {
          "medium": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-kube-bench-0.16.0",
      "sourceCommit": "1a54cde581d76cd1e16555a159483ab184cfdfb1",
      "tags": [
        "0.16.0",
        "0.16.0-20260911",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-11T08:24:06Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kube-bench@sha256:4795e247e50eacd457e81a6fa8d1e5d8bfe660481155a0f29490be28c20d8a24 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-bench@sha256:4795e247e50eacd457e81a6fa8d1e5d8bfe660481155a0f29490be28c20d8a24",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-bench@sha256:4795e247e50eacd457e81a6fa8d1e5d8bfe660481155a0f29490be28c20d8a24"
      },
      "version": "0.16.0"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes controller manager assembled from Wolfi packages.",
      "digest": "sha256:aec84313968a5ecc5f889039695f0cf21d15570475961e43e43898cceeba3140",
      "inputDigest": "sha256:a28583aaeda316e0417049f0dc05c5e72c9b25964dd7d1fba7b499c50203f638",
      "name": "kube-controller-manager",
      "reference": "ghcr.io/tektum/kube-controller-manager@sha256:aec84313968a5ecc5f889039695f0cf21d15570475961e43e43898cceeba3140",
      "registry": "ghcr.io/tektum/kube-controller-manager",
      "runId": "34530502877",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34530502877",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-kube-controller-manager-1.36",
      "sourceCommit": "25cdc4b26dc80957f804098e1c8ebd4a48a0ed30",
      "tags": [
        "1.36",
        "1.36-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T21:12:33Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kube-controller-manager@sha256:aec84313968a5ecc5f889039695f0cf21d15570475961e43e43898cceeba3140 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-controller-manager@sha256:aec84313968a5ecc5f889039695f0cf21d15570475961e43e43898cceeba3140",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-controller-manager@sha256:aec84313968a5ecc5f889039695f0cf21d15570475961e43e43898cceeba3140"
      },
      "version": "1.36"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes control plane scheduler assembled from Wolfi packages.",
      "digest": "sha256:0b8a3dcb46470b86c9803f1e052649d86c48cb93ed5b864af7c3238674cabae6",
      "inputDigest": "sha256:d343472cdabb4813945351185e31485828c5c9141abae23660b31a49d23b461f",
      "name": "kube-scheduler",
      "reference": "ghcr.io/tektum/kube-scheduler@sha256:0b8a3dcb46470b86c9803f1e052649d86c48cb93ed5b864af7c3238674cabae6",
      "registry": "ghcr.io/tektum/kube-scheduler",
      "runId": "34528111898",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34528111898",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-kube-scheduler-1.36",
      "sourceCommit": "0375dae63ae3bfb02663f692a4a1bf660b9614e2",
      "tags": [
        "1.36",
        "1.36-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T20:46:19Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kube-scheduler@sha256:0b8a3dcb46470b86c9803f1e052649d86c48cb93ed5b864af7c3238674cabae6 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-scheduler@sha256:0b8a3dcb46470b86c9803f1e052649d86c48cb93ed5b864af7c3238674cabae6",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-scheduler@sha256:0b8a3dcb46470b86c9803f1e052649d86c48cb93ed5b864af7c3238674cabae6"
      },
      "version": "1.36"
    },
    {
      "category": "Monitoring & Observability",
      "description": "Kubernetes cluster state metrics exporter built from pinned upstream source.",
      "digest": "sha256:b30a08ca6bc7692738acff18240377c870865b9922f05d78afee5b2ca1f93374",
      "inputDigest": "sha256:0636dc802fe0b77e2aea55862a4dd9c898630b7c16730bf073c918fecfce0782",
      "name": "kube-state-metrics",
      "reference": "ghcr.io/tektum/kube-state-metrics@sha256:b30a08ca6bc7692738acff18240377c870865b9922f05d78afee5b2ca1f93374",
      "registry": "ghcr.io/tektum/kube-state-metrics",
      "runId": "34717494408",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34717494408",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-kube-state-metrics-2.20.0",
      "sourceCommit": "b3b0b5f7fcdc1568d86676e640917d9f17ed9756",
      "tags": [
        "2.20.0",
        "2.20.0-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T20:50:51Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kube-state-metrics@sha256:b30a08ca6bc7692738acff18240377c870865b9922f05d78afee5b2ca1f93374 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-state-metrics@sha256:b30a08ca6bc7692738acff18240377c870865b9922f05d78afee5b2ca1f93374",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-state-metrics@sha256:b30a08ca6bc7692738acff18240377c870865b9922f05d78afee5b2ca1f93374"
      },
      "version": "2.20.0"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes command-line client assembled from Wolfi packages.",
      "digest": "sha256:809a633639f27dffd8ef8be34e60129c5227408c360952133e77ff39326d8908",
      "inputDigest": "sha256:62793ac2f6f5ed2712ff94235cdff8335e4634b21e408423222e061c076386d8",
      "name": "kubectl",
      "reference": "ghcr.io/tektum/kubectl@sha256:809a633639f27dffd8ef8be34e60129c5227408c360952133e77ff39326d8908",
      "registry": "ghcr.io/tektum/kubectl",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "all": {
          "low": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-kubectl-1.35",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "1.35",
        "1.35-20260907",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-07T17:37:09Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kubectl@sha256:809a633639f27dffd8ef8be34e60129c5227408c360952133e77ff39326d8908 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubectl@sha256:809a633639f27dffd8ef8be34e60129c5227408c360952133e77ff39326d8908",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubectl@sha256:809a633639f27dffd8ef8be34e60129c5227408c360952133e77ff39326d8908"
      },
      "version": "1.35"
    },
    {
      "description": "Kubernetes pause container process assembled from Wolfi packages.",
      "digest": "sha256:1feaf73d85e0b2f3ca2c82b1839641b65f2d579730aec580cba9ec8997418dec",
      "inputDigest": "sha256:49d41f8fbc362fd377dd70bc603fcc367538119a49c628a834c31d99cb640c6d",
      "name": "kubernetes-pause",
      "reference": "ghcr.io/tektum/kubernetes-pause@sha256:1feaf73d85e0b2f3ca2c82b1839641b65f2d579730aec580cba9ec8997418dec",
      "registry": "ghcr.io/tektum/kubernetes-pause",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-kubernetes-pause-3.10",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "3.10",
        "3.10-20260907",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-07T16:37:51Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kubernetes-pause@sha256:1feaf73d85e0b2f3ca2c82b1839641b65f2d579730aec580cba9ec8997418dec --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubernetes-pause@sha256:1feaf73d85e0b2f3ca2c82b1839641b65f2d579730aec580cba9ec8997418dec",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubernetes-pause@sha256:1feaf73d85e0b2f3ca2c82b1839641b65f2d579730aec580cba9ec8997418dec"
      },
      "version": "3.10"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "EmberStack Kubernetes Reflector patched from the upstream image.",
      "digest": "sha256:189e061bb57d42a621a20e4041e1be1c8aacbd38290d5f4d85137644ae19cc70",
      "inputDigest": "sha256:ac24fed25372d9843544bd90c00172cccad321e9a0358d6745d6872f2b5e4fe2",
      "name": "kubernetes-reflector",
      "reference": "ghcr.io/tektum/kubernetes-reflector@sha256:189e061bb57d42a621a20e4041e1be1c8aacbd38290d5f4d85137644ae19cc70",
      "registry": "ghcr.io/tektum/kubernetes-reflector",
      "runId": "34682331613",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682331613",
      "scan": {
        "delta": {
          "low": -30,
          "medium": -150,
          "negligible": 0
        },
        "final": {
          "low": 14,
          "medium": 84,
          "negligible": 4
        },
        "fixable": 0,
        "upstream": {
          "low": 44,
          "medium": 234,
          "negligible": 4
        }
      },
      "scanArtifact": "scan-kubernetes-reflector-10.0.65",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "10.0.65",
        "10.0.65-20260912",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-12T08:12:21Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kubernetes-reflector@sha256:189e061bb57d42a621a20e4041e1be1c8aacbd38290d5f4d85137644ae19cc70 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubernetes-reflector@sha256:189e061bb57d42a621a20e4041e1be1c8aacbd38290d5f4d85137644ae19cc70",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubernetes-reflector@sha256:189e061bb57d42a621a20e4041e1be1c8aacbd38290d5f4d85137644ae19cc70"
      },
      "version": "10.0.65"
    },
    {
      "description": "Grafana Loki log aggregation server built from the canonical source release.",
      "digest": "sha256:19086ef01be8f75b514f5ad7ee247b27f09e6b6c12f74910edeffa88cb262fba",
      "inputDigest": "sha256:3bcb7fca8b6e50e699be154b02acf06cc2e5cd02d8f4d44c3c4439712bf06c82",
      "name": "loki",
      "reference": "ghcr.io/tektum/loki@sha256:19086ef01be8f75b514f5ad7ee247b27f09e6b6c12f74910edeffa88cb262fba",
      "registry": "ghcr.io/tektum/loki",
      "runId": "34623364474",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34623364474",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-loki-3.6",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "3.6",
        "3.6-20260911",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-11T17:12:41Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/loki@sha256:19086ef01be8f75b514f5ad7ee247b27f09e6b6c12f74910edeffa88cb262fba --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/loki@sha256:19086ef01be8f75b514f5ad7ee247b27f09e6b6c12f74910edeffa88cb262fba",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/loki@sha256:19086ef01be8f75b514f5ad7ee247b27f09e6b6c12f74910edeffa88cb262fba"
      },
      "version": "3.6"
    },
    {
      "category": "Databases & Caching",
      "description": "MariaDB UBI image patched with Copacetic.",
      "digest": "sha256:eafcf37c79548da586f13040338c60a343097890320db1920c625272706081db",
      "inputDigest": "sha256:53066f7eca72447ce91be52574666bdb9373cedf160ecf22f14d13578a8a0a21",
      "name": "mariadb",
      "reference": "ghcr.io/tektum/mariadb@sha256:eafcf37c79548da586f13040338c60a343097890320db1920c625272706081db",
      "registry": "ghcr.io/tektum/mariadb",
      "runId": "34582136825",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34582136825",
      "scan": {
        "delta": {
          "critical": -2,
          "high": -46,
          "low": -4,
          "medium": -40
        },
        "final": {
          "high": 132,
          "low": 178,
          "medium": 672
        },
        "fixable": 0,
        "upstream": {
          "critical": 2,
          "high": 178,
          "low": 182,
          "medium": 712
        }
      },
      "scanArtifact": "scan-mariadb-12.3",
      "sourceCommit": "e9ffea2b3af0311cb10d02a8e7c9c9a55d86a524",
      "tags": [
        "12.3",
        "12.3-20260911",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-11T09:08:35Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/mariadb@sha256:eafcf37c79548da586f13040338c60a343097890320db1920c625272706081db --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/mariadb@sha256:eafcf37c79548da586f13040338c60a343097890320db1920c625272706081db",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/mariadb@sha256:eafcf37c79548da586f13040338c60a343097890320db1920c625272706081db"
      },
      "version": "12.3"
    },
    {
      "description": "Apache Maven build system assembled from Wolfi packages.",
      "digest": "sha256:908c43cfc6d250996347d3bcc537646b5a84f48cf1d6210b3516130ba0a3d8cc",
      "inputDigest": "sha256:81b1b3e65476863e32bd740a19bfa19072f12d1db8c81e4ac0532d8f5a467835",
      "name": "maven",
      "reference": "ghcr.io/tektum/maven@sha256:908c43cfc6d250996347d3bcc537646b5a84f48cf1d6210b3516130ba0a3d8cc",
      "registry": "ghcr.io/tektum/maven",
      "runId": "34721203059",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34721203059",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-maven-3.9.16",
      "sourceCommit": "bc21c140bad50af0dbcf533528c9f175e291d6bf",
      "tags": [
        "3.9.16",
        "3.9.16-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T21:56:26Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/maven@sha256:908c43cfc6d250996347d3bcc537646b5a84f48cf1d6210b3516130ba0a3d8cc --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/maven@sha256:908c43cfc6d250996347d3bcc537646b5a84f48cf1d6210b3516130ba0a3d8cc",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/maven@sha256:908c43cfc6d250996347d3bcc537646b5a84f48cf1d6210b3516130ba0a3d8cc"
      },
      "version": "3.9.16"
    },
    {
      "category": "Databases & Caching",
      "description": "Minimal memcached image assembled from Wolfi packages.",
      "digest": "sha256:5bea2a58fa02b386c0f28d9bcfcbe93cb3e881762afd725094d14bf097ec9fd9",
      "inputDigest": "sha256:53bb57de6c2523c71945d16ad53950649db4aaaac8217e305d765ab08ea107c2",
      "name": "memcached",
      "reference": "ghcr.io/tektum/memcached@sha256:5bea2a58fa02b386c0f28d9bcfcbe93cb3e881762afd725094d14bf097ec9fd9",
      "registry": "ghcr.io/tektum/memcached",
      "runId": "34721539193",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34721539193",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-memcached-1.6",
      "sourceCommit": "e8a040a9de1caee19a76e78e6d804c28191215f9",
      "tags": [
        "1.6",
        "1.6-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T22:02:54Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/memcached@sha256:5bea2a58fa02b386c0f28d9bcfcbe93cb3e881762afd725094d14bf097ec9fd9 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/memcached@sha256:5bea2a58fa02b386c0f28d9bcfcbe93cb3e881762afd725094d14bf097ec9fd9",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/memcached@sha256:5bea2a58fa02b386c0f28d9bcfcbe93cb3e881762afd725094d14bf097ec9fd9"
      },
      "version": "1.6"
    },
    {
      "description": "MetalLB speaker built from a pinned upstream source commit.",
      "digest": "sha256:b294125febd7533f545b592dfc39822fa66f41f6ca5b7c66a10ba721bd423bab",
      "inputDigest": "sha256:c520a44e2a9012ecc8e188545c60e71a5a10132df4d8df8a985b5c09e8c4a715",
      "name": "metallb-speaker",
      "reference": "ghcr.io/tektum/metallb-speaker@sha256:b294125febd7533f545b592dfc39822fa66f41f6ca5b7c66a10ba721bd423bab",
      "registry": "ghcr.io/tektum/metallb-speaker",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-metallb-speaker-0.15.3",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "0.15.3",
        "0.15.3-20260907",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-07T16:57:23Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/metallb-speaker@sha256:b294125febd7533f545b592dfc39822fa66f41f6ca5b7c66a10ba721bd423bab --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/metallb-speaker@sha256:b294125febd7533f545b592dfc39822fa66f41f6ca5b7c66a10ba721bd423bab",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/metallb-speaker@sha256:b294125febd7533f545b592dfc39822fa66f41f6ca5b7c66a10ba721bd423bab"
      },
      "version": "0.15.3"
    },
    {
      "category": "Monitoring & Observability",
      "description": "Kubernetes Metrics Server built from a pinned upstream source commit.",
      "digest": "sha256:c1011c3ee207cda08496a12fa9859819ec2005bde62d3ae05461094b52ab9eb3",
      "inputDigest": "sha256:afeb3daca74d0527153a86777f2dc612c69f13b8dc32735b7ff050d72868cae5",
      "name": "metrics-server",
      "reference": "ghcr.io/tektum/metrics-server@sha256:c1011c3ee207cda08496a12fa9859819ec2005bde62d3ae05461094b52ab9eb3",
      "registry": "ghcr.io/tektum/metrics-server",
      "runId": "34454370599",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34454370599",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-metrics-server-0.9.0",
      "sourceCommit": "caa6704b83557ae002a27fc5e664f22d5f87c9a9",
      "tags": [
        "0.9.0",
        "0.9.0-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T08:36:53Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/metrics-server@sha256:c1011c3ee207cda08496a12fa9859819ec2005bde62d3ae05461094b52ab9eb3 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/metrics-server@sha256:c1011c3ee207cda08496a12fa9859819ec2005bde62d3ae05461094b52ab9eb3",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/metrics-server@sha256:c1011c3ee207cda08496a12fa9859819ec2005bde62d3ae05461094b52ab9eb3"
      },
      "version": "0.9.0"
    },
    {
      "description": "Eclipse Mosquitto MQTT broker assembled from Wolfi packages.",
      "digest": "sha256:53df1c95eea2bf7e4f9248aa2c7582f711f8a5f5a5146835d64ec5200824a765",
      "inputDigest": "sha256:4a034d8d9e68112ec35cff990de315afaa09e3f1fe565f41b3e7b02ac59203b6",
      "name": "mosquitto",
      "reference": "ghcr.io/tektum/mosquitto@sha256:53df1c95eea2bf7e4f9248aa2c7582f711f8a5f5a5146835d64ec5200824a765",
      "registry": "ghcr.io/tektum/mosquitto",
      "runId": "34721906592",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34721906592",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-mosquitto-2.1",
      "sourceCommit": "f79f61a92dcec8ac8695b62096fc2f4f1fe352e5",
      "tags": [
        "2.1",
        "2.1-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T22:10:50Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/mosquitto@sha256:53df1c95eea2bf7e4f9248aa2c7582f711f8a5f5a5146835d64ec5200824a765 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/mosquitto@sha256:53df1c95eea2bf7e4f9248aa2c7582f711f8a5f5a5146835d64ec5200824a765",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/mosquitto@sha256:53df1c95eea2bf7e4f9248aa2c7582f711f8a5f5a5146835d64ec5200824a765"
      },
      "version": "2.1"
    },
    {
      "category": "Messaging & Streaming",
      "description": "High-performance NATS messaging server assembled from Wolfi packages.",
      "digest": "sha256:5a3cba8db7dce783f9db7d856355ccbdc8df3e14689467ec7e4ae3fc1b20b765",
      "inputDigest": "sha256:867caf773f0f8915c11ae3415413bef964d0385c3d1fba019f2282a26f1d6923",
      "name": "nats",
      "reference": "ghcr.io/tektum/nats@sha256:5a3cba8db7dce783f9db7d856355ccbdc8df3e14689467ec7e4ae3fc1b20b765",
      "registry": "ghcr.io/tektum/nats",
      "runId": "34687053618",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34687053618",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-nats-2",
      "sourceCommit": "25bde437a4e091b37c26646aec207b92750443c8",
      "tags": [
        "2",
        "2-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T10:05:13Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/nats@sha256:5a3cba8db7dce783f9db7d856355ccbdc8df3e14689467ec7e4ae3fc1b20b765 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nats@sha256:5a3cba8db7dce783f9db7d856355ccbdc8df3e14689467ec7e4ae3fc1b20b765",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nats@sha256:5a3cba8db7dce783f9db7d856355ccbdc8df3e14689467ec7e4ae3fc1b20b765"
      },
      "version": "2"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Minimal nginx image assembled from Wolfi packages.",
      "digest": "sha256:9466568dab5858a438f9bce3a69c82b540b635c243f5a5d919a688f1cab762a5",
      "inputDigest": "sha256:707fb46d90f3319006d13da195a08324c0f0982ad83111289c75c3dbf97033e0",
      "name": "nginx",
      "reference": "ghcr.io/tektum/nginx@sha256:9466568dab5858a438f9bce3a69c82b540b635c243f5a5d919a688f1cab762a5",
      "registry": "ghcr.io/tektum/nginx",
      "runId": "34722423034",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34722423034",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-nginx-1.31",
      "sourceCommit": "2beaf3ac85e7a7650da17d260ea0b33b634def64",
      "tags": [
        "1.31",
        "1.31-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T22:21:38Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/nginx@sha256:9466568dab5858a438f9bce3a69c82b540b635c243f5a5d919a688f1cab762a5 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nginx@sha256:9466568dab5858a438f9bce3a69c82b540b635c243f5a5d919a688f1cab762a5",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nginx@sha256:9466568dab5858a438f9bce3a69c82b540b635c243f5a5d919a688f1cab762a5"
      },
      "version": "1.31"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Upstream Node.js slim image patched with Copacetic.",
      "digest": "sha256:8be28dd20dde392331f5127edb582decdf14b20f89f25ae715a8242cf6550dfb",
      "inputDigest": "sha256:a07867e86c065ec3a7b56735fde8a45fead85b2eac480ea14f9b14367ae016f3",
      "name": "node-22-slim",
      "reference": "ghcr.io/tektum/node-22-slim@sha256:8be28dd20dde392331f5127edb582decdf14b20f89f25ae715a8242cf6550dfb",
      "registry": "ghcr.io/tektum/node-22-slim",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "delta": {
          "critical": -2,
          "high": -22,
          "low": -2,
          "medium": -14,
          "negligible": 0,
          "unknown": 0
        },
        "final": {
          "critical": 14,
          "high": 100,
          "low": 16,
          "medium": 126,
          "negligible": 116,
          "unknown": 48
        },
        "fixable": 0,
        "upstream": {
          "critical": 16,
          "high": 122,
          "low": 18,
          "medium": 140,
          "negligible": 116,
          "unknown": 48
        }
      },
      "scanArtifact": "scan-node-22-slim-22",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "22",
        "22-20260907",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-07T16:41:10Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/node-22-slim@sha256:8be28dd20dde392331f5127edb582decdf14b20f89f25ae715a8242cf6550dfb --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/node-22-slim@sha256:8be28dd20dde392331f5127edb582decdf14b20f89f25ae715a8242cf6550dfb",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/node-22-slim@sha256:8be28dd20dde392331f5127edb582decdf14b20f89f25ae715a8242cf6550dfb"
      },
      "version": "22"
    },
    {
      "description": "Prometheus Node Exporter built from pinned upstream source.",
      "digest": "sha256:2ab0202fd053df956dc1ace750febef6f18572e50718a7b0f84e5b5d72757a00",
      "inputDigest": "sha256:128147bb5e0e29c81847db2a7b0bc34cae6fc5bc795497a2f2eed9f668aee23f",
      "name": "node-exporter",
      "reference": "ghcr.io/tektum/node-exporter@sha256:2ab0202fd053df956dc1ace750febef6f18572e50718a7b0f84e5b5d72757a00",
      "registry": "ghcr.io/tektum/node-exporter",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-node-exporter-1.10.2",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "1.10.2",
        "1.10.2-20260907",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-07T17:22:07Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/node-exporter@sha256:2ab0202fd053df956dc1ace750febef6f18572e50718a7b0f84e5b5d72757a00 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/node-exporter@sha256:2ab0202fd053df956dc1ace750febef6f18572e50718a7b0f84e5b5d72757a00",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/node-exporter@sha256:2ab0202fd053df956dc1ace750febef6f18572e50718a7b0f84e5b5d72757a00"
      },
      "version": "1.10.2"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Node.js runtime assembled from Wolfi packages.",
      "digest": "sha256:156d7188bdea0a0fc3bfb37062f3c2f62ad1914fa4e91020293831df66694c29",
      "inputDigest": "sha256:ae14cbe6bc515d59afe883664cf2baff98b40ed582a1c8bbc6e64db684021ec1",
      "name": "nodejs",
      "reference": "ghcr.io/tektum/nodejs@sha256:156d7188bdea0a0fc3bfb37062f3c2f62ad1914fa4e91020293831df66694c29",
      "registry": "ghcr.io/tektum/nodejs",
      "runId": "34718650273",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34718650273",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-nodejs-22",
      "sourceCommit": "aaa9dabaa48aea287499c53850d1cd6ec1257b98",
      "tags": [
        "22",
        "22-20260912"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T21:05:24Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/nodejs@sha256:156d7188bdea0a0fc3bfb37062f3c2f62ad1914fa4e91020293831df66694c29 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:156d7188bdea0a0fc3bfb37062f3c2f62ad1914fa4e91020293831df66694c29",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:156d7188bdea0a0fc3bfb37062f3c2f62ad1914fa4e91020293831df66694c29"
      },
      "version": "22"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Node.js runtime assembled from Wolfi packages.",
      "digest": "sha256:777048b1e621c5be036b28e941b996e5f53ce1b96b3d489a75a3dee4a81a98a2",
      "inputDigest": "sha256:8abea2c3acba7278d40c8c75acc81b8dd30a8340c1f3f1409ba339d83870903a",
      "name": "nodejs",
      "reference": "ghcr.io/tektum/nodejs@sha256:777048b1e621c5be036b28e941b996e5f53ce1b96b3d489a75a3dee4a81a98a2",
      "registry": "ghcr.io/tektum/nodejs",
      "runId": "34722806955",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34722806955",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-nodejs-24",
      "sourceCommit": "d210890d4b4ff2b2bfb51d0fa04b105f3979b0dd",
      "tags": [
        "24",
        "24-20260912"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T22:30:03Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/nodejs@sha256:777048b1e621c5be036b28e941b996e5f53ce1b96b3d489a75a3dee4a81a98a2 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:777048b1e621c5be036b28e941b996e5f53ce1b96b3d489a75a3dee4a81a98a2",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:777048b1e621c5be036b28e941b996e5f53ce1b96b3d489a75a3dee4a81a98a2"
      },
      "version": "24"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Node.js runtime assembled from Wolfi packages.",
      "digest": "sha256:db62b445939bba4ec44ca606a74b441d82a739621ea8435c49c734dee90e0733",
      "inputDigest": "sha256:fcaf7a16bfc0e54bd606ac7467375d5befc26a890bc5e844a6050acb73c75dae",
      "name": "nodejs",
      "reference": "ghcr.io/tektum/nodejs@sha256:db62b445939bba4ec44ca606a74b441d82a739621ea8435c49c734dee90e0733",
      "registry": "ghcr.io/tektum/nodejs",
      "runId": "34723177074",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34723177074",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-nodejs-26",
      "sourceCommit": "94d9eaaa69210346f314c39451d6ca84373fce85",
      "tags": [
        "26",
        "26-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T22:38:26Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/nodejs@sha256:db62b445939bba4ec44ca606a74b441d82a739621ea8435c49c734dee90e0733 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:db62b445939bba4ec44ca606a74b441d82a739621ea8435c49c734dee90e0733",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:db62b445939bba4ec44ca606a74b441d82a739621ea8435c49c734dee90e0733"
      },
      "version": "26"
    },
    {
      "category": "Policy & Compliance",
      "description": "Open Policy Agent assembled from Wolfi packages.",
      "digest": "sha256:3bb4beca55b0f0b2a175df0560d252ded9c319c6f60dd957497a0b25a4afdfe8",
      "inputDigest": "sha256:9ff05b0e1825222f49c1770de29558617a7eecf608da0571308079ac13ec17c5",
      "name": "opa",
      "reference": "ghcr.io/tektum/opa@sha256:3bb4beca55b0f0b2a175df0560d252ded9c319c6f60dd957497a0b25a4afdfe8",
      "registry": "ghcr.io/tektum/opa",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-opa-1",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "1",
        "1-20260907",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-07T16:34:47Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/opa@sha256:3bb4beca55b0f0b2a175df0560d252ded9c319c6f60dd957497a0b25a4afdfe8 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/opa@sha256:3bb4beca55b0f0b2a175df0560d252ded9c319c6f60dd957497a0b25a4afdfe8",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/opa@sha256:3bb4beca55b0f0b2a175df0560d252ded9c319c6f60dd957497a0b25a4afdfe8"
      },
      "version": "1"
    },
    {
      "category": "Languages & Build Tools",
      "description": "OpenJDK JDK and JRE flavors assembled from Wolfi packages.",
      "digest": "sha256:475d35b6d119a0460f13ebd58d0ce412d7b22bc2e32f7640fac59adee14429dd",
      "inputDigest": "sha256:96d35ff5ac507afee1756d5e8d2b755bcf2ab1b9ea5425a4f5b3f30eb7cc9fc8",
      "name": "openjdk",
      "reference": "ghcr.io/tektum/openjdk@sha256:475d35b6d119a0460f13ebd58d0ce412d7b22bc2e32f7640fac59adee14429dd",
      "registry": "ghcr.io/tektum/openjdk",
      "runId": "34723555216",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34723555216",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-openjdk-25",
      "sourceCommit": "05b11e8771a921bdc61d4c227a7ebf5ad71e3fa0",
      "tags": [
        "25",
        "25-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T22:47:44Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/openjdk@sha256:475d35b6d119a0460f13ebd58d0ce412d7b22bc2e32f7640fac59adee14429dd --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/openjdk@sha256:475d35b6d119a0460f13ebd58d0ce412d7b22bc2e32f7640fac59adee14429dd",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/openjdk@sha256:475d35b6d119a0460f13ebd58d0ce412d7b22bc2e32f7640fac59adee14429dd"
      },
      "version": "25"
    },
    {
      "category": "Languages & Build Tools",
      "description": "OpenJDK JDK and JRE flavors assembled from Wolfi packages.",
      "digest": "sha256:f0f7faa50db5beb73386171aebfe68066be41e073dd09eac8ecc4db245cfe277",
      "inputDigest": "sha256:309d7697adec96232ef036200439bf90c81bb4a7e40f958cec19323b5698bda1",
      "name": "openjdk",
      "reference": "ghcr.io/tektum/openjdk@sha256:f0f7faa50db5beb73386171aebfe68066be41e073dd09eac8ecc4db245cfe277",
      "registry": "ghcr.io/tektum/openjdk",
      "runId": "34723555216",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34723555216",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-openjdk-25-jre",
      "sourceCommit": "05b11e8771a921bdc61d4c227a7ebf5ad71e3fa0",
      "tags": [
        "25-jre",
        "25-20260912-jre",
        "latest-jre"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T22:47:26Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/openjdk@sha256:f0f7faa50db5beb73386171aebfe68066be41e073dd09eac8ecc4db245cfe277 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/openjdk@sha256:f0f7faa50db5beb73386171aebfe68066be41e073dd09eac8ecc4db245cfe277",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/openjdk@sha256:f0f7faa50db5beb73386171aebfe68066be41e073dd09eac8ecc4db245cfe277"
      },
      "version": "25-jre"
    },
    {
      "category": "Monitoring & Observability",
      "description": "OpenTelemetry Collector built from a pinned upstream source commit.",
      "digest": "sha256:0f3d16706316c9673f5a8557d4c64c41843cdd22b91e4c1c4a11f5c448c32d6f",
      "inputDigest": "sha256:55958f2a13a85826f34807cb69e774d2ff80abab36ec72485ffcb876e04cff3f",
      "name": "otel-collector",
      "reference": "ghcr.io/tektum/otel-collector@sha256:0f3d16706316c9673f5a8557d4c64c41843cdd22b91e4c1c4a11f5c448c32d6f",
      "registry": "ghcr.io/tektum/otel-collector",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-otel-collector-0.160.0",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "0.160.0",
        "0.160.0-20260907",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-07T16:45:58Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/otel-collector@sha256:0f3d16706316c9673f5a8557d4c64c41843cdd22b91e4c1c4a11f5c448c32d6f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/otel-collector@sha256:0f3d16706316c9673f5a8557d4c64c41843cdd22b91e4c1c4a11f5c448c32d6f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/otel-collector@sha256:0f3d16706316c9673f5a8557d4c64c41843cdd22b91e4c1c4a11f5c448c32d6f"
      },
      "version": "0.160.0"
    },
    {
      "description": "Perl runtime assembled from Wolfi packages.",
      "digest": "sha256:1009d82a9b238850566fb4a8a4cb13f6297ba708f039a05bd448e94f32acbd58",
      "inputDigest": "sha256:c8bb7b11a35e428c159d85dba8f3723cebfa7f8b881ae6b7fc6b79a5996b9978",
      "name": "perl",
      "reference": "ghcr.io/tektum/perl@sha256:1009d82a9b238850566fb4a8a4cb13f6297ba708f039a05bd448e94f32acbd58",
      "registry": "ghcr.io/tektum/perl",
      "runId": "34682340049",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682340049",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-perl-5.42",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "5.42",
        "5.42-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:40:35Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/perl@sha256:1009d82a9b238850566fb4a8a4cb13f6297ba708f039a05bd448e94f32acbd58 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/perl@sha256:1009d82a9b238850566fb4a8a4cb13f6297ba708f039a05bd448e94f32acbd58",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/perl@sha256:1009d82a9b238850566fb4a8a4cb13f6297ba708f039a05bd448e94f32acbd58"
      },
      "version": "5.42"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL connection pooler built from pinned upstream source.",
      "digest": "sha256:ca49fdbbcd81b8b8b96d29c82e73c7745cb4f9547d833c6a526bf9dc5b2c0e82",
      "inputDigest": "sha256:2c7e53fe67ce5160df810f927f4371e3916f1dc95b7658444617cb8a52d97fe0",
      "name": "pgbouncer",
      "reference": "ghcr.io/tektum/pgbouncer@sha256:ca49fdbbcd81b8b8b96d29c82e73c7745cb4f9547d833c6a526bf9dc5b2c0e82",
      "registry": "ghcr.io/tektum/pgbouncer",
      "runId": "34682341005",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682341005",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-pgbouncer-1.25.2",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "1.25.2",
        "1.25.2-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:12:13Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/pgbouncer@sha256:ca49fdbbcd81b8b8b96d29c82e73c7745cb4f9547d833c6a526bf9dc5b2c0e82 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgbouncer@sha256:ca49fdbbcd81b8b8b96d29c82e73c7745cb4f9547d833c6a526bf9dc5b2c0e82",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgbouncer@sha256:ca49fdbbcd81b8b8b96d29c82e73c7745cb4f9547d833c6a526bf9dc5b2c0e82"
      },
      "version": "1.25.2"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL connection pooler assembled from Wolfi packages.",
      "digest": "sha256:c0dad6e9626ffc4a9b090fdc6cd5ca8a0319e806688fc4ce65548e06ddf47ce0",
      "inputDigest": "sha256:ed091998c13e5ff4dc9bad4b401f3299d8b95ef65857d031939311469f65eeea",
      "name": "pgcat",
      "reference": "ghcr.io/tektum/pgcat@sha256:c0dad6e9626ffc4a9b090fdc6cd5ca8a0319e806688fc4ce65548e06ddf47ce0",
      "registry": "ghcr.io/tektum/pgcat",
      "runId": "34682341872",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682341872",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-pgcat-1",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "1",
        "1-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:36:02Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/pgcat@sha256:c0dad6e9626ffc4a9b090fdc6cd5ca8a0319e806688fc4ce65548e06ddf47ce0 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgcat@sha256:c0dad6e9626ffc4a9b090fdc6cd5ca8a0319e806688fc4ce65548e06ddf47ce0",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgcat@sha256:c0dad6e9626ffc4a9b090fdc6cd5ca8a0319e806688fc4ce65548e06ddf47ce0"
      },
      "version": "1"
    },
    {
      "category": "Databases & Caching",
      "description": "Web-based PostgreSQL browser built from pinned upstream source.",
      "digest": "sha256:32bfac42e2b7ac111f3516847586098e252e561daca5b671ecd942813f12c551",
      "inputDigest": "sha256:8ea9bd932e399d4b3e19c3078e567e416bac2b9b84e513dadcfccf1c49df52e3",
      "name": "pgweb",
      "reference": "ghcr.io/tektum/pgweb@sha256:32bfac42e2b7ac111f3516847586098e252e561daca5b671ecd942813f12c551",
      "registry": "ghcr.io/tektum/pgweb",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-pgweb-0.17.0",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "0.17.0",
        "0.17.0-20260907",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-07T16:44:30Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/pgweb@sha256:32bfac42e2b7ac111f3516847586098e252e561daca5b671ecd942813f12c551 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgweb@sha256:32bfac42e2b7ac111f3516847586098e252e561daca5b671ecd942813f12c551",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgweb@sha256:32bfac42e2b7ac111f3516847586098e252e561daca5b671ecd942813f12c551"
      },
      "version": "0.17.0"
    },
    {
      "category": "Languages & Build Tools",
      "description": "PHP runtime assembled from Wolfi packages.",
      "digest": "sha256:7133eda7800883f50420de1d23a0ea228fe1b8cf486c60f470e8f64a6cde760f",
      "inputDigest": "sha256:4cdf38c4ca060eb8023da2b17a64a17fd20315c34cceca6014d470cf5eedb79a",
      "name": "php",
      "reference": "ghcr.io/tektum/php@sha256:7133eda7800883f50420de1d23a0ea228fe1b8cf486c60f470e8f64a6cde760f",
      "registry": "ghcr.io/tektum/php",
      "runId": "34723990456",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34723990456",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-php-8.2",
      "sourceCommit": "c894da7ac84eae6579b9a4f9ec3a924497e1d228",
      "tags": [
        "8.2",
        "8.2-20260912"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T22:56:33Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/php@sha256:7133eda7800883f50420de1d23a0ea228fe1b8cf486c60f470e8f64a6cde760f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:7133eda7800883f50420de1d23a0ea228fe1b8cf486c60f470e8f64a6cde760f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:7133eda7800883f50420de1d23a0ea228fe1b8cf486c60f470e8f64a6cde760f"
      },
      "version": "8.2"
    },
    {
      "category": "Languages & Build Tools",
      "description": "PHP runtime assembled from Wolfi packages.",
      "digest": "sha256:f689e48d7da1e15b95a988441c26585456a9c9a18d344d123968ee14082460d9",
      "inputDigest": "sha256:097cff07ce256e2cd94502de7c93f9c478404753976f5a41dd973166a2883322",
      "name": "php",
      "reference": "ghcr.io/tektum/php@sha256:f689e48d7da1e15b95a988441c26585456a9c9a18d344d123968ee14082460d9",
      "registry": "ghcr.io/tektum/php",
      "runId": "34724348471",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34724348471",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-php-8.3",
      "sourceCommit": "571eb43591f111743f87c2616c94cb0d412b3d94",
      "tags": [
        "8.3",
        "8.3-20260912"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T23:04:39Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/php@sha256:f689e48d7da1e15b95a988441c26585456a9c9a18d344d123968ee14082460d9 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:f689e48d7da1e15b95a988441c26585456a9c9a18d344d123968ee14082460d9",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:f689e48d7da1e15b95a988441c26585456a9c9a18d344d123968ee14082460d9"
      },
      "version": "8.3"
    },
    {
      "category": "Languages & Build Tools",
      "description": "PHP runtime assembled from Wolfi packages.",
      "digest": "sha256:ccf3f2a8a559327d6864d865f7656bfef6f38b23f1d6a4f1a5f196514b1fe1bb",
      "inputDigest": "sha256:61f09d8eedd50df53fccb0f29b04979cf62a833ed1da69cba37ad4d3e13fbb67",
      "name": "php",
      "reference": "ghcr.io/tektum/php@sha256:ccf3f2a8a559327d6864d865f7656bfef6f38b23f1d6a4f1a5f196514b1fe1bb",
      "registry": "ghcr.io/tektum/php",
      "runId": "34724741903",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34724741903",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-php-8.4",
      "sourceCommit": "5f0205c1b5e899618ea83d7a439a590356149d5d",
      "tags": [
        "8.4",
        "8.4-20260912"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T23:13:18Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/php@sha256:ccf3f2a8a559327d6864d865f7656bfef6f38b23f1d6a4f1a5f196514b1fe1bb --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:ccf3f2a8a559327d6864d865f7656bfef6f38b23f1d6a4f1a5f196514b1fe1bb",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:ccf3f2a8a559327d6864d865f7656bfef6f38b23f1d6a4f1a5f196514b1fe1bb"
      },
      "version": "8.4"
    },
    {
      "category": "Languages & Build Tools",
      "description": "PHP runtime assembled from Wolfi packages.",
      "digest": "sha256:d943e725b7a3ac368086e2906ef974ce0f9856192a4d9787d3da78aecc4e02b1",
      "inputDigest": "sha256:8f39d98286f574b8143e71cd9492fdd12afb000a074f610f592ab0310fe6931d",
      "name": "php",
      "reference": "ghcr.io/tektum/php@sha256:d943e725b7a3ac368086e2906ef974ce0f9856192a4d9787d3da78aecc4e02b1",
      "registry": "ghcr.io/tektum/php",
      "runId": "34725113272",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34725113272",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-php-8.5",
      "sourceCommit": "e8d4a19e471ab118297c55c55e5519b83af6961e",
      "tags": [
        "8.5",
        "8.5-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T23:21:46Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/php@sha256:d943e725b7a3ac368086e2906ef974ce0f9856192a4d9787d3da78aecc4e02b1 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:d943e725b7a3ac368086e2906ef974ce0f9856192a4d9787d3da78aecc4e02b1",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:d943e725b7a3ac368086e2906ef974ce0f9856192a4d9787d3da78aecc4e02b1"
      },
      "version": "8.5"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL Trixie patched with Copacetic.",
      "digest": "sha256:ca6af1dceee167d41b38acd8bf2870bc47ea1cd8cf2663f10f541805b37e7425",
      "inputDigest": "sha256:c6ca9b4d95e33191c07eddd2c381328f6caa8ef25615304cde666213f7f8e05a",
      "name": "postgres-15-trixie",
      "reference": "ghcr.io/tektum/postgres-15-trixie@sha256:ca6af1dceee167d41b38acd8bf2870bc47ea1cd8cf2663f10f541805b37e7425",
      "registry": "ghcr.io/tektum/postgres-15-trixie",
      "runId": "34817748129",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34817748129",
      "scan": {
        "delta": {
          "critical": -62,
          "high": -154,
          "low": -10,
          "medium": -68,
          "negligible": 0,
          "unknown": 0
        },
        "final": {
          "critical": 2,
          "high": 120,
          "low": 38,
          "medium": 138,
          "negligible": 192,
          "unknown": 32
        },
        "fixable": 0,
        "upstream": {
          "critical": 64,
          "high": 274,
          "low": 48,
          "medium": 206,
          "negligible": 192,
          "unknown": 32
        }
      },
      "scanArtifact": "scan-postgres-15-trixie-15",
      "sourceCommit": "6772c7054372b5ecd42990c94ae637fe5e8ea599",
      "tags": [
        "15",
        "15-20260914",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-14T07:31:13Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/postgres-15-trixie@sha256:ca6af1dceee167d41b38acd8bf2870bc47ea1cd8cf2663f10f541805b37e7425 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-15-trixie@sha256:ca6af1dceee167d41b38acd8bf2870bc47ea1cd8cf2663f10f541805b37e7425",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-15-trixie@sha256:ca6af1dceee167d41b38acd8bf2870bc47ea1cd8cf2663f10f541805b37e7425"
      },
      "version": "15"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL Trixie patched with Copacetic.",
      "digest": "sha256:0c1717a1ce2fddee9ec2648856da1af27865e75209fa7a5abada7855b949db42",
      "inputDigest": "sha256:ab9f6c17b2c3d88ffe4db4edeb585cb2039b46f21685ad52c220d3c6590859c0",
      "name": "postgres-16-trixie",
      "reference": "ghcr.io/tektum/postgres-16-trixie@sha256:0c1717a1ce2fddee9ec2648856da1af27865e75209fa7a5abada7855b949db42",
      "registry": "ghcr.io/tektum/postgres-16-trixie",
      "runId": "34818335790",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34818335790",
      "scan": {
        "delta": {
          "critical": -62,
          "high": -154,
          "low": -10,
          "medium": -68,
          "negligible": 0,
          "unknown": 0
        },
        "final": {
          "critical": 2,
          "high": 120,
          "low": 38,
          "medium": 138,
          "negligible": 192,
          "unknown": 32
        },
        "fixable": 0,
        "upstream": {
          "critical": 64,
          "high": 274,
          "low": 48,
          "medium": 206,
          "negligible": 192,
          "unknown": 32
        }
      },
      "scanArtifact": "scan-postgres-16-trixie-16",
      "sourceCommit": "6772c7054372b5ecd42990c94ae637fe5e8ea599",
      "tags": [
        "16",
        "16-20260914",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-14T07:38:51Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/postgres-16-trixie@sha256:0c1717a1ce2fddee9ec2648856da1af27865e75209fa7a5abada7855b949db42 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-16-trixie@sha256:0c1717a1ce2fddee9ec2648856da1af27865e75209fa7a5abada7855b949db42",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-16-trixie@sha256:0c1717a1ce2fddee9ec2648856da1af27865e75209fa7a5abada7855b949db42"
      },
      "version": "16"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL Trixie patched with Copacetic.",
      "digest": "sha256:728e1bf2a7134bb6f9f7cedacb1ccc6c7950e0e5e6cbdec2e802e603d9f91da5",
      "inputDigest": "sha256:b6cf510a40dab3bfbc7ef24cc622e0c00a371dfddc0103ed7916a9857e7045e2",
      "name": "postgres-17-trixie",
      "reference": "ghcr.io/tektum/postgres-17-trixie@sha256:728e1bf2a7134bb6f9f7cedacb1ccc6c7950e0e5e6cbdec2e802e603d9f91da5",
      "registry": "ghcr.io/tektum/postgres-17-trixie",
      "runId": "34819038218",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34819038218",
      "scan": {
        "delta": {
          "critical": -62,
          "high": -154,
          "low": -10,
          "medium": -68,
          "negligible": 0,
          "unknown": 0
        },
        "final": {
          "critical": 2,
          "high": 120,
          "low": 38,
          "medium": 138,
          "negligible": 192,
          "unknown": 32
        },
        "fixable": 0,
        "upstream": {
          "critical": 64,
          "high": 274,
          "low": 48,
          "medium": 206,
          "negligible": 192,
          "unknown": 32
        }
      },
      "scanArtifact": "scan-postgres-17-trixie-17",
      "sourceCommit": "6772c7054372b5ecd42990c94ae637fe5e8ea599",
      "tags": [
        "17",
        "17-20260914",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-14T07:48:11Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/postgres-17-trixie@sha256:728e1bf2a7134bb6f9f7cedacb1ccc6c7950e0e5e6cbdec2e802e603d9f91da5 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-17-trixie@sha256:728e1bf2a7134bb6f9f7cedacb1ccc6c7950e0e5e6cbdec2e802e603d9f91da5",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-17-trixie@sha256:728e1bf2a7134bb6f9f7cedacb1ccc6c7950e0e5e6cbdec2e802e603d9f91da5"
      },
      "version": "17"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL Trixie patched with Copacetic.",
      "digest": "sha256:5414bf6045531a807cd436ea23ade6822cd89b89f7f91d53830c5ea8febe8a82",
      "inputDigest": "sha256:ba741c0686ad3432e99f8f8b2075ca03c44645f45d9978b4f913b53ed3354af0",
      "name": "postgres-18-trixie",
      "reference": "ghcr.io/tektum/postgres-18-trixie@sha256:5414bf6045531a807cd436ea23ade6822cd89b89f7f91d53830c5ea8febe8a82",
      "registry": "ghcr.io/tektum/postgres-18-trixie",
      "runId": "34819672601",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34819672601",
      "scan": {
        "delta": {
          "critical": -62,
          "high": -154,
          "low": -10,
          "medium": -68,
          "negligible": 0,
          "unknown": 0
        },
        "final": {
          "critical": 2,
          "high": 120,
          "low": 38,
          "medium": 138,
          "negligible": 192,
          "unknown": 32
        },
        "fixable": 0,
        "upstream": {
          "critical": 64,
          "high": 274,
          "low": 48,
          "medium": 206,
          "negligible": 192,
          "unknown": 32
        }
      },
      "scanArtifact": "scan-postgres-18-trixie-18",
      "sourceCommit": "6772c7054372b5ecd42990c94ae637fe5e8ea599",
      "tags": [
        "18",
        "18-20260914",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-14T07:56:29Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/postgres-18-trixie@sha256:5414bf6045531a807cd436ea23ade6822cd89b89f7f91d53830c5ea8febe8a82 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-18-trixie@sha256:5414bf6045531a807cd436ea23ade6822cd89b89f7f91d53830c5ea8febe8a82",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-18-trixie@sha256:5414bf6045531a807cd436ea23ade6822cd89b89f7f91d53830c5ea8febe8a82"
      },
      "version": "18"
    },
    {
      "category": "Monitoring & Observability",
      "description": "Prometheus monitoring and time-series database built from pinned upstream source.",
      "digest": "sha256:c854486791f56550f7740b011488e0643138bb10475a9a318c16834da15996f4",
      "inputDigest": "sha256:621b117f03ed607fdc9dabbdefdaa64a92d30cb950aeecd13485dd0ac5c49a33",
      "name": "prometheus",
      "reference": "ghcr.io/tektum/prometheus@sha256:c854486791f56550f7740b011488e0643138bb10475a9a318c16834da15996f4",
      "registry": "ghcr.io/tektum/prometheus",
      "runId": "34589171171",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34589171171",
      "scan": {
        "all": {
          "unknown": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-prometheus-3.11",
      "sourceCommit": "dfc8fc37e349920b63964f8c2e8fd75cd28c49be",
      "tags": [
        "3.11",
        "3.11-20260911",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-11T11:34:28Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/prometheus@sha256:c854486791f56550f7740b011488e0643138bb10475a9a318c16834da15996f4 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/prometheus@sha256:c854486791f56550f7740b011488e0643138bb10475a9a318c16834da15996f4",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/prometheus@sha256:c854486791f56550f7740b011488e0643138bb10475a9a318c16834da15996f4"
      },
      "version": "3.11"
    },
    {
      "description": "Prometheus Operator built from pinned upstream source.",
      "digest": "sha256:3274952d1d950a41cf9a186f624b3effa75800499226db2fbcf0689617f3535e",
      "inputDigest": "sha256:6534ad440400a6a957bb318e5458d4ad3568422d1b7669213f88f8e588c246e0",
      "name": "prometheus-operator",
      "reference": "ghcr.io/tektum/prometheus-operator@sha256:3274952d1d950a41cf9a186f624b3effa75800499226db2fbcf0689617f3535e",
      "registry": "ghcr.io/tektum/prometheus-operator",
      "runId": "34589171171",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34589171171",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-prometheus-operator-0.94.0",
      "sourceCommit": "dfc8fc37e349920b63964f8c2e8fd75cd28c49be",
      "tags": [
        "0.94.0",
        "0.94.0-20260911",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-11T11:04:37Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/prometheus-operator@sha256:3274952d1d950a41cf9a186f624b3effa75800499226db2fbcf0689617f3535e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/prometheus-operator@sha256:3274952d1d950a41cf9a186f624b3effa75800499226db2fbcf0689617f3535e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/prometheus-operator@sha256:3274952d1d950a41cf9a186f624b3effa75800499226db2fbcf0689617f3535e"
      },
      "version": "0.94.0"
    },
    {
      "category": "Databases & Caching",
      "description": "High-performance MySQL proxy assembled from Wolfi packages.",
      "digest": "sha256:d20ee1068224ea623589e832161f5c87f1c6e03ff78ab010213ff7778187729d",
      "inputDigest": "sha256:2558c2ac59e0b87a631c2f10e2d8a5a17c59bdc31c140f6a5f86e8c0c5a997b9",
      "name": "proxysql",
      "reference": "ghcr.io/tektum/proxysql@sha256:d20ee1068224ea623589e832161f5c87f1c6e03ff78ab010213ff7778187729d",
      "registry": "ghcr.io/tektum/proxysql",
      "runId": "34725479051",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34725479051",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-proxysql-3",
      "sourceCommit": "1b3bdceaf111257e36501de9efe8329105749bd3",
      "tags": [
        "3",
        "3-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T23:30:27Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/proxysql@sha256:d20ee1068224ea623589e832161f5c87f1c6e03ff78ab010213ff7778187729d --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/proxysql@sha256:d20ee1068224ea623589e832161f5c87f1c6e03ff78ab010213ff7778187729d",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/proxysql@sha256:d20ee1068224ea623589e832161f5c87f1c6e03ff78ab010213ff7778187729d"
      },
      "version": "3"
    },
    {
      "category": "Monitoring & Observability",
      "description": "Prometheus Pushgateway push acceptor for ephemeral and batch jobs, built from a pinned source commit.",
      "digest": "sha256:23212f9198500dff9aa3659294791f4e1ee48d492578467fa225bd520698f95e",
      "inputDigest": "sha256:069694e6d14d4a4c4bf281f0412712c9621b2d7d4c2752421d41bf1e65a8be06",
      "name": "pushgateway",
      "reference": "ghcr.io/tektum/pushgateway@sha256:23212f9198500dff9aa3659294791f4e1ee48d492578467fa225bd520698f95e",
      "registry": "ghcr.io/tektum/pushgateway",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-pushgateway-1.11",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "1.11",
        "1.11-20260907",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-07T16:36:58Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/pushgateway@sha256:23212f9198500dff9aa3659294791f4e1ee48d492578467fa225bd520698f95e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pushgateway@sha256:23212f9198500dff9aa3659294791f4e1ee48d492578467fa225bd520698f95e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pushgateway@sha256:23212f9198500dff9aa3659294791f4e1ee48d492578467fa225bd520698f95e"
      },
      "version": "1.11"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Python runtime assembled from Wolfi packages.",
      "digest": "sha256:20845be43e3ada72ff65fe7fa2bd27861672883b4d189540ae543b801ca88fcc",
      "inputDigest": "sha256:5847ee846b77b0fc4b2496ebd2cfb4a9921d8c980a7cfaeed3c852671790acd4",
      "name": "python",
      "reference": "ghcr.io/tektum/python@sha256:20845be43e3ada72ff65fe7fa2bd27861672883b4d189540ae543b801ca88fcc",
      "registry": "ghcr.io/tektum/python",
      "runId": "34725867181",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34725867181",
      "scan": {
        "all": {
          "high": 6,
          "low": 4,
          "medium": 14,
          "negligible": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-python-3.10",
      "sourceCommit": "8e6a823021b560d36e7b933a08dfc496026ecb6c",
      "tags": [
        "3.10",
        "3.10-20260912"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T23:38:59Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/python@sha256:20845be43e3ada72ff65fe7fa2bd27861672883b4d189540ae543b801ca88fcc --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:20845be43e3ada72ff65fe7fa2bd27861672883b4d189540ae543b801ca88fcc",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:20845be43e3ada72ff65fe7fa2bd27861672883b4d189540ae543b801ca88fcc"
      },
      "version": "3.10"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Python runtime assembled from Wolfi packages.",
      "digest": "sha256:3ef041a3bd0d1e8a61d766306642e29ea98eb69a66515d04321b2c289131852a",
      "inputDigest": "sha256:fb98e0698b8a130618615675aa0de302c11c4966df4c93d7c06f4c72b79a30cf",
      "name": "python",
      "reference": "ghcr.io/tektum/python@sha256:3ef041a3bd0d1e8a61d766306642e29ea98eb69a66515d04321b2c289131852a",
      "registry": "ghcr.io/tektum/python",
      "runId": "34726191081",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34726191081",
      "scan": {
        "all": {
          "high": 2,
          "low": 2,
          "medium": 12,
          "negligible": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-python-3.11",
      "sourceCommit": "d9b357e3e532bcbb85ef952922ecd61920ca810d",
      "tags": [
        "3.11",
        "3.11-20260912"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T23:46:33Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/python@sha256:3ef041a3bd0d1e8a61d766306642e29ea98eb69a66515d04321b2c289131852a --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:3ef041a3bd0d1e8a61d766306642e29ea98eb69a66515d04321b2c289131852a",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:3ef041a3bd0d1e8a61d766306642e29ea98eb69a66515d04321b2c289131852a"
      },
      "version": "3.11"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Python runtime assembled from Wolfi packages.",
      "digest": "sha256:9f07f98856012f5bea5eb902f4fe49afd796dfd0b000ed30d3b3ffa19e1d04f3",
      "inputDigest": "sha256:7fd7da5c2810458cd7c755bed5973b3bb8820075dbbb669e125187812bff92c2",
      "name": "python",
      "reference": "ghcr.io/tektum/python@sha256:9f07f98856012f5bea5eb902f4fe49afd796dfd0b000ed30d3b3ffa19e1d04f3",
      "registry": "ghcr.io/tektum/python",
      "runId": "34726531059",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34726531059",
      "scan": {
        "all": {
          "high": 6,
          "low": 4,
          "medium": 12,
          "negligible": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-python-3.12",
      "sourceCommit": "ed492e4221996e64fd23a89344125d8578982c99",
      "tags": [
        "3.12",
        "3.12-20260912"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T23:54:38Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/python@sha256:9f07f98856012f5bea5eb902f4fe49afd796dfd0b000ed30d3b3ffa19e1d04f3 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:9f07f98856012f5bea5eb902f4fe49afd796dfd0b000ed30d3b3ffa19e1d04f3",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:9f07f98856012f5bea5eb902f4fe49afd796dfd0b000ed30d3b3ffa19e1d04f3"
      },
      "version": "3.12"
    },
    {
      "category": "Messaging & Streaming",
      "description": "RabbitMQ patched from the official image.",
      "digest": "sha256:84d3bf423b39a586faa30836ec66ee704624475f484217a9b160c8fd18ce1e1d",
      "inputDigest": "sha256:a0d1d4f322477454a8a49a71e19979769d54a9cb949998c0c79a5bc5fa2abef6",
      "name": "rabbitmq",
      "reference": "ghcr.io/tektum/rabbitmq@sha256:84d3bf423b39a586faa30836ec66ee704624475f484217a9b160c8fd18ce1e1d",
      "registry": "ghcr.io/tektum/rabbitmq",
      "runId": "34682350477",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682350477",
      "scan": {
        "delta": {
          "critical": -6,
          "high": -54,
          "low": -22,
          "medium": -194,
          "negligible": 0
        },
        "final": {
          "low": 12,
          "medium": 84,
          "negligible": 4
        },
        "fixable": 0,
        "upstream": {
          "critical": 6,
          "high": 54,
          "low": 34,
          "medium": 278,
          "negligible": 4
        }
      },
      "scanArtifact": "scan-rabbitmq-4.3",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "4",
        "4.3",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-12T08:24:36Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/rabbitmq@sha256:84d3bf423b39a586faa30836ec66ee704624475f484217a9b160c8fd18ce1e1d --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rabbitmq@sha256:84d3bf423b39a586faa30836ec66ee704624475f484217a9b160c8fd18ce1e1d",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rabbitmq@sha256:84d3bf423b39a586faa30836ec66ee704624475f484217a9b160c8fd18ce1e1d"
      },
      "version": "4.3"
    },
    {
      "category": "Messaging & Streaming",
      "description": "RabbitMQ Cluster Operator assembled from pinned source.",
      "digest": "sha256:d5d9562ae1738051c20a6b497d6d10bb09c4ec538e097ded6a01845bffc478e2",
      "inputDigest": "sha256:d2a4868d9ac9883a4deb5b6dd300bfa581800c3449178abaff7d4e07e413cf0d",
      "name": "rabbitmq-cluster-operator",
      "reference": "ghcr.io/tektum/rabbitmq-cluster-operator@sha256:d5d9562ae1738051c20a6b497d6d10bb09c4ec538e097ded6a01845bffc478e2",
      "registry": "ghcr.io/tektum/rabbitmq-cluster-operator",
      "runId": "34625288501",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34625288501",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-rabbitmq-cluster-operator-2",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "2",
        "2-20260911",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-11T17:16:21Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/rabbitmq-cluster-operator@sha256:d5d9562ae1738051c20a6b497d6d10bb09c4ec538e097ded6a01845bffc478e2 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rabbitmq-cluster-operator@sha256:d5d9562ae1738051c20a6b497d6d10bb09c4ec538e097ded6a01845bffc478e2",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rabbitmq-cluster-operator@sha256:d5d9562ae1738051c20a6b497d6d10bb09c4ec538e097ded6a01845bffc478e2"
      },
      "version": "2"
    },
    {
      "description": "Restic backup and restore CLI built from pinned upstream source.",
      "digest": "sha256:409127125925143f62a7285fdfd2b25441346054481045fdea72feecab40bd50",
      "inputDigest": "sha256:03db84981be1e53996ce596ec6b7c12cf792abc4cb3f0fffb8a6738215e63fdc",
      "name": "restic",
      "reference": "ghcr.io/tektum/restic@sha256:409127125925143f62a7285fdfd2b25441346054481045fdea72feecab40bd50",
      "registry": "ghcr.io/tektum/restic",
      "runId": "34689168163",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34689168163",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-restic-0.18",
      "sourceCommit": "47804a28c28c6349a81792e63c762aed62194ded",
      "tags": [
        "0.18",
        "0.18-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T11:03:33Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/restic@sha256:409127125925143f62a7285fdfd2b25441346054481045fdea72feecab40bd50 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/restic@sha256:409127125925143f62a7285fdfd2b25441346054481045fdea72feecab40bd50",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/restic@sha256:409127125925143f62a7285fdfd2b25441346054481045fdea72feecab40bd50"
      },
      "version": "0.18"
    },
    {
      "category": "Databases & Caching",
      "description": "rqlite distributed SQLite built from pinned upstream source.",
      "digest": "sha256:65ef8cf322ed5f86152b94a9300eb88a131ed51e75d991c351f64445ba03c162",
      "inputDigest": "sha256:e16278285d80b64975d8f7452342c8f7faa83204a27cc0df637bb82e4e7030e0",
      "name": "rqlite",
      "reference": "ghcr.io/tektum/rqlite@sha256:65ef8cf322ed5f86152b94a9300eb88a131ed51e75d991c351f64445ba03c162",
      "registry": "ghcr.io/tektum/rqlite",
      "runId": "34682351866",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682351866",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-rqlite-8",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "8",
        "8-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:38:34Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/rqlite@sha256:65ef8cf322ed5f86152b94a9300eb88a131ed51e75d991c351f64445ba03c162 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rqlite@sha256:65ef8cf322ed5f86152b94a9300eb88a131ed51e75d991c351f64445ba03c162",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rqlite@sha256:65ef8cf322ed5f86152b94a9300eb88a131ed51e75d991c351f64445ba03c162"
      },
      "version": "8"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:6ae77e2627232fc546913f4f3e95327c0feec31ca376ff54b1f340d091c0cead",
      "inputDigest": "sha256:971f54aec25fec4163bf23d1753d55b4e1d32862ccabc233276d67ebe25052a0",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:6ae77e2627232fc546913f4f3e95327c0feec31ca376ff54b1f340d091c0cead",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "34726845566",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34726845566",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-3.3",
      "sourceCommit": "97c48f06d01f62a573c50977fc060eab9eebf175",
      "tags": [
        "3.3",
        "3.3-20260913"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-13T00:02:45Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:6ae77e2627232fc546913f4f3e95327c0feec31ca376ff54b1f340d091c0cead --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:6ae77e2627232fc546913f4f3e95327c0feec31ca376ff54b1f340d091c0cead",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:6ae77e2627232fc546913f4f3e95327c0feec31ca376ff54b1f340d091c0cead"
      },
      "version": "3.3"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:79e46feffd319bfbc84c7c259761717868fed1e6705d080d7dab7de573beb7b4",
      "inputDigest": "sha256:df5bad01813f70e4589c7926bf5d2f852dc50111b6657112cb83e6e9b58222f1",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:79e46feffd319bfbc84c7c259761717868fed1e6705d080d7dab7de573beb7b4",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "34726845566",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34726845566",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-3.3-dev",
      "sourceCommit": "97c48f06d01f62a573c50977fc060eab9eebf175",
      "tags": [
        "3.3-dev",
        "3.3-20260913-dev"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-13T00:04:13Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:79e46feffd319bfbc84c7c259761717868fed1e6705d080d7dab7de573beb7b4 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:79e46feffd319bfbc84c7c259761717868fed1e6705d080d7dab7de573beb7b4",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:79e46feffd319bfbc84c7c259761717868fed1e6705d080d7dab7de573beb7b4"
      },
      "version": "3.3-dev"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:a8ff8e236f566a27634fbb4b7fd209792a89b333699a387de9fb863652fbc8fb",
      "inputDigest": "sha256:8efc7dc145dea17f26d0160648df70844e38c9f47b2c1465afb4b7731b85cc8e",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:a8ff8e236f566a27634fbb4b7fd209792a89b333699a387de9fb863652fbc8fb",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "34726845566",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34726845566",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-3.3-fips",
      "sourceCommit": "97c48f06d01f62a573c50977fc060eab9eebf175",
      "tags": [
        "3.3-fips",
        "3.3-20260913-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-13T00:03:03Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:a8ff8e236f566a27634fbb4b7fd209792a89b333699a387de9fb863652fbc8fb --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:a8ff8e236f566a27634fbb4b7fd209792a89b333699a387de9fb863652fbc8fb",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:a8ff8e236f566a27634fbb4b7fd209792a89b333699a387de9fb863652fbc8fb"
      },
      "version": "3.3-fips"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:92c6a9172433da9616a7d1d3363e3879fb48a9e173647a81e0ed942b267afb0f",
      "inputDigest": "sha256:61e63eaf26d5b2aab5b45d86a838f74eef3d8c8fac70549aef27d1ac112efc0b",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:92c6a9172433da9616a7d1d3363e3879fb48a9e173647a81e0ed942b267afb0f",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "34727225304",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34727225304",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-4.0",
      "sourceCommit": "91b9d4b3196b39c8d4db02b68d2619da2ca9aeb1",
      "tags": [
        "4.0",
        "4.0-20260913",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-13T00:11:25Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:92c6a9172433da9616a7d1d3363e3879fb48a9e173647a81e0ed942b267afb0f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:92c6a9172433da9616a7d1d3363e3879fb48a9e173647a81e0ed942b267afb0f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:92c6a9172433da9616a7d1d3363e3879fb48a9e173647a81e0ed942b267afb0f"
      },
      "version": "4.0"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:257cd77ee7b92bf2267ce69e117dd2240edf575e7a648d2052e4a94f80997903",
      "inputDigest": "sha256:2f4e64a242db573845164eda844abca4a4ed52522fabaf913273d179108a7ff8",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:257cd77ee7b92bf2267ce69e117dd2240edf575e7a648d2052e4a94f80997903",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "34727225304",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34727225304",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-4.0-dev",
      "sourceCommit": "91b9d4b3196b39c8d4db02b68d2619da2ca9aeb1",
      "tags": [
        "4.0-dev",
        "4.0-20260913-dev",
        "latest-dev"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-13T00:12:35Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:257cd77ee7b92bf2267ce69e117dd2240edf575e7a648d2052e4a94f80997903 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:257cd77ee7b92bf2267ce69e117dd2240edf575e7a648d2052e4a94f80997903",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:257cd77ee7b92bf2267ce69e117dd2240edf575e7a648d2052e4a94f80997903"
      },
      "version": "4.0-dev"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:02e5e76837cedb479d647a3407ffe0852e221c71b1e34142333c6377a19f47ff",
      "inputDigest": "sha256:c712a37024ec5a2ecf066855fab5c82e6163523cdd9dfd75fdd457ff5c0824e5",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:02e5e76837cedb479d647a3407ffe0852e221c71b1e34142333c6377a19f47ff",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "34727225304",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34727225304",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-4.0-fips",
      "sourceCommit": "91b9d4b3196b39c8d4db02b68d2619da2ca9aeb1",
      "tags": [
        "4.0-fips",
        "4.0-20260913-fips",
        "latest-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-13T00:11:43Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:02e5e76837cedb479d647a3407ffe0852e221c71b1e34142333c6377a19f47ff --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:02e5e76837cedb479d647a3407ffe0852e221c71b1e34142333c6377a19f47ff",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:02e5e76837cedb479d647a3407ffe0852e221c71b1e34142333c6377a19f47ff"
      },
      "version": "4.0-fips"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Rust toolchain assembled from Wolfi packages.",
      "digest": "sha256:52eed4ad8e0bc02477e2d17a00368699eba5d7132a462353ef6e73d42f914064",
      "inputDigest": "sha256:07d94948dca51433f68c321fb26fa03f805813494e46301014c067bc5f7146f2",
      "name": "rust",
      "reference": "ghcr.io/tektum/rust@sha256:52eed4ad8e0bc02477e2d17a00368699eba5d7132a462353ef6e73d42f914064",
      "registry": "ghcr.io/tektum/rust",
      "runId": "34718650273",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34718650273",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-rust-1",
      "sourceCommit": "aaa9dabaa48aea287499c53850d1cd6ec1257b98",
      "tags": [
        "1",
        "1-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T21:04:51Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/rust@sha256:52eed4ad8e0bc02477e2d17a00368699eba5d7132a462353ef6e73d42f914064 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rust@sha256:52eed4ad8e0bc02477e2d17a00368699eba5d7132a462353ef6e73d42f914064",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rust@sha256:52eed4ad8e0bc02477e2d17a00368699eba5d7132a462353ef6e73d42f914064"
      },
      "version": "1"
    },
    {
      "category": "Security & Identity",
      "description": "Sealed Secrets controller and kubeseal CLI built from pinned upstream source.",
      "digest": "sha256:389aa1c9913d004a32f32a870e51293173a8a1175f04d2b38849dc27092bf77a",
      "inputDigest": "sha256:e011a362521f88d37260b9c9f336c3ca8055613d39ba30ac2c52863e8ae77267",
      "name": "sealed-secrets",
      "reference": "ghcr.io/tektum/sealed-secrets@sha256:389aa1c9913d004a32f32a870e51293173a8a1175f04d2b38849dc27092bf77a",
      "registry": "ghcr.io/tektum/sealed-secrets",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-sealed-secrets-0.39.1",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "0.39.1",
        "0.39.1-20260907",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-07T17:06:14Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/sealed-secrets@sha256:389aa1c9913d004a32f32a870e51293173a8a1175f04d2b38849dc27092bf77a --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/sealed-secrets@sha256:389aa1c9913d004a32f32a870e51293173a8a1175f04d2b38849dc27092bf77a",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/sealed-secrets@sha256:389aa1c9913d004a32f32a870e51293173a8a1175f04d2b38849dc27092bf77a"
      },
      "version": "0.39.1"
    },
    {
      "description": "Flux source-controller built from a pinned upstream source commit.",
      "digest": "sha256:a394129d9ef248d810ab77f318b18cd1f706af1745632a8106bc29ed84e608b2",
      "inputDigest": "sha256:e4aeb51f3f319e52edda97bc74a2913e0458ca552d712a3306e142f1b41813b6",
      "name": "source-controller",
      "reference": "ghcr.io/tektum/source-controller@sha256:a394129d9ef248d810ab77f318b18cd1f706af1745632a8106bc29ed84e608b2",
      "registry": "ghcr.io/tektum/source-controller",
      "runId": "34454380326",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34454380326",
      "scan": {
        "all": {
          "unknown": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-source-controller-1.9",
      "sourceCommit": "caa6704b83557ae002a27fc5e664f22d5f87c9a9",
      "tags": [
        "1.9",
        "1.9-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T08:50:45Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/source-controller@sha256:a394129d9ef248d810ab77f318b18cd1f706af1745632a8106bc29ed84e608b2 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/source-controller@sha256:a394129d9ef248d810ab77f318b18cd1f706af1745632a8106bc29ed84e608b2",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/source-controller@sha256:a394129d9ef248d810ab77f318b18cd1f706af1745632a8106bc29ed84e608b2"
      },
      "version": "1.9"
    },
    {
      "category": "Base & Utilities",
      "description": "Minimal root filesystem with CA certificates and timezone data.",
      "digest": "sha256:d0eaa13e3385e6974093197ae8e83a7b1bf623453a52b1bd4de873660ac7a74e",
      "inputDigest": "sha256:1f9177a8d0fa2652df0ea8721e598683d0ef7a3eea1313bd579466b2db2f2b28",
      "name": "static",
      "reference": "ghcr.io/tektum/static@sha256:d0eaa13e3385e6974093197ae8e83a7b1bf623453a52b1bd4de873660ac7a74e",
      "registry": "ghcr.io/tektum/static",
      "runId": "34528111898",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34528111898",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-static-wolfi",
      "sourceCommit": "0375dae63ae3bfb02663f692a4a1bf660b9614e2",
      "tags": [
        "wolfi",
        "wolfi-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T20:46:22Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/static@sha256:d0eaa13e3385e6974093197ae8e83a7b1bf623453a52b1bd4de873660ac7a74e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/static@sha256:d0eaa13e3385e6974093197ae8e83a7b1bf623453a52b1bd4de873660ac7a74e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/static@sha256:d0eaa13e3385e6974093197ae8e83a7b1bf623453a52b1bd4de873660ac7a74e"
      },
      "version": "wolfi"
    },
    {
      "description": "Tekton Pipelines Kubernetes controller built from a pinned upstream source commit.",
      "digest": "sha256:87c6f68ea22f583d1410aa47944c67b8f47bba38569db35926e7f4a186b8fdc8",
      "inputDigest": "sha256:3f112dfb5d6338544663cdefbfaff3e64813914586e044c096d6aeedd35879d8",
      "name": "tekton-controller",
      "reference": "ghcr.io/tektum/tekton-controller@sha256:87c6f68ea22f583d1410aa47944c67b8f47bba38569db35926e7f4a186b8fdc8",
      "registry": "ghcr.io/tektum/tekton-controller",
      "runId": "34454382175",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34454382175",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-tekton-controller-1.15",
      "sourceCommit": "caa6704b83557ae002a27fc5e664f22d5f87c9a9",
      "tags": [
        "1.15",
        "1.15-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T08:44:26Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/tekton-controller@sha256:87c6f68ea22f583d1410aa47944c67b8f47bba38569db35926e7f4a186b8fdc8 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/tekton-controller@sha256:87c6f68ea22f583d1410aa47944c67b8f47bba38569db35926e7f4a186b8fdc8",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/tekton-controller@sha256:87c6f68ea22f583d1410aa47944c67b8f47bba38569db35926e7f4a186b8fdc8"
      },
      "version": "1.15"
    },
    {
      "category": "CI/CD & GitOps",
      "description": "OpenTofu Terraform-compatible IaC CLI published as terraform from pinned upstream source.",
      "digest": "sha256:151903c1665871d0ef1411e26b7be0075eaf101187fab26ccfb745db55cde17c",
      "inputDigest": "sha256:7bf725d14df01b4f4be6813cf7a48b2848332c7df4d5af8e0bc77e988d0454c3",
      "name": "terraform",
      "reference": "ghcr.io/tektum/terraform@sha256:151903c1665871d0ef1411e26b7be0075eaf101187fab26ccfb745db55cde17c",
      "registry": "ghcr.io/tektum/terraform",
      "runId": "34582756018",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34582756018",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-terraform-1.12",
      "sourceCommit": "194952da2a2fb36f1c1b4e60d46c893f70e12314",
      "tags": [
        "1.12",
        "1.12-20260911",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-11T09:44:55Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/terraform@sha256:151903c1665871d0ef1411e26b7be0075eaf101187fab26ccfb745db55cde17c --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/terraform@sha256:151903c1665871d0ef1411e26b7be0075eaf101187fab26ccfb745db55cde17c",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/terraform@sha256:151903c1665871d0ef1411e26b7be0075eaf101187fab26ccfb745db55cde17c"
      },
      "version": "1.12"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Traefik built from pinned source with plain and Go FIPS flavors.",
      "digest": "sha256:70a9d252926dc31c1757759b940f3c3ec8fd5b31f8d96b4a820efd9430f55bac",
      "inputDigest": "sha256:b313b0b620d52aa04ff65089c357a197d9479365d10a552c620c6d41c31d70e2",
      "name": "traefik",
      "reference": "ghcr.io/tektum/traefik@sha256:70a9d252926dc31c1757759b940f3c3ec8fd5b31f8d96b4a820efd9430f55bac",
      "registry": "ghcr.io/tektum/traefik",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-traefik-3.7.13",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "3",
        "3.7.13",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-07T16:56:41Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/traefik@sha256:70a9d252926dc31c1757759b940f3c3ec8fd5b31f8d96b4a820efd9430f55bac --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/traefik@sha256:70a9d252926dc31c1757759b940f3c3ec8fd5b31f8d96b4a820efd9430f55bac",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/traefik@sha256:70a9d252926dc31c1757759b940f3c3ec8fd5b31f8d96b4a820efd9430f55bac"
      },
      "version": "3.7.13"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Traefik built from pinned source with plain and Go FIPS flavors.",
      "digest": "sha256:a508bb1c03659537f70dbfc9296d6ffb81d0a2b4419b152c57f53d490b0741c1",
      "inputDigest": "sha256:05766b625e048d7d24e3eabf12adabc578a836d1c01a0d859127448bb27b4e7a",
      "name": "traefik",
      "reference": "ghcr.io/tektum/traefik@sha256:a508bb1c03659537f70dbfc9296d6ffb81d0a2b4419b152c57f53d490b0741c1",
      "registry": "ghcr.io/tektum/traefik",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-traefik-3.7.13-fips",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "3-fips",
        "3.7.13-fips",
        "latest-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-07T17:16:33Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/traefik@sha256:a508bb1c03659537f70dbfc9296d6ffb81d0a2b4419b152c57f53d490b0741c1 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/traefik@sha256:a508bb1c03659537f70dbfc9296d6ffb81d0a2b4419b152c57f53d490b0741c1",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/traefik@sha256:a508bb1c03659537f70dbfc9296d6ffb81d0a2b4419b152c57f53d490b0741c1"
      },
      "version": "3.7.13-fips"
    },
    {
      "category": "Security & Identity",
      "description": "Vulnerability and misconfiguration scanner.",
      "digest": "sha256:2b4d88c43a030ff26119d13cdf1972c36c16ecf58f980e1784bd22a3fd89dc9c",
      "inputDigest": "sha256:0e718049a8c2c778dd3146e51f4302838d5828aee88b95f2ddb6a7b92012e1f8",
      "name": "trivy",
      "reference": "ghcr.io/tektum/trivy@sha256:2b4d88c43a030ff26119d13cdf1972c36c16ecf58f980e1784bd22a3fd89dc9c",
      "registry": "ghcr.io/tektum/trivy",
      "runId": "34826128803",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34826128803",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-trivy-0.74.0",
      "sourceCommit": "7422b1e7a79957d50968e25e57ac28d55ca05da9",
      "tags": [
        "0.74.0",
        "0.74.0-20260914",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-14T09:40:19Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/trivy@sha256:2b4d88c43a030ff26119d13cdf1972c36c16ecf58f980e1784bd22a3fd89dc9c --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/trivy@sha256:2b4d88c43a030ff26119d13cdf1972c36c16ecf58f980e1784bd22a3fd89dc9c",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/trivy@sha256:2b4d88c43a030ff26119d13cdf1972c36c16ecf58f980e1784bd22a3fd89dc9c"
      },
      "version": "0.74.0"
    },
    {
      "category": "Databases & Caching",
      "description": "Valkey built from pinned source with CLI and persistent data support.",
      "digest": "sha256:179af21d4dceeaf76e9b1629b954ae6aab0b17e5d02d023a67bd8866b7f1d034",
      "inputDigest": "sha256:f5602b30c9e10544e95926385cd0391c76c92a526302f144252ea28b73fc32af",
      "name": "valkey",
      "reference": "ghcr.io/tektum/valkey@sha256:179af21d4dceeaf76e9b1629b954ae6aab0b17e5d02d023a67bd8866b7f1d034",
      "registry": "ghcr.io/tektum/valkey",
      "runId": "34682360936",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682360936",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-valkey-9.1",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "9.1",
        "9.1-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:18:12Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/valkey@sha256:179af21d4dceeaf76e9b1629b954ae6aab0b17e5d02d023a67bd8866b7f1d034 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/valkey@sha256:179af21d4dceeaf76e9b1629b954ae6aab0b17e5d02d023a67bd8866b7f1d034",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/valkey@sha256:179af21d4dceeaf76e9b1629b954ae6aab0b17e5d02d023a67bd8866b7f1d034"
      },
      "version": "9.1"
    },
    {
      "description": "Minimal Vector stdin-to-console observability pipeline built from source on Wolfi.",
      "digest": "sha256:8b58d6c1124c9f8340ca0ddea638ec11ff1dfb1d6925d551b060701c180fccf5",
      "inputDigest": "sha256:52dc7bfff351691dfa0aa299ae2cabf4a2df0604e68271d6f758b44cafe302bd",
      "name": "vector",
      "reference": "ghcr.io/tektum/vector@sha256:8b58d6c1124c9f8340ca0ddea638ec11ff1dfb1d6925d551b060701c180fccf5",
      "registry": "ghcr.io/tektum/vector",
      "runId": "34695599863",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34695599863",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-vector-0.58",
      "sourceCommit": "c2628182bb616dc87193d1c231a2e7a6d1b991d0",
      "tags": [
        "0.58",
        "0.58-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T14:44:13Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/vector@sha256:8b58d6c1124c9f8340ca0ddea638ec11ff1dfb1d6925d551b060701c180fccf5 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/vector@sha256:8b58d6c1124c9f8340ca0ddea638ec11ff1dfb1d6925d551b060701c180fccf5",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/vector@sha256:8b58d6c1124c9f8340ca0ddea638ec11ff1dfb1d6925d551b060701c180fccf5"
      },
      "version": "0.58"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes backup and restore from pinned upstream source.",
      "digest": "sha256:63730241367974420192b075d632b72101faee4985453290c5f90ffc383399fa",
      "inputDigest": "sha256:49cab7e38a175db633b5b2099999c05f60997987c1c49ca50feca8e8ba6fc3de",
      "name": "velero",
      "reference": "ghcr.io/tektum/velero@sha256:63730241367974420192b075d632b72101faee4985453290c5f90ffc383399fa",
      "registry": "ghcr.io/tektum/velero",
      "runId": "34687635894",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34687635894",
      "scan": {
        "all": {
          "unknown": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-velero-1.18.2",
      "sourceCommit": "b1b69f61e710bdeb5e5904c9d1ad09b69f6d39ee",
      "tags": [
        "1.18.2",
        "1.18.2-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T10:44:45Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/velero@sha256:63730241367974420192b075d632b72101faee4985453290c5f90ffc383399fa --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/velero@sha256:63730241367974420192b075d632b72101faee4985453290c5f90ffc383399fa",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/velero@sha256:63730241367974420192b075d632b72101faee4985453290c5f90ffc383399fa"
      },
      "version": "1.18.2"
    },
    {
      "category": "Base & Utilities",
      "description": "Small interactive Wolfi base with apk and BusyBox.",
      "digest": "sha256:111591f8fdb8b692289647c206b5eead1b2d30725df69a0927f15252b95207fc",
      "inputDigest": "sha256:ac998fb2487775547a438004a1607b8590dfc37c3cff12fbd8b0c22dc224be28",
      "name": "wolfi-base",
      "reference": "ghcr.io/tektum/wolfi-base@sha256:111591f8fdb8b692289647c206b5eead1b2d30725df69a0927f15252b95207fc",
      "registry": "ghcr.io/tektum/wolfi-base",
      "runId": "34727565581",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34727565581",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-wolfi-base-wolfi",
      "sourceCommit": "518c82d156be5a593221756a7449c6742e21036c",
      "tags": [
        "wolfi",
        "wolfi-20260913",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-13T00:19:03Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/wolfi-base@sha256:111591f8fdb8b692289647c206b5eead1b2d30725df69a0927f15252b95207fc --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/wolfi-base@sha256:111591f8fdb8b692289647c206b5eead1b2d30725df69a0927f15252b95207fc",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/wolfi-base@sha256:111591f8fdb8b692289647c206b5eead1b2d30725df69a0927f15252b95207fc"
      },
      "version": "wolfi"
    },
    {
      "category": "Base & Utilities",
      "description": "Minimal yq image assembled from Wolfi packages.",
      "digest": "sha256:5c38895851a8f35e475ca21ad6017d94d1c5af25cbb9e6ec481d54ca9f895e52",
      "inputDigest": "sha256:0f94bd7037ed0295584cd4da30850b1f5b3ebefa4f4149bb6efed269137f6e5c",
      "name": "yq",
      "reference": "ghcr.io/tektum/yq@sha256:5c38895851a8f35e475ca21ad6017d94d1c5af25cbb9e6ec481d54ca9f895e52",
      "registry": "ghcr.io/tektum/yq",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-yq-4",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "4",
        "4-20260907",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-07T16:34:44Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/yq@sha256:5c38895851a8f35e475ca21ad6017d94d1c5af25cbb9e6ec481d54ca9f895e52 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/yq@sha256:5c38895851a8f35e475ca21ad6017d94d1c5af25cbb9e6ec481d54ca9f895e52",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/yq@sha256:5c38895851a8f35e475ca21ad6017d94d1c5af25cbb9e6ec481d54ca9f895e52"
      },
      "version": "4"
    },
    {
      "description": "Apache ZooKeeper coordination service built from pinned source.",
      "digest": "sha256:7deca16fa32b5058b3b0ea9217bde6d11faa3bc72816c1b541c90c4d5919f063",
      "inputDigest": "sha256:cfaab91fe1bbf5a9dcf223e5b94ba9f3b99435aa25ae3e1c456eb2f15624113b",
      "name": "zookeeper",
      "reference": "ghcr.io/tektum/zookeeper@sha256:7deca16fa32b5058b3b0ea9217bde6d11faa3bc72816c1b541c90c4d5919f063",
      "registry": "ghcr.io/tektum/zookeeper",
      "runId": "34687473989",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34687473989",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-zookeeper-3.9",
      "sourceCommit": "1b724988a29a58cdd34e37e7d13bacb87b72e825",
      "tags": [
        "3.9",
        "3.9-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T10:18:33Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/zookeeper@sha256:7deca16fa32b5058b3b0ea9217bde6d11faa3bc72816c1b541c90c4d5919f063 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/zookeeper@sha256:7deca16fa32b5058b3b0ea9217bde6d11faa3bc72816c1b541c90c4d5919f063",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/zookeeper@sha256:7deca16fa32b5058b3b0ea9217bde6d11faa3bc72816c1b541c90c4d5919f063"
      },
      "version": "3.9"
    },
    {
      "description": "Zot OCI registry built from a pinned upstream source commit.",
      "digest": "sha256:b62ab33e1d8a8f733228bd1cbf73a2c038806af02fd8b5bc48030ee1b41b44ba",
      "inputDigest": "sha256:5deffefae97c3f0e00930a08120cebf6d57e906e08a29326191922cac35980fd",
      "name": "zot",
      "reference": "ghcr.io/tektum/zot@sha256:b62ab33e1d8a8f733228bd1cbf73a2c038806af02fd8b5bc48030ee1b41b44ba",
      "registry": "ghcr.io/tektum/zot",
      "runId": "34454389942",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34454389942",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-zot-2.1.21",
      "sourceCommit": "caa6704b83557ae002a27fc5e664f22d5f87c9a9",
      "tags": [
        "2.1.21",
        "2.1.21-20260910",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-10T08:56:23Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/zot@sha256:b62ab33e1d8a8f733228bd1cbf73a2c038806af02fd8b5bc48030ee1b41b44ba --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/zot@sha256:b62ab33e1d8a8f733228bd1cbf73a2c038806af02fd8b5bc48030ee1b41b44ba",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/zot@sha256:b62ab33e1d8a8f733228bd1cbf73a2c038806af02fd8b5bc48030ee1b41b44ba"
      },
      "version": "2.1.21"
    }
  ],
  "policy": {
    "certificateIdentity": "https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main",
    "certificateIssuer": "https://token.actions.githubusercontent.com",
    "cosignMinimumVersion": "3.0.6",
    "fixableVulnerabilitiesAllowed": 0,
    "sbomFormat": "SPDX-JSON"
  },
  "publishedAt": "2026-09-14T09:40:47Z",
  "schemaVersion": 2,
  "source": {
    "commit": "7422b1e7a79957d50968e25e57ac28d55ca05da9",
    "consumedRuns": {
      "30447643212": 1,
      "30452761807": 1,
      "30454136180": 1,
      "30465630534": 1,
      "30468478054": 1,
      "30471007183": 1,
      "30473204948": 1,
      "30473235100": 1,
      "30515606170": 1,
      "30517833665": 1,
      "30536753910": 1,
      "30539474232": 1,
      "30542387245": 1,
      "30544091686": 1,
      "30560017220": 1,
      "30564609413": 1,
      "30575649013": 1,
      "30575713143": 1,
      "30605499708": 1,
      "30609474598": 1,
      "30641392663": 1,
      "30649379817": 1,
      "30658912703": 1,
      "30684162287": 1,
      "30690604558": 1,
      "30691564759": 1,
      "30695375618": 1,
      "30699475130": 1,
      "30699476932": 1,
      "30699478453": 1,
      "30710148991": 1,
      "30710479421": 1,
      "30711096544": 1,
      "30733832286": 1,
      "30735033930": 1,
      "30736454187": 1,
      "30738207100": 1,
      "30743321759": 1,
      "30747687404": 1,
      "30749416645": 1,
      "30752245841": 1,
      "30754926041": 1,
      "30757352932": 1,
      "30757968561": 1,
      "30760512678": 1,
      "30760530266": 1,
      "30784519228": 1,
      "30786271301": 1,
      "30787438474": 1,
      "30789362215": 2,
      "30796930285": 1,
      "30803901132": 1,
      "30810661078": 1,
      "30815996001": 1,
      "30816022451": 1,
      "30826668405": 1,
      "30828978972": 1,
      "30840255068": 1,
      "30848035558": 1,
      "30917519748": 1,
      "30998462006": 1,
      "30998539263": 1,
      "31001136245": 1,
      "31009616542": 1,
      "31030281286": 1,
      "31037024607": 1,
      "31040715839": 1,
      "31085763921": 1,
      "31089127150": 1,
      "31089499121": 1,
      "31089949484": 1,
      "31090204111": 1,
      "31090918418": 1,
      "31091195181": 1,
      "31093609325": 1,
      "31097205619": 1,
      "31097478616": 1,
      "31098211334": 1,
      "31098835511": 1,
      "31100538838": 1,
      "31101181699": 1,
      "31111604155": 1,
      "31112280540": 1,
      "31113722114": 1,
      "31131101253": 1,
      "31132798939": 1,
      "31133971441": 1,
      "31134527687": 1,
      "31135826530": 1,
      "31138761339": 1,
      "31138910393": 1,
      "31142580881": 1,
      "31145178635": 1,
      "31146145988": 1,
      "31146310193": 1,
      "31147542187": 1,
      "31149394038": 1,
      "31150804997": 1,
      "31153647744": 1,
      "31154300139": 1,
      "31157668542": 1,
      "31159132233": 1,
      "31160797396": 1,
      "31166465744": 1,
      "31168749512": 1,
      "31170906606": 1,
      "31173335739": 1,
      "31174062636": 1,
      "31177229001": 1,
      "31186258906": 1,
      "31186569482": 2,
      "31187053906": 1,
      "31191600372": 1,
      "31196383985": 2,
      "31197290735": 1,
      "31203310235": 1,
      "31203329012": 1,
      "31203404660": 1,
      "31209637120": 1,
      "31209703365": 1,
      "31240043522": 1,
      "31240588295": 1,
      "31240640414": 1,
      "31241938461": 1,
      "31245640332": 1,
      "31245937832": 1,
      "31246668685": 1,
      "31249432912": 1,
      "31252368964": 1,
      "31252730890": 1,
      "31253863764": 1,
      "31254802746": 1,
      "31255298949": 1,
      "31258180527": 1,
      "31260432107": 2,
      "31266420696": 1,
      "31271160499": 1,
      "31289263446": 1,
      "31311460215": 1,
      "31314930504": 1,
      "31316416752": 1,
      "31353618382": 1,
      "31355988659": 1,
      "31356186555": 1,
      "31356294900": 2,
      "31357375803": 1,
      "31357627286": 1,
      "31358544037": 1,
      "31368870430": 1,
      "31368954493": 1,
      "31371724140": 1,
      "31373994437": 1,
      "31377125593": 1,
      "31392419579": 1,
      "31393010296": 1,
      "31398950635": 1,
      "31428259721": 1,
      "31480506794": 1,
      "31482437528": 1,
      "31484032459": 1,
      "31490719614": 1,
      "31522624943": 1,
      "31522667768": 1,
      "31523806945": 1,
      "31523834684": 1,
      "31530536492": 1,
      "31531240244": 1,
      "31536626354": 1,
      "31573763035": 1,
      "31574635149": 1,
      "31574636164": 1,
      "31575364216": 1,
      "31579702996": 1,
      "31579830015": 1,
      "31585658501": 1,
      "31586501004": 1,
      "31586900992": 1,
      "31587822359": 1,
      "31596112519": 1,
      "31596196500": 3,
      "31684180420": 1,
      "31688175163": 1,
      "31689155592": 1,
      "31689538511": 1,
      "31696278875": 1,
      "31696521410": 1,
      "31704869839": 1,
      "31705144899": 1,
      "31725349783": 1,
      "31729651322": 1,
      "31731824167": 1,
      "31734727373": 1,
      "31736325656": 1,
      "31737962378": 1,
      "31738535795": 1,
      "31766113770": 1,
      "31782780596": 1,
      "31802451792": 1,
      "31808296923": 1,
      "31808360258": 1,
      "31808572337": 1,
      "31808811609": 1,
      "31809855392": 1,
      "31819074304": 1,
      "31819500286": 1,
      "31839766398": 1,
      "31868964386": 1,
      "31919402726": 1,
      "31927888990": 1,
      "31941664764": 1,
      "31949902878": 1,
      "31958819729": 1,
      "32093443410": 1,
      "32109132598": 1,
      "32226123551": 1,
      "32226431904": 1,
      "32227498240": 1,
      "32238973072": 1,
      "32262022488": 1,
      "32263253348": 1,
      "32351427502": 1,
      "32351845265": 1,
      "32352398154": 1,
      "32352654386": 1,
      "32352812466": 1,
      "32353173620": 1,
      "32355265584": 1,
      "32355401435": 1,
      "32356845317": 1,
      "32366150722": 1,
      "32366986272": 1,
      "32621640939": 1,
      "32741653098": 1,
      "32742884709": 1,
      "32743228308": 1,
      "32743365211": 1,
      "32743779753": 1,
      "32747821458": 1,
      "32748069879": 1,
      "32749253260": 1,
      "32896481222": 1,
      "32919609183": 1,
      "32942446380": 1,
      "32974527099": 1,
      "32975609746": 1,
      "33023275806": 1,
      "33031921898": 1,
      "33045045828": 1,
      "33045273752": 1,
      "33045568995": 1,
      "33075445380": 1,
      "33076270403": 1,
      "33081218248": 1,
      "33081344583": 1,
      "33081462176": 1,
      "33081537258": 1,
      "33081587699": 1,
      "33081624001": 1,
      "33081714909": 1,
      "33081766936": 1,
      "33081864813": 1,
      "33081983464": 1,
      "33082687468": 1,
      "33083665268": 1,
      "33086534185": 1,
      "33086770550": 1,
      "33086871053": 1,
      "33087020226": 1,
      "33087189673": 1,
      "33087213625": 1,
      "33087385290": 1,
      "33095525362": 1,
      "33097281023": 1,
      "33128107829": 1,
      "33128210934": 1,
      "33248954368": 1,
      "33255161183": 1,
      "33259241670": 1,
      "33262591473": 1,
      "33264187751": 1,
      "33268579530": 1,
      "33270772912": 1,
      "33272646316": 1,
      "33293145662": 1,
      "33308349263": 1,
      "33320529009": 1,
      "33330094977": 2,
      "33330877727": 2,
      "33381541536": 1,
      "33387880805": 1,
      "33388755318": 1,
      "33399583441": 1,
      "33402162866": 1,
      "33406840762": 1,
      "33410553565": 1,
      "33414908416": 1,
      "33419505427": 1,
      "33420834881": 1,
      "33424062074": 1,
      "33438196634": 1,
      "33441150178": 1,
      "33442823636": 1,
      "33446823808": 1,
      "33451501606": 1,
      "33457975665": 1,
      "33462937366": 1,
      "33465476529": 1,
      "33468535464": 1,
      "33471640413": 1,
      "33475516459": 1,
      "33476862163": 1,
      "33476936463": 2,
      "33476996289": 2,
      "33477038332": 2,
      "33477074278": 2,
      "33477210000": 1,
      "33479157916": 1,
      "33481012059": 1,
      "33515141913": 1,
      "33518175202": 1,
      "33522177951": 1,
      "33522185839": 2,
      "33522192115": 2,
      "33522199682": 2,
      "33522205635": 2,
      "33522214416": 1,
      "33522220485": 1,
      "33522228414": 2,
      "33522235050": 3,
      "33522242470": 2,
      "33522249026": 2,
      "33522254711": 3,
      "33522262930": 2,
      "33523158033": 1,
      "33524976067": 1,
      "33525208986": 1,
      "33528638576": 1,
      "33532708185": 1,
      "33533597845": 1,
      "33541720899": 1,
      "33543839850": 1,
      "33547230557": 1,
      "33549979741": 1,
      "33551861381": 2,
      "33558712401": 1,
      "33563257993": 1,
      "33563263181": 1,
      "33569844285": 2,
      "33579663363": 1,
      "33598431133": 2,
      "33608461381": 1,
      "33621393664": 1,
      "33624524559": 1,
      "33626610202": 1,
      "33633317138": 1,
      "33649518832": 1,
      "33649782764": 2,
      "33649792635": 1,
      "33651745620": 1,
      "33654760792": 1,
      "33657605214": 1,
      "33661171985": 1,
      "33664147458": 1,
      "33664935261": 1,
      "33667850644": 1,
      "33668853784": 1,
      "33672719195": 1,
      "33673422647": 1,
      "33674129403": 1,
      "33676545739": 1,
      "33686071196": 1,
      "33687399498": 1,
      "33694626514": 1,
      "33695249260": 1,
      "33699023246": 1,
      "33704013118": 1,
      "33711566583": 1,
      "33715520291": 1,
      "33716822171": 1,
      "33719328980": 1,
      "33724213919": 1,
      "33729571935": 1,
      "33745026510": 1,
      "33745559575": 1,
      "33745567058": 1,
      "33745574734": 1,
      "33745585104": 1,
      "33745587469": 1,
      "33745592978": 1,
      "33745598810": 1,
      "33746106692": 1,
      "33746115360": 1,
      "33746137969": 1,
      "33746143581": 1,
      "33746150652": 1,
      "33746155483": 1,
      "33749665840": 1,
      "33751380439": 1,
      "33753059374": 1,
      "33756595046": 1,
      "33764935258": 1,
      "33777122713": 1,
      "33793272681": 1,
      "33826145824": 1,
      "33846373074": 1,
      "33850597244": 1,
      "33861827233": 1,
      "33880390375": 1,
      "33882144621": 1,
      "33902830001": 1,
      "33942010088": 1,
      "33942176367": 1,
      "33942189626": 1,
      "33961112077": 1,
      "33962516394": 1,
      "33963645385": 1,
      "33985169390": 1,
      "33986002701": 1,
      "33986005020": 1,
      "33986007846": 1,
      "33986010392": 1,
      "33986013868": 1,
      "33986017469": 1,
      "33986021231": 1,
      "33986023606": 1,
      "33986029248": 1,
      "33986032821": 1,
      "33986036418": 1,
      "33986039950": 1,
      "33986043508": 1,
      "33986046780": 1,
      "33986050312": 1,
      "33986053593": 1,
      "33986056231": 1,
      "33988502114": 1,
      "33988505368": 1,
      "33988508868": 1,
      "33988511535": 1,
      "33988515566": 1,
      "33988519874": 1,
      "33988523252": 1,
      "33988527235": 1,
      "33988532129": 1,
      "33988536544": 1,
      "33988540265": 1,
      "33988545650": 1,
      "33988549424": 1,
      "33988552570": 1,
      "33988556052": 1,
      "33988559570": 1,
      "33988563918": 1,
      "33991985157": 1,
      "33994624835": 1,
      "33996766918": 1,
      "33997494769": 1,
      "33997541370": 1,
      "33997673911": 1,
      "33997739389": 1,
      "33998002568": 1,
      "33998005404": 1,
      "33998008655": 1,
      "33998010758": 1,
      "33998726078": 1,
      "33999132583": 1,
      "33999135497": 1,
      "34000293863": 1,
      "34000548749": 1,
      "34000605042": 1,
      "34000914396": 1,
      "34000958589": 1,
      "34007012480": 1,
      "34007592950": 1,
      "34009627038": 1,
      "34016486029": 1,
      "34019142584": 1,
      "34036928291": 1,
      "34037155758": 1,
      "34045120170": 1,
      "34055297558": 1,
      "34058814996": 1,
      "34058836898": 1,
      "34091221553": 1,
      "34093348178": 1,
      "34099700570": 1,
      "34099895349": 1,
      "34100152542": 2,
      "34101136915": 1,
      "34101536303": 1,
      "34102792544": 1,
      "34102799180": 1,
      "34109297607": 1,
      "34110797324": 1,
      "34119854270": 1,
      "34129704795": 1,
      "34137758614": 1,
      "34138515888": 1,
      "34146973705": 1,
      "34148844380": 1,
      "34157819830": 1,
      "34196931159": 1,
      "34205761257": 1,
      "34211263213": 1,
      "34212560139": 1,
      "34235966319": 1,
      "34239259536": 1,
      "34244591468": 1,
      "34244614863": 2,
      "34247587789": 1,
      "34248733216": 1,
      "34249001416": 1,
      "34265308095": 1,
      "34361969009": 1,
      "34376875399": 1,
      "34398690227": 1,
      "34454314497": 1,
      "34454316811": 1,
      "34454319239": 1,
      "34454321535": 1,
      "34454323989": 1,
      "34454326516": 1,
      "34454330984": 1,
      "34454333637": 1,
      "34454335443": 1,
      "34454337594": 1,
      "34454342245": 1,
      "34454346720": 1,
      "34454350366": 1,
      "34454352084": 1,
      "34454353650": 1,
      "34454355516": 1,
      "34454365127": 1,
      "34454366932": 1,
      "34454370599": 1,
      "34454372325": 1,
      "34454374409": 1,
      "34454376216": 1,
      "34454378263": 1,
      "34454380326": 1,
      "34454382175": 1,
      "34454386102": 1,
      "34454389942": 1,
      "34465918191": 1,
      "34477660037": 1,
      "34528111898": 1,
      "34529038071": 1,
      "34529532775": 1,
      "34530490535": 1,
      "34530500080": 1,
      "34530502877": 1,
      "34530511144": 1,
      "34566130443": 1,
      "34577988254": 1,
      "34582136825": 1,
      "34582756018": 1,
      "34585333849": 1,
      "34586205399": 1,
      "34589171171": 1,
      "34592266945": 1,
      "34612028472": 1,
      "34623364474": 1,
      "34625288309": 1,
      "34625288376": 1,
      "34625288501": 1,
      "34682301247": 1,
      "34682307051": 1,
      "34682308144": 1,
      "34682310167": 1,
      "34682313488": 1,
      "34682314531": 1,
      "34682315756": 1,
      "34682317996": 1,
      "34682319141": 1,
      "34682320178": 1,
      "34682321307": 1,
      "34682322387": 1,
      "34682323641": 1,
      "34682324572": 1,
      "34682325514": 1,
      "34682331613": 1,
      "34682340049": 1,
      "34682341005": 1,
      "34682341872": 1,
      "34682350477": 1,
      "34682351866": 1,
      "34682355083": 1,
      "34682358424": 1,
      "34682360936": 1,
      "34682362128": 1,
      "34687053618": 1,
      "34687227858": 1,
      "34687473989": 1,
      "34687635894": 1,
      "34689168163": 1,
      "34691454673": 1,
      "34695599863": 1,
      "34698289265": 1,
      "34717199876": 1,
      "34717494408": 1,
      "34717869795": 1,
      "34718315324": 1,
      "34718650273": 1,
      "34718974314": 1,
      "34719497856": 1,
      "34719903841": 1,
      "34720412109": 1,
      "34720781440": 1,
      "34721203059": 1,
      "34721539193": 1,
      "34721906592": 1,
      "34722423034": 1,
      "34722806955": 1,
      "34723177074": 1,
      "34723555216": 1,
      "34723990456": 1,
      "34724348471": 1,
      "34724741903": 1,
      "34725113272": 1,
      "34725479051": 1,
      "34725867181": 1,
      "34726191081": 1,
      "34726531059": 1,
      "34726845566": 1,
      "34727225304": 1,
      "34727565581": 1,
      "34747716283": 1,
      "34747744262": 1,
      "34747745064": 1,
      "34747746736": 1,
      "34747747553": 1,
      "34811853287": 1,
      "34816614775": 1,
      "34817294524": 1,
      "34817748129": 1,
      "34818335790": 1,
      "34819038218": 1,
      "34819672601": 1,
      "34822789039": 1,
      "34826128803": 1
    },
    "runId": "34826128803",
    "runUrl": "https://github.com/tektum/verity-images/actions/runs/34826128803"
  }
}