{
  "images": [
    {
      "category": "Monitoring & Observability",
      "description": "Prometheus Alertmanager built from pinned upstream source.",
      "digest": "sha256:e4295dbb13247e76d054dc9d323a424d68b16390b3296e8426ee826561d8f312",
      "inputDigest": "sha256:5561834939f4e6f0a8b42e7c8fffddee323306027b1c4d4178226332ef070c27",
      "name": "alertmanager",
      "reference": "ghcr.io/tektum/alertmanager@sha256:e4295dbb13247e76d054dc9d323a424d68b16390b3296e8426ee826561d8f312",
      "registry": "ghcr.io/tektum/alertmanager",
      "runId": "31802451792",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31802451792",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-alertmanager-0",
      "sourceCommit": "d7077c0f05e06b7ab3e8651056ea5cf2824357a3",
      "tags": [
        "0",
        "0-20260814",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-14T13:01:14Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/alertmanager@sha256:e4295dbb13247e76d054dc9d323a424d68b16390b3296e8426ee826561d8f312 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/alertmanager@sha256:e4295dbb13247e76d054dc9d323a424d68b16390b3296e8426ee826561d8f312",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/alertmanager@sha256:e4295dbb13247e76d054dc9d323a424d68b16390b3296e8426ee826561d8f312"
      },
      "version": "0"
    },
    {
      "description": "Argo Workflows 3.7 executor built from the pinned v3.7.17 source release.",
      "digest": "sha256:c739e5056d86b142e08b12df6b09c22a35c479c019ec4cefdac6f1f2e75812c2",
      "inputDigest": "sha256:3f1e900c49d5db304e90ea951b972b58336bb4827c5a251bb4c5e667cf113648",
      "name": "argo-workflows",
      "reference": "ghcr.io/tektum/argo-workflows@sha256:c739e5056d86b142e08b12df6b09c22a35c479c019ec4cefdac6f1f2e75812c2",
      "registry": "ghcr.io/tektum/argo-workflows",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 2,
          "medium": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-argo-workflows-3.7",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "3.7",
        "3.7-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:23:20Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/argo-workflows@sha256:c739e5056d86b142e08b12df6b09c22a35c479c019ec4cefdac6f1f2e75812c2 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/argo-workflows@sha256:c739e5056d86b142e08b12df6b09c22a35c479c019ec4cefdac6f1f2e75812c2",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/argo-workflows@sha256:c739e5056d86b142e08b12df6b09c22a35c479c019ec4cefdac6f1f2e75812c2"
      },
      "version": "3.7"
    },
    {
      "description": "Argo CD 3.3 built from the pinned v3.3.14 source release.",
      "digest": "sha256:9e9d93b1f700a9bf58de8a33e7512df2b21f97272b28bd627d1f293f23517e12",
      "inputDigest": "sha256:5b7e7f55e63e96e96e33116b368eb0a25754079bbccd63293d9e31468da21d9a",
      "name": "argocd",
      "reference": "ghcr.io/tektum/argocd@sha256:9e9d93b1f700a9bf58de8a33e7512df2b21f97272b28bd627d1f293f23517e12",
      "registry": "ghcr.io/tektum/argocd",
      "runId": "31839766398",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31839766398",
      "scan": {
        "all": {
          "high": 4,
          "low": 2,
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-argocd-3.3",
      "sourceCommit": "66b11eb3f5bf82dc146b8a24f88c791a8462e379",
      "tags": [
        "3.3",
        "3.3-20260814",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-14T21:25:47Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/argocd@sha256:9e9d93b1f700a9bf58de8a33e7512df2b21f97272b28bd627d1f293f23517e12 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/argocd@sha256:9e9d93b1f700a9bf58de8a33e7512df2b21f97272b28bd627d1f293f23517e12",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/argocd@sha256:9e9d93b1f700a9bf58de8a33e7512df2b21f97272b28bd627d1f293f23517e12"
      },
      "version": "3.3"
    },
    {
      "category": "Base & Utilities",
      "description": "Syntax-highlighting cat replacement assembled from Wolfi packages.",
      "digest": "sha256:fa8ca2d092952d6e28d402485bb83868c569582ef49aa46c196ab195f7a6a083",
      "inputDigest": "sha256:0888628a82d654442723ce0bc7bb71819581bda611edb3ff2875f9874c11b981",
      "name": "bat",
      "reference": "ghcr.io/tektum/bat@sha256:fa8ca2d092952d6e28d402485bb83868c569582ef49aa46c196ab195f7a6a083",
      "registry": "ghcr.io/tektum/bat",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-bat-0",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "0",
        "0-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:21Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/bat@sha256:fa8ca2d092952d6e28d402485bb83868c569582ef49aa46c196ab195f7a6a083 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/bat@sha256:fa8ca2d092952d6e28d402485bb83868c569582ef49aa46c196ab195f7a6a083",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/bat@sha256:fa8ca2d092952d6e28d402485bb83868c569582ef49aa46c196ab195f7a6a083"
      },
      "version": "0"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Bazel 9 build system assembled from Wolfi packages.",
      "digest": "sha256:30ac07578f16852b889a53407ec2e9d19564a908fe35881ff94ca40a423dbc2e",
      "inputDigest": "sha256:135ee5472f3a3535e65ca7b87c80f9f7a94516a004e95b4b06b0b6012993a5ac",
      "name": "bazel",
      "reference": "ghcr.io/tektum/bazel@sha256:30ac07578f16852b889a53407ec2e9d19564a908fe35881ff94ca40a423dbc2e",
      "registry": "ghcr.io/tektum/bazel",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-bazel-9",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "9",
        "9-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:02:47Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/bazel@sha256:30ac07578f16852b889a53407ec2e9d19564a908fe35881ff94ca40a423dbc2e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/bazel@sha256:30ac07578f16852b889a53407ec2e9d19564a908fe35881ff94ca40a423dbc2e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/bazel@sha256:30ac07578f16852b889a53407ec2e9d19564a908fe35881ff94ca40a423dbc2e"
      },
      "version": "9"
    },
    {
      "category": "Monitoring & Observability",
      "description": "Prometheus Blackbox Exporter built from pinned upstream source.",
      "digest": "sha256:e2da8ff6e2c4aec1b9eb40fc4676f0c6003884cac56529530082fee906556244",
      "inputDigest": "sha256:b3c65b415cda3c40fcc5af94698e5e4437c49c4d44b9a2d81ff4dd6f371647ac",
      "name": "blackbox-exporter",
      "reference": "ghcr.io/tektum/blackbox-exporter@sha256:e2da8ff6e2c4aec1b9eb40fc4676f0c6003884cac56529530082fee906556244",
      "registry": "ghcr.io/tektum/blackbox-exporter",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-blackbox-exporter-0.28.0",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "0.28.0",
        "0.28.0-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:03:07Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/blackbox-exporter@sha256:e2da8ff6e2c4aec1b9eb40fc4676f0c6003884cac56529530082fee906556244 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/blackbox-exporter@sha256:e2da8ff6e2c4aec1b9eb40fc4676f0c6003884cac56529530082fee906556244",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/blackbox-exporter@sha256:e2da8ff6e2c4aec1b9eb40fc4676f0c6003884cac56529530082fee906556244"
      },
      "version": "0.28.0"
    },
    {
      "category": "Base & Utilities",
      "description": "Docker Official BusyBox 1.38.0 byte-identical mirror.",
      "digest": "sha256:1fb6008d891733dc177f67317d2fa13307d9fd91ade04aed760722ab0a6c0c8d",
      "inputDigest": "sha256:dc4b6def3efdc46da986ac09eed92e030bfd78b39ab3b841cfe112259e91605c",
      "name": "busybox",
      "reference": "ghcr.io/tektum/busybox@sha256:1fb6008d891733dc177f67317d2fa13307d9fd91ade04aed760722ab0a6c0c8d",
      "registry": "ghcr.io/tektum/busybox",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "delta": {
          "high": 0
        },
        "final": {
          "high": 6
        },
        "fixable": 0,
        "upstream": {
          "high": 6
        }
      },
      "scanArtifact": "scan-busybox-1.38.0",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.38.0",
        "1.38.0-20260813",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-08-13T20:01:21Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/busybox@sha256:1fb6008d891733dc177f67317d2fa13307d9fd91ade04aed760722ab0a6c0c8d --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/busybox@sha256:1fb6008d891733dc177f67317d2fa13307d9fd91ade04aed760722ab0a6c0c8d",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/busybox@sha256:1fb6008d891733dc177f67317d2fa13307d9fd91ade04aed760722ab0a6c0c8d"
      },
      "version": "1.38.0"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Caddy built from pinned source with plain and Go FIPS flavors.",
      "digest": "sha256:c519fe3377cbd36b6d5e7a57da39f813d348ed7976e2baf1b6b865bb7e7f78ed",
      "inputDigest": "sha256:16767139d7ea9c3394cb51662861c1b306a1c464de866871a4b70cd80341eb3f",
      "name": "caddy",
      "reference": "ghcr.io/tektum/caddy@sha256:c519fe3377cbd36b6d5e7a57da39f813d348ed7976e2baf1b6b865bb7e7f78ed",
      "registry": "ghcr.io/tektum/caddy",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-caddy-2.11.4",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "2",
        "2.11.4",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:05:46Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/caddy@sha256:c519fe3377cbd36b6d5e7a57da39f813d348ed7976e2baf1b6b865bb7e7f78ed --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/caddy@sha256:c519fe3377cbd36b6d5e7a57da39f813d348ed7976e2baf1b6b865bb7e7f78ed",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/caddy@sha256:c519fe3377cbd36b6d5e7a57da39f813d348ed7976e2baf1b6b865bb7e7f78ed"
      },
      "version": "2.11.4"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Caddy built from pinned source with plain and Go FIPS flavors.",
      "digest": "sha256:2755b2ec0f9b63d96dd383a25053abe2c965942e97d2e0210ba12bca06a4a892",
      "inputDigest": "sha256:29c9abe70da00d6c36917a48743c0ead8760b75f063b5301762c4252dd048b67",
      "name": "caddy",
      "reference": "ghcr.io/tektum/caddy@sha256:2755b2ec0f9b63d96dd383a25053abe2c965942e97d2e0210ba12bca06a4a892",
      "registry": "ghcr.io/tektum/caddy",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-caddy-2.11.4-fips",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "2-fips",
        "2.11.4-fips",
        "latest-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:05:39Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/caddy@sha256:2755b2ec0f9b63d96dd383a25053abe2c965942e97d2e0210ba12bca06a4a892 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/caddy@sha256:2755b2ec0f9b63d96dd383a25053abe2c965942e97d2e0210ba12bca06a4a892",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/caddy@sha256:2755b2ec0f9b63d96dd383a25053abe2c965942e97d2e0210ba12bca06a4a892"
      },
      "version": "2.11.4-fips"
    },
    {
      "category": "Databases & Caching",
      "description": "Apache Cassandra 5.0 distributed NoSQL database assembled from Wolfi packages.",
      "digest": "sha256:d7f43857a9876f9944838c46fe8d7d97e4b3b5543719fa35f01c16499950ebf7",
      "inputDigest": "sha256:aeb02d0283bf1b0a350dc1c39f8ff0fe1805ee72e8f3bb81af5374b671ebfc7e",
      "name": "cassandra",
      "reference": "ghcr.io/tektum/cassandra@sha256:d7f43857a9876f9944838c46fe8d7d97e4b3b5543719fa35f01c16499950ebf7",
      "registry": "ghcr.io/tektum/cassandra",
      "runId": "32355265584",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/32355265584",
      "scan": {
        "all": {
          "critical": 4,
          "high": 18,
          "medium": 24,
          "negligible": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-cassandra-5.0",
      "sourceCommit": "cf504d14104995abdba2b9cb61c2b6f4dd6f8482",
      "tags": [
        "5.0",
        "5.0-20260820",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-20T10:26:39Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/cassandra@sha256:d7f43857a9876f9944838c46fe8d7d97e4b3b5543719fa35f01c16499950ebf7 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cassandra@sha256:d7f43857a9876f9944838c46fe8d7d97e4b3b5543719fa35f01c16499950ebf7",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cassandra@sha256:d7f43857a9876f9944838c46fe8d7d97e4b3b5543719fa35f01c16499950ebf7"
      },
      "version": "5.0"
    },
    {
      "description": "Kubernetes controller for automated certificate issuance and renewal.",
      "digest": "sha256:166849c3bf2875a26c81d3b14283ad1bb46075a7a31989795c0653fa8850276a",
      "inputDigest": "sha256:d2cdd6e548ff99c381faed3ec65354a92787d8b551a5cb9adba11097bb279160",
      "name": "cert-manager-controller",
      "reference": "ghcr.io/tektum/cert-manager-controller@sha256:166849c3bf2875a26c81d3b14283ad1bb46075a7a31989795c0653fa8850276a",
      "registry": "ghcr.io/tektum/cert-manager-controller",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-cert-manager-controller-1.19",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.19",
        "1.19-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:09:29Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/cert-manager-controller@sha256:166849c3bf2875a26c81d3b14283ad1bb46075a7a31989795c0653fa8850276a --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cert-manager-controller@sha256:166849c3bf2875a26c81d3b14283ad1bb46075a7a31989795c0653fa8850276a",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cert-manager-controller@sha256:166849c3bf2875a26c81d3b14283ad1bb46075a7a31989795c0653fa8850276a"
      },
      "version": "1.19"
    },
    {
      "category": "Databases & Caching",
      "description": "ClickHouse 26.1 column-oriented database assembled from Wolfi packages.",
      "digest": "sha256:842e6d7115a74f708fc6119525dcd8c211d8bd78b10622521f5137d2ee071d2f",
      "inputDigest": "sha256:2500af55453582d5c645da7c48d2559e3723a21b1ddd3ae66d63693ffb757303",
      "name": "clickhouse",
      "reference": "ghcr.io/tektum/clickhouse@sha256:842e6d7115a74f708fc6119525dcd8c211d8bd78b10622521f5137d2ee071d2f",
      "registry": "ghcr.io/tektum/clickhouse",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-clickhouse-26.1",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "26.1",
        "26.1-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:11:32Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/clickhouse@sha256:842e6d7115a74f708fc6119525dcd8c211d8bd78b10622521f5137d2ee071d2f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/clickhouse@sha256:842e6d7115a74f708fc6119525dcd8c211d8bd78b10622521f5137d2ee071d2f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/clickhouse@sha256:842e6d7115a74f708fc6119525dcd8c211d8bd78b10622521f5137d2ee071d2f"
      },
      "version": "26.1"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes Cluster Autoscaler 1.35 assembled from Wolfi packages.",
      "digest": "sha256:fff18aafa078e061093b1bf34e5ed057c5922e2dd723e264ba1182a183f6045b",
      "inputDigest": "sha256:b13b6ef1e3593e3975d13ac55bcd25d056106afcf25ed5a29931638092f6b86c",
      "name": "cluster-autoscaler",
      "reference": "ghcr.io/tektum/cluster-autoscaler@sha256:fff18aafa078e061093b1bf34e5ed057c5922e2dd723e264ba1182a183f6045b",
      "registry": "ghcr.io/tektum/cluster-autoscaler",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "low": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-cluster-autoscaler-1.35",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.35",
        "1.35-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:09:29Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/cluster-autoscaler@sha256:fff18aafa078e061093b1bf34e5ed057c5922e2dd723e264ba1182a183f6045b --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cluster-autoscaler@sha256:fff18aafa078e061093b1bf34e5ed057c5922e2dd723e264ba1182a183f6045b",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cluster-autoscaler@sha256:fff18aafa078e061093b1bf34e5ed057c5922e2dd723e264ba1182a183f6045b"
      },
      "version": "1.35"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "ConfigMap and Secret volume watcher with webhook-triggered reloads.",
      "digest": "sha256:df62e047ee10c0289c1adb09dcf5af694e53e60550f836cfe744613644ca60df",
      "inputDigest": "sha256:898e0369f53d39e119f7d993a0a81556c8fe5fdf594603ec71820f53eb944e65",
      "name": "configmap-reload",
      "reference": "ghcr.io/tektum/configmap-reload@sha256:df62e047ee10c0289c1adb09dcf5af694e53e60550f836cfe744613644ca60df",
      "registry": "ghcr.io/tektum/configmap-reload",
      "runId": "31802451792",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31802451792",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-configmap-reload-latest",
      "sourceCommit": "d7077c0f05e06b7ab3e8651056ea5cf2824357a3",
      "tags": [
        "latest",
        "latest-20260814"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-14T12:59:51Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/configmap-reload@sha256:df62e047ee10c0289c1adb09dcf5af694e53e60550f836cfe744613644ca60df --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/configmap-reload@sha256:df62e047ee10c0289c1adb09dcf5af694e53e60550f836cfe744613644ca60df",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/configmap-reload@sha256:df62e047ee10c0289c1adb09dcf5af694e53e60550f836cfe744613644ca60df"
      },
      "version": "latest"
    },
    {
      "description": "Contour 1.33 Kubernetes ingress controller built from a pinned upstream source commit.",
      "digest": "sha256:2e901fc9db2b8a9e410d293b35e3627f74c8c650800f5409cb9a2afac6cc9435",
      "inputDigest": "sha256:45ae70299abffc87aa9d29fe8b079d52324fada03b69f51e6565c73dbd44d2c7",
      "name": "contour",
      "reference": "ghcr.io/tektum/contour@sha256:2e901fc9db2b8a9e410d293b35e3627f74c8c650800f5409cb9a2afac6cc9435",
      "registry": "ghcr.io/tektum/contour",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-contour-1.33",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.33",
        "1.33-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:26:27Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/contour@sha256:2e901fc9db2b8a9e410d293b35e3627f74c8c650800f5409cb9a2afac6cc9435 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/contour@sha256:2e901fc9db2b8a9e410d293b35e3627f74c8c650800f5409cb9a2afac6cc9435",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/contour@sha256:2e901fc9db2b8a9e410d293b35e3627f74c8c650800f5409cb9a2afac6cc9435"
      },
      "version": "1.33"
    },
    {
      "category": "Service Mesh & Networking",
      "description": "Extensible DNS server with a plugin-based configuration model.",
      "digest": "sha256:8248903490125d0907df53b3b7bfb6fd3a0b905e28783f300ba6759b39fde9b5",
      "inputDigest": "sha256:831af077c9a99d7f4dbdf2468238f3adfdaa5dbff80685a235865ee89e9d2863",
      "name": "coredns",
      "reference": "ghcr.io/tektum/coredns@sha256:8248903490125d0907df53b3b7bfb6fd3a0b905e28783f300ba6759b39fde9b5",
      "registry": "ghcr.io/tektum/coredns",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-coredns-1.14",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.14",
        "1.14-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:05:26Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/coredns@sha256:8248903490125d0907df53b3b7bfb6fd3a0b905e28783f300ba6759b39fde9b5 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/coredns@sha256:8248903490125d0907df53b3b7bfb6fd3a0b905e28783f300ba6759b39fde9b5",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/coredns@sha256:8248903490125d0907df53b3b7bfb6fd3a0b905e28783f300ba6759b39fde9b5"
      },
      "version": "1.14"
    },
    {
      "description": "Minimal Sigstore Cosign image assembled from Wolfi packages.",
      "digest": "sha256:509d668a2417b774d9f074090cb5479f7e2e4a3d0c46a6b75ddf1cd73c50c238",
      "name": "cosign",
      "reference": "ghcr.io/tektum/cosign@sha256:509d668a2417b774d9f074090cb5479f7e2e4a3d0c46a6b75ddf1cd73c50c238",
      "registry": "ghcr.io/tektum/cosign",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-cosign-2",
      "tags": [
        "2",
        "2-20260807",
        "latest"
      ],
      "track": "wolfi",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/cosign@sha256:509d668a2417b774d9f074090cb5479f7e2e4a3d0c46a6b75ddf1cd73c50c238 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cosign@sha256:509d668a2417b774d9f074090cb5479f7e2e4a3d0c46a6b75ddf1cd73c50c238",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cosign@sha256:509d668a2417b774d9f074090cb5479f7e2e4a3d0c46a6b75ddf1cd73c50c238"
      },
      "version": "2"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Crossplane 2.3 cloud native control plane built from pinned source.",
      "digest": "sha256:cb8c2c9901edb5baddbb0380b4aa769ddef90546cdd3d8a01f7eee447153f196",
      "inputDigest": "sha256:707cc51656fa7047bdcda2588dc54ec28c5aac6dddb18c9c8cce3093ab1fd163",
      "name": "crossplane",
      "reference": "ghcr.io/tektum/crossplane@sha256:cb8c2c9901edb5baddbb0380b4aa769ddef90546cdd3d8a01f7eee447153f196",
      "registry": "ghcr.io/tektum/crossplane",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-crossplane-2.3.4",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "2",
        "2.3.4",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:06:16Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/crossplane@sha256:cb8c2c9901edb5baddbb0380b4aa769ddef90546cdd3d8a01f7eee447153f196 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/crossplane@sha256:cb8c2c9901edb5baddbb0380b4aa769ddef90546cdd3d8a01f7eee447153f196",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/crossplane@sha256:cb8c2c9901edb5baddbb0380b4aa769ddef90546cdd3d8a01f7eee447153f196"
      },
      "version": "2.3.4"
    },
    {
      "category": "Base & Utilities",
      "description": "curl HTTP client.",
      "digest": "sha256:a74b01dadf66353ff4534c157deb4b4c2529dd4db6663bc1a4ea12676da4a73f",
      "inputDigest": "sha256:c39ac5b06de01c0689ce978da1adb9c7168f38c968ecfea4bf07717250451a25",
      "name": "curl",
      "reference": "ghcr.io/tektum/curl@sha256:a74b01dadf66353ff4534c157deb4b4c2529dd4db6663bc1a4ea12676da4a73f",
      "registry": "ghcr.io/tektum/curl",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-curl-8",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "8",
        "8-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:04:38Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/curl@sha256:a74b01dadf66353ff4534c157deb4b4c2529dd4db6663bc1a4ea12676da4a73f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/curl@sha256:a74b01dadf66353ff4534c157deb4b4c2529dd4db6663bc1a4ea12676da4a73f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/curl@sha256:a74b01dadf66353ff4534c157deb4b4c2529dd4db6663bc1a4ea12676da4a73f"
      },
      "version": "8"
    },
    {
      "category": "Base & Utilities",
      "description": "Debian 12 slim patched with Copacetic from fixable Trivy findings.",
      "digest": "sha256:b639dc1608dd1294273f06fe899208301cc0b967fa02f17bfc2582d68a56348a",
      "inputDigest": "sha256:506ffb9fe9c7a70389e27bdbe9fdb29efc33470ef3cd51e5c27f81e66bb85b2e",
      "name": "debian-12-slim",
      "reference": "ghcr.io/tektum/debian-12-slim@sha256:b639dc1608dd1294273f06fe899208301cc0b967fa02f17bfc2582d68a56348a",
      "registry": "ghcr.io/tektum/debian-12-slim",
      "runId": "31725349783",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31725349783",
      "scan": {
        "delta": {
          "critical": 0,
          "high": 0,
          "low": 0,
          "medium": 0,
          "negligible": 0,
          "unknown": 0
        },
        "final": {
          "critical": 14,
          "high": 34,
          "low": 16,
          "medium": 112,
          "negligible": 116,
          "unknown": 32
        },
        "fixable": 0,
        "upstream": {
          "critical": 14,
          "high": 34,
          "low": 16,
          "medium": 112,
          "negligible": 116,
          "unknown": 32
        }
      },
      "scanArtifact": "scan-debian-12-slim-12",
      "sourceCommit": "d8488679495d5dbd82f901541cf31a624eb1aecf",
      "tags": [
        "12",
        "12-20260813",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-08-13T17:25:06Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/debian-12-slim@sha256:b639dc1608dd1294273f06fe899208301cc0b967fa02f17bfc2582d68a56348a --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/debian-12-slim@sha256:b639dc1608dd1294273f06fe899208301cc0b967fa02f17bfc2582d68a56348a",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/debian-12-slim@sha256:b639dc1608dd1294273f06fe899208301cc0b967fa02f17bfc2582d68a56348a"
      },
      "version": "12"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Deno JavaScript and TypeScript runtime assembled from Wolfi packages.",
      "digest": "sha256:ce1d092227f596ced678511d1534cb2d9ce62172afdba805ad6da30ab564b1eb",
      "inputDigest": "sha256:5f6fecbba8b34b5a1934b0847e2872e535cebd934c347a522b7738098a277e09",
      "name": "deno",
      "reference": "ghcr.io/tektum/deno@sha256:ce1d092227f596ced678511d1534cb2d9ce62172afdba805ad6da30ab564b1eb",
      "registry": "ghcr.io/tektum/deno",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-deno-2",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "2",
        "2-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T22:55:44Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/deno@sha256:ce1d092227f596ced678511d1534cb2d9ce62172afdba805ad6da30ab564b1eb --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/deno@sha256:ce1d092227f596ced678511d1534cb2d9ce62172afdba805ad6da30ab564b1eb",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/deno@sha256:ce1d092227f596ced678511d1534cb2d9ce62172afdba805ad6da30ab564b1eb"
      },
      "version": "2"
    },
    {
      "category": "Logging",
      "description": "Elastic Cloud on Kubernetes 3.5.0 operator.",
      "digest": "sha256:d6307dff5cc64673de19c52cf4d006f4b19f0be7f778803f70605bdbec337457",
      "inputDigest": "sha256:92a7c87560d5536749dab24fbee8f5a4d524031a061c1ef7e109a9e6938e347e",
      "name": "eck-operator",
      "reference": "ghcr.io/tektum/eck-operator@sha256:d6307dff5cc64673de19c52cf4d006f4b19f0be7f778803f70605bdbec337457",
      "registry": "ghcr.io/tektum/eck-operator",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "delta": {
          "high": -2,
          "medium": -2
        },
        "final": {},
        "fixable": 0,
        "upstream": {
          "high": 2,
          "medium": 2
        }
      },
      "scanArtifact": "scan-eck-operator-3.5.0",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "3.5.0",
        "3.5.0-20260813",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-08-13T20:06:41Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/eck-operator@sha256:d6307dff5cc64673de19c52cf4d006f4b19f0be7f778803f70605bdbec337457 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/eck-operator@sha256:d6307dff5cc64673de19c52cf4d006f4b19f0be7f778803f70605bdbec337457",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/eck-operator@sha256:d6307dff5cc64673de19c52cf4d006f4b19f0be7f778803f70605bdbec337457"
      },
      "version": "3.5.0"
    },
    {
      "description": "EMQX patched from the official image.",
      "digest": "sha256:629304334f6de706b122d19f50ea5134a6e3b17ee5e990b2c2d45a5697820028",
      "inputDigest": "sha256:cbeb0ac808c00b4c2d7558f87d1a2b898eb266b89ec9a84f36a4716fa470fe25",
      "name": "emqx",
      "reference": "ghcr.io/tektum/emqx@sha256:629304334f6de706b122d19f50ea5134a6e3b17ee5e990b2c2d45a5697820028",
      "registry": "ghcr.io/tektum/emqx",
      "runId": "32238973072",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/32238973072",
      "scan": {
        "delta": {
          "critical": 10,
          "high": -25,
          "low": -12,
          "medium": -53,
          "negligible": 14,
          "unknown": -72
        },
        "final": {
          "critical": 38,
          "high": 78,
          "low": 12,
          "medium": 86,
          "negligible": 152
        },
        "fixable": 0,
        "upstream": {
          "critical": 28,
          "high": 103,
          "low": 24,
          "medium": 139,
          "negligible": 138,
          "unknown": 72
        }
      },
      "scanArtifact": "scan-emqx-5.10.4",
      "sourceCommit": "49cf773c54fcb9e8928fd3e9ab1df932139bb46e",
      "tags": [
        "5",
        "5.10.4",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-08-19T09:49:40Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/emqx@sha256:629304334f6de706b122d19f50ea5134a6e3b17ee5e990b2c2d45a5697820028 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/emqx@sha256:629304334f6de706b122d19f50ea5134a6e3b17ee5e990b2c2d45a5697820028",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/emqx@sha256:629304334f6de706b122d19f50ea5134a6e3b17ee5e990b2c2d45a5697820028"
      },
      "version": "5.10.4"
    },
    {
      "category": "Service Mesh & Networking",
      "description": "Cloud-native high-performance edge/middle/service proxy built from Wolfi packages.",
      "digest": "sha256:a8275955965be108d109bc8816e44a1af72ed01a5e6b761f3f0624ebbc59c2cb",
      "inputDigest": "sha256:62360941a7d2248006f76b7bf8afce7e3f8427d7298e0a3a2caa1cf4afd7d552",
      "name": "envoy",
      "reference": "ghcr.io/tektum/envoy@sha256:a8275955965be108d109bc8816e44a1af72ed01a5e6b761f3f0624ebbc59c2cb",
      "registry": "ghcr.io/tektum/envoy",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-envoy-1.37",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.37",
        "1.37-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:26Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/envoy@sha256:a8275955965be108d109bc8816e44a1af72ed01a5e6b761f3f0624ebbc59c2cb --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/envoy@sha256:a8275955965be108d109bc8816e44a1af72ed01a5e6b761f3f0624ebbc59c2cb",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/envoy@sha256:a8275955965be108d109bc8816e44a1af72ed01a5e6b761f3f0624ebbc59c2cb"
      },
      "version": "1.37"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Erlang/OTP 28 runtime assembled from Wolfi packages.",
      "digest": "sha256:d363822f1158ea39bc2dbfbce71e8334cdfb056ade6809b022d39b6457ca251b",
      "inputDigest": "sha256:bedfe33da3f6e2b8bfbc8717081fe5bc0a32c102d7fc89b047757f4c58137eaa",
      "name": "erlang",
      "reference": "ghcr.io/tektum/erlang@sha256:d363822f1158ea39bc2dbfbce71e8334cdfb056ade6809b022d39b6457ca251b",
      "registry": "ghcr.io/tektum/erlang",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-erlang-28",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "28",
        "28-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:04:51Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/erlang@sha256:d363822f1158ea39bc2dbfbce71e8334cdfb056ade6809b022d39b6457ca251b --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/erlang@sha256:d363822f1158ea39bc2dbfbce71e8334cdfb056ade6809b022d39b6457ca251b",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/erlang@sha256:d363822f1158ea39bc2dbfbce71e8334cdfb056ade6809b022d39b6457ca251b"
      },
      "version": "28"
    },
    {
      "category": "Databases & Caching",
      "description": "Distributed reliable key-value store for shared configuration and service discovery.",
      "digest": "sha256:f06f2586b351715fa173c360ee1d6309e40a5b810185cce74d7588ac0eab2dcf",
      "inputDigest": "sha256:504b3f27156527d8e09663c5a468a47191516189a79c4c1fbce950995f49f15b",
      "name": "etcd",
      "reference": "ghcr.io/tektum/etcd@sha256:f06f2586b351715fa173c360ee1d6309e40a5b810185cce74d7588ac0eab2dcf",
      "registry": "ghcr.io/tektum/etcd",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-etcd-3.6",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "3.6",
        "3.6-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:05:26Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/etcd@sha256:f06f2586b351715fa173c360ee1d6309e40a5b810185cce74d7588ac0eab2dcf --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/etcd@sha256:f06f2586b351715fa173c360ee1d6309e40a5b810185cce74d7588ac0eab2dcf",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/etcd@sha256:f06f2586b351715fa173c360ee1d6309e40a5b810185cce74d7588ac0eab2dcf"
      },
      "version": "3.6"
    },
    {
      "description": "Kubernetes DNS record controller 0.19.0 built from a pinned upstream source commit.",
      "digest": "sha256:803e6b58c30b2b58170d433f35877f617255f58c08d912adb37fd245364806e7",
      "inputDigest": "sha256:e98623dd11e5a9116a426b82728e82bc8635dc32699321e4c15f3f6df15cbc93",
      "name": "external-dns",
      "reference": "ghcr.io/tektum/external-dns@sha256:803e6b58c30b2b58170d433f35877f617255f58c08d912adb37fd245364806e7",
      "registry": "ghcr.io/tektum/external-dns",
      "runId": "31808296923",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31808296923",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-external-dns-0.19.0",
      "sourceCommit": "2187b443384d4df7fd5c4e84b45fda8c94e58e09",
      "tags": [
        "0.19.0",
        "0.19.0-20260814",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-14T14:20:08Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/external-dns@sha256:803e6b58c30b2b58170d433f35877f617255f58c08d912adb37fd245364806e7 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/external-dns@sha256:803e6b58c30b2b58170d433f35877f617255f58c08d912adb37fd245364806e7",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/external-dns@sha256:803e6b58c30b2b58170d433f35877f617255f58c08d912adb37fd245364806e7"
      },
      "version": "0.19.0"
    },
    {
      "category": "Security & Identity",
      "description": "External Secrets Operator built from pinned upstream source.",
      "digest": "sha256:cce3221bea4f6beffeb6a0b0c3c162daf37b199c82c6b8dadb6f5c7e6217e607",
      "inputDigest": "sha256:58aff552b0ede00189c0e1f6b5dee757c9b3715f3488885b7b5828b1b7399e95",
      "name": "external-secrets",
      "reference": "ghcr.io/tektum/external-secrets@sha256:cce3221bea4f6beffeb6a0b0c3c162daf37b199c82c6b8dadb6f5c7e6217e607",
      "registry": "ghcr.io/tektum/external-secrets",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-external-secrets-2.6.0",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "2.6.0",
        "2.6.0-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:07:27Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/external-secrets@sha256:cce3221bea4f6beffeb6a0b0c3c162daf37b199c82c6b8dadb6f5c7e6217e607 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/external-secrets@sha256:cce3221bea4f6beffeb6a0b0c3c162daf37b199c82c6b8dadb6f5c7e6217e607",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/external-secrets@sha256:cce3221bea4f6beffeb6a0b0c3c162daf37b199c82c6b8dadb6f5c7e6217e607"
      },
      "version": "2.6.0"
    },
    {
      "category": "Base & Utilities",
      "description": "Minimal fd image assembled from Wolfi packages.",
      "digest": "sha256:7782c2d3ad88d57b0e9bfce426744184f5e01d05970791eabf9dc2f76e9eb02f",
      "inputDigest": "sha256:a577d60d276920902fadf5095f55a03a8d51cde8a7718d0a181241342eeec25b",
      "name": "fd",
      "reference": "ghcr.io/tektum/fd@sha256:7782c2d3ad88d57b0e9bfce426744184f5e01d05970791eabf9dc2f76e9eb02f",
      "registry": "ghcr.io/tektum/fd",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-fd-10",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "10",
        "10-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:05Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/fd@sha256:7782c2d3ad88d57b0e9bfce426744184f5e01d05970791eabf9dc2f76e9eb02f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/fd@sha256:7782c2d3ad88d57b0e9bfce426744184f5e01d05970791eabf9dc2f76e9eb02f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/fd@sha256:7782c2d3ad88d57b0e9bfce426744184f5e01d05970791eabf9dc2f76e9eb02f"
      },
      "version": "10"
    },
    {
      "description": "Fluent Bit 4.2 log processor and forwarder built from source.",
      "digest": "sha256:a079c4083717ba3bdfd915d353338afe2aebfdb8aa693abdd6c64721b8c14456",
      "inputDigest": "sha256:d83f93c32690178565c703fc5679a214d10670a8172a88f25a55655df31b7536",
      "name": "fluent-bit",
      "reference": "ghcr.io/tektum/fluent-bit@sha256:a079c4083717ba3bdfd915d353338afe2aebfdb8aa693abdd6c64721b8c14456",
      "registry": "ghcr.io/tektum/fluent-bit",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-fluent-bit-4.2",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "4.2",
        "4.2-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:33:03Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/fluent-bit@sha256:a079c4083717ba3bdfd915d353338afe2aebfdb8aa693abdd6c64721b8c14456 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/fluent-bit@sha256:a079c4083717ba3bdfd915d353338afe2aebfdb8aa693abdd6c64721b8c14456",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/fluent-bit@sha256:a079c4083717ba3bdfd915d353338afe2aebfdb8aa693abdd6c64721b8c14456"
      },
      "version": "4.2"
    },
    {
      "description": "Flux Helm Controller 1.3 built from a pinned upstream source commit.",
      "digest": "sha256:5275ca7b387bd0e1772edd912f44a216824aa65308dd62cd9d01adb1e4f2dc0e",
      "inputDigest": "sha256:14e06ae63163183e895dea996ea562000b4c2a5ec97d2df90558d5d91573af02",
      "name": "flux-helm-controller",
      "reference": "ghcr.io/tektum/flux-helm-controller@sha256:5275ca7b387bd0e1772edd912f44a216824aa65308dd62cd9d01adb1e4f2dc0e",
      "registry": "ghcr.io/tektum/flux-helm-controller",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "critical": 4,
          "medium": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-flux-helm-controller-1.3",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.3",
        "1.3-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:05:42Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/flux-helm-controller@sha256:5275ca7b387bd0e1772edd912f44a216824aa65308dd62cd9d01adb1e4f2dc0e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/flux-helm-controller@sha256:5275ca7b387bd0e1772edd912f44a216824aa65308dd62cd9d01adb1e4f2dc0e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/flux-helm-controller@sha256:5275ca7b387bd0e1772edd912f44a216824aa65308dd62cd9d01adb1e4f2dc0e"
      },
      "version": "1.3"
    },
    {
      "description": "Policy controller for Kubernetes admission and audit.",
      "digest": "sha256:8ce36adc528f70700cb79992807ac5a11b320c330ac666a730f7f876aeab6655",
      "inputDigest": "sha256:0b1044212714ce54564282adf76eba21736dd19ab2f5a2310a3a1cccb68374d0",
      "name": "gatekeeper",
      "reference": "ghcr.io/tektum/gatekeeper@sha256:8ce36adc528f70700cb79992807ac5a11b320c330ac666a730f7f876aeab6655",
      "registry": "ghcr.io/tektum/gatekeeper",
      "runId": "31809855392",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31809855392",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-gatekeeper-3.19",
      "sourceCommit": "dc135271ec851146bf95ba4d017ada7de82e4d76",
      "tags": [
        "3.19",
        "3.19-20260814",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-14T14:46:21Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/gatekeeper@sha256:8ce36adc528f70700cb79992807ac5a11b320c330ac666a730f7f876aeab6655 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gatekeeper@sha256:8ce36adc528f70700cb79992807ac5a11b320c330ac666a730f7f876aeab6655",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gatekeeper@sha256:8ce36adc528f70700cb79992807ac5a11b320c330ac666a730f7f876aeab6655"
      },
      "version": "3.19"
    },
    {
      "category": "Languages & Build Tools",
      "description": "GCC 15 compiler toolchain assembled from Wolfi packages.",
      "digest": "sha256:92501cbd35240f3766ebcccd2c38492f9693762594b1bd157713c9440ea46493",
      "inputDigest": "sha256:274ce10c2d7b235a6c6612ec572e651680e85e61c61fe390b5bb0b9e707cf385",
      "name": "gcc",
      "reference": "ghcr.io/tektum/gcc@sha256:92501cbd35240f3766ebcccd2c38492f9693762594b1bd157713c9440ea46493",
      "registry": "ghcr.io/tektum/gcc",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-gcc-15",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "15",
        "15-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:02:05Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/gcc@sha256:92501cbd35240f3766ebcccd2c38492f9693762594b1bd157713c9440ea46493 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gcc@sha256:92501cbd35240f3766ebcccd2c38492f9693762594b1bd157713c9440ea46493",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gcc@sha256:92501cbd35240f3766ebcccd2c38492f9693762594b1bd157713c9440ea46493"
      },
      "version": "15"
    },
    {
      "description": "GitLab Runner with the shell executor, built from pinned source on Wolfi.",
      "digest": "sha256:3bfac2e67b08c24ee3c27e7f4ac96d1c403fa45319e96405eb77d428c76d48bc",
      "inputDigest": "sha256:f2b7645b01c6c0d0b30a25a400a19761f91473cdd08ec6734766bfb1e062b07f",
      "name": "gitlab-runner",
      "reference": "ghcr.io/tektum/gitlab-runner@sha256:3bfac2e67b08c24ee3c27e7f4ac96d1c403fa45319e96405eb77d428c76d48bc",
      "registry": "ghcr.io/tektum/gitlab-runner",
      "runId": "31808811609",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31808811609",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-gitlab-runner-18.3",
      "sourceCommit": "a955eff4c56a17c0aa937badd42ca85e9b1869dc",
      "tags": [
        "18.3",
        "18.3-20260814",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-14T14:27:03Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/gitlab-runner@sha256:3bfac2e67b08c24ee3c27e7f4ac96d1c403fa45319e96405eb77d428c76d48bc --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gitlab-runner@sha256:3bfac2e67b08c24ee3c27e7f4ac96d1c403fa45319e96405eb77d428c76d48bc",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gitlab-runner@sha256:3bfac2e67b08c24ee3c27e7f4ac96d1c403fa45319e96405eb77d428c76d48bc"
      },
      "version": "18.3"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Go 1.25 toolchain assembled from Wolfi packages with plain and FIPS flavors.",
      "digest": "sha256:55283dd418d98c8e2304dcb42bc5ce2889f151ea78cc43c6503d306d51800aed",
      "inputDigest": "sha256:cb91caa814435ffd0afa1a74be6596ba640c97e604ffe7a0be8bd15ff3466b4d",
      "name": "go",
      "reference": "ghcr.io/tektum/go@sha256:55283dd418d98c8e2304dcb42bc5ce2889f151ea78cc43c6503d306d51800aed",
      "registry": "ghcr.io/tektum/go",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-go-1.25",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.25",
        "1.25-20260813"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:10:59Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/go@sha256:55283dd418d98c8e2304dcb42bc5ce2889f151ea78cc43c6503d306d51800aed --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:55283dd418d98c8e2304dcb42bc5ce2889f151ea78cc43c6503d306d51800aed",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:55283dd418d98c8e2304dcb42bc5ce2889f151ea78cc43c6503d306d51800aed"
      },
      "version": "1.25"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Go 1.25 toolchain assembled from Wolfi packages with plain and FIPS flavors.",
      "digest": "sha256:12e7a1ee77bc95dcd18199077d56ad2d0f2c1bd855c0869bc2dd0eefc0214e14",
      "inputDigest": "sha256:997750e926495d8e5f20f9d9a7d8d3846b153127af5a3f0fb9ef5a347a99ac0e",
      "name": "go",
      "reference": "ghcr.io/tektum/go@sha256:12e7a1ee77bc95dcd18199077d56ad2d0f2c1bd855c0869bc2dd0eefc0214e14",
      "registry": "ghcr.io/tektum/go",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 6
        },
        "fixable": 0
      },
      "scanArtifact": "scan-go-1.25-fips",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.25-fips",
        "1.25-20260813-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:02:59Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/go@sha256:12e7a1ee77bc95dcd18199077d56ad2d0f2c1bd855c0869bc2dd0eefc0214e14 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:12e7a1ee77bc95dcd18199077d56ad2d0f2c1bd855c0869bc2dd0eefc0214e14",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:12e7a1ee77bc95dcd18199077d56ad2d0f2c1bd855c0869bc2dd0eefc0214e14"
      },
      "version": "1.25-fips"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Go 1.26 toolchain assembled from Wolfi packages with plain and FIPS flavors.",
      "digest": "sha256:27c53a0e22c9f867b0f15d351bdc664ba2cc73a22ee3d511d76446b0bdf97ae1",
      "inputDigest": "sha256:ad1719ccc9ada84c0f97dd488faff1466d1b4e6243d9b19c298a92fdf8827147",
      "name": "go",
      "reference": "ghcr.io/tektum/go@sha256:27c53a0e22c9f867b0f15d351bdc664ba2cc73a22ee3d511d76446b0bdf97ae1",
      "registry": "ghcr.io/tektum/go",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-go-1.26",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.26",
        "1.26-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:10:37Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/go@sha256:27c53a0e22c9f867b0f15d351bdc664ba2cc73a22ee3d511d76446b0bdf97ae1 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:27c53a0e22c9f867b0f15d351bdc664ba2cc73a22ee3d511d76446b0bdf97ae1",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:27c53a0e22c9f867b0f15d351bdc664ba2cc73a22ee3d511d76446b0bdf97ae1"
      },
      "version": "1.26"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Go 1.26 toolchain assembled from Wolfi packages with plain and FIPS flavors.",
      "digest": "sha256:1a3db999cdc9645dabf28f5c6240a4b45531fb2c089139ce224626d4a0134214",
      "inputDigest": "sha256:a8d3e311eb85cc537b2cca8c027e3b858146c55698d6e69952d8058f057de239",
      "name": "go",
      "reference": "ghcr.io/tektum/go@sha256:1a3db999cdc9645dabf28f5c6240a4b45531fb2c089139ce224626d4a0134214",
      "registry": "ghcr.io/tektum/go",
      "runId": "31725349783",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31725349783",
      "scan": {
        "all": {
          "high": 6
        },
        "fixable": 0
      },
      "scanArtifact": "scan-go-1.26-fips",
      "sourceCommit": "d8488679495d5dbd82f901541cf31a624eb1aecf",
      "tags": [
        "1.26-fips",
        "1.26-20260813-fips",
        "latest-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T17:25:48Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/go@sha256:1a3db999cdc9645dabf28f5c6240a4b45531fb2c089139ce224626d4a0134214 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:1a3db999cdc9645dabf28f5c6240a4b45531fb2c089139ce224626d4a0134214",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:1a3db999cdc9645dabf28f5c6240a4b45531fb2c089139ce224626d4a0134214"
      },
      "version": "1.26-fips"
    },
    {
      "description": "Gradle 9 build system assembled from Wolfi packages.",
      "digest": "sha256:4b383731e3c76b66d2ab76424566f744beef70eea0b7f16c651b1d7f74c7b5c3",
      "inputDigest": "sha256:e53959ae4792b2a77dbc75362cbf03bfa68b20b4f25bdebcb9e2f6723f92d993",
      "name": "gradle",
      "reference": "ghcr.io/tektum/gradle@sha256:4b383731e3c76b66d2ab76424566f744beef70eea0b7f16c651b1d7f74c7b5c3",
      "registry": "ghcr.io/tektum/gradle",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-gradle-9.7.0",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "9.7.0",
        "9.7.0-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:04:51Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/gradle@sha256:4b383731e3c76b66d2ab76424566f744beef70eea0b7f16c651b1d7f74c7b5c3 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gradle@sha256:4b383731e3c76b66d2ab76424566f744beef70eea0b7f16c651b1d7f74c7b5c3",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gradle@sha256:4b383731e3c76b66d2ab76424566f744beef70eea0b7f16c651b1d7f74c7b5c3"
      },
      "version": "9.7.0"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "High performance TCP/HTTP load balancer built from pinned upstream source.",
      "digest": "sha256:37307a6990a7a4fe836dc2e09a6f9076378dc0fd0f5db762f63c3c05e4278d36",
      "inputDigest": "sha256:3dad5ecca46f4bd020b9ac525a2ee67823214fb7ad7176d1bc0fcfb032ce8fdb",
      "name": "haproxy",
      "reference": "ghcr.io/tektum/haproxy@sha256:37307a6990a7a4fe836dc2e09a6f9076378dc0fd0f5db762f63c3c05e4278d36",
      "registry": "ghcr.io/tektum/haproxy",
      "runId": "31802451792",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31802451792",
      "scan": {
        "all": {
          "critical": 2,
          "high": 6
        },
        "fixable": 0
      },
      "scanArtifact": "scan-haproxy-3.3",
      "sourceCommit": "d7077c0f05e06b7ab3e8651056ea5cf2824357a3",
      "tags": [
        "3.3",
        "3.3-20260814",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-14T13:01:12Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/haproxy@sha256:37307a6990a7a4fe836dc2e09a6f9076378dc0fd0f5db762f63c3c05e4278d36 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/haproxy@sha256:37307a6990a7a4fe836dc2e09a6f9076378dc0fd0f5db762f63c3c05e4278d36",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/haproxy@sha256:37307a6990a7a4fe836dc2e09a6f9076378dc0fd0f5db762f63c3c05e4278d36"
      },
      "version": "3.3"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "HAProxy Ingress Controller assembled from Wolfi packages.",
      "digest": "sha256:705f46fafd3dab9b9e0b104bbaa3709899d1af5c9c52efffa1c6fa08a1300a8b",
      "inputDigest": "sha256:0ca1c1bcd25904dda5664b3b4fbc74c3c005bf084c7e4d9d8c68fe976177c717",
      "name": "haproxy-ingress",
      "reference": "ghcr.io/tektum/haproxy-ingress@sha256:705f46fafd3dab9b9e0b104bbaa3709899d1af5c9c52efffa1c6fa08a1300a8b",
      "registry": "ghcr.io/tektum/haproxy-ingress",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "critical": 2,
          "high": 6
        },
        "fixable": 0
      },
      "scanArtifact": "scan-haproxy-ingress-0",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "0",
        "0-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:06:01Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/haproxy-ingress@sha256:705f46fafd3dab9b9e0b104bbaa3709899d1af5c9c52efffa1c6fa08a1300a8b --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/haproxy-ingress@sha256:705f46fafd3dab9b9e0b104bbaa3709899d1af5c9c52efffa1c6fa08a1300a8b",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/haproxy-ingress@sha256:705f46fafd3dab9b9e0b104bbaa3709899d1af5c9c52efffa1c6fa08a1300a8b"
      },
      "version": "0"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Minimal Helm image assembled from Wolfi packages.",
      "digest": "sha256:d165953b61d592cadfbe97d0cb124ac76e5c3a03ee95d9faa581eab5539d13ae",
      "inputDigest": "sha256:a44ad9821eebf828a69a6eb69f14f60a8422388d27f0ef32f70c505aa3d35392",
      "name": "helm",
      "reference": "ghcr.io/tektum/helm@sha256:d165953b61d592cadfbe97d0cb124ac76e5c3a03ee95d9faa581eab5539d13ae",
      "registry": "ghcr.io/tektum/helm",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "medium": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-helm-4.2.3",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "4.2.3",
        "4.2.3-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:30Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/helm@sha256:d165953b61d592cadfbe97d0cb124ac76e5c3a03ee95d9faa581eab5539d13ae --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/helm@sha256:d165953b61d592cadfbe97d0cb124ac76e5c3a03ee95d9faa581eab5539d13ae",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/helm@sha256:d165953b61d592cadfbe97d0cb124ac76e5c3a03ee95d9faa581eab5539d13ae"
      },
      "version": "4.2.3"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Minimal Apache HTTP Server image assembled from Wolfi packages.",
      "digest": "sha256:0f17d1cead959948da7a20b430b772ae5cd8d88ab46e5fd866adf9bb2314f10e",
      "inputDigest": "sha256:7108e4b7cac72999c78770a10fe3657488fe616a4140809da04c4ec510e08986",
      "name": "httpd",
      "reference": "ghcr.io/tektum/httpd@sha256:0f17d1cead959948da7a20b430b772ae5cd8d88ab46e5fd866adf9bb2314f10e",
      "registry": "ghcr.io/tektum/httpd",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 4,
          "medium": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-httpd-2.4",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "2.4",
        "2.4-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:29Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/httpd@sha256:0f17d1cead959948da7a20b430b772ae5cd8d88ab46e5fd866adf9bb2314f10e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/httpd@sha256:0f17d1cead959948da7a20b430b772ae5cd8d88ab46e5fd866adf9bb2314f10e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/httpd@sha256:0f17d1cead959948da7a20b430b772ae5cd8d88ab46e5fd866adf9bb2314f10e"
      },
      "version": "2.4"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Minimal Apache HTTP Server image assembled from Wolfi packages.",
      "digest": "sha256:95293f4f0cad2c57e9adef5a284f83908d1b51d0a651f663da355d4dce7db4dc",
      "inputDigest": "sha256:51b4a88c3d3eda84e889d9a7cbe5490215a7a88a2c16f6dc137e2f34b53e43f5",
      "name": "httpd",
      "reference": "ghcr.io/tektum/httpd@sha256:95293f4f0cad2c57e9adef5a284f83908d1b51d0a651f663da355d4dce7db4dc",
      "registry": "ghcr.io/tektum/httpd",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 6,
          "medium": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-httpd-2.4-fips",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "2.4-fips",
        "2.4-20260813-fips",
        "latest-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:05:23Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/httpd@sha256:95293f4f0cad2c57e9adef5a284f83908d1b51d0a651f663da355d4dce7db4dc --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/httpd@sha256:95293f4f0cad2c57e9adef5a284f83908d1b51d0a651f663da355d4dce7db4dc",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/httpd@sha256:95293f4f0cad2c57e9adef5a284f83908d1b51d0a651f663da355d4dce7db4dc"
      },
      "version": "2.4-fips"
    },
    {
      "category": "Databases & Caching",
      "description": "InfluxDB 3.8 time-series database with persistent file storage.",
      "digest": "sha256:b3689e9b1ed491b4859fba1905c15711e6c49537fa385e178704f3768cf63c60",
      "inputDigest": "sha256:e6e9635960b4e809980a314585694c80cd43959769026add4df4821596efec21",
      "name": "influxdb",
      "reference": "ghcr.io/tektum/influxdb@sha256:b3689e9b1ed491b4859fba1905c15711e6c49537fa385e178704f3768cf63c60",
      "registry": "ghcr.io/tektum/influxdb",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 4,
          "medium": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-influxdb-3.8",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "3.8",
        "3.8-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:04:51Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/influxdb@sha256:b3689e9b1ed491b4859fba1905c15711e6c49537fa385e178704f3768cf63c60 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/influxdb@sha256:b3689e9b1ed491b4859fba1905c15711e6c49537fa385e178704f3768cf63c60",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/influxdb@sha256:b3689e9b1ed491b4859fba1905c15711e6c49537fa385e178704f3768cf63c60"
      },
      "version": "3.8"
    },
    {
      "category": "Base & Utilities",
      "description": "Command-line JSON processor.",
      "digest": "sha256:1f344751c8bd52ad172391fa38eb7173752ba57094fd2fa79bad9af5ef372111",
      "inputDigest": "sha256:f4af7c431cff0fb8de2a271bbadfecf45077ed9e01024ef71139fe270a905bef",
      "name": "jq",
      "reference": "ghcr.io/tektum/jq@sha256:1f344751c8bd52ad172391fa38eb7173752ba57094fd2fa79bad9af5ef372111",
      "registry": "ghcr.io/tektum/jq",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-jq-1",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1",
        "1-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:04:14Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/jq@sha256:1f344751c8bd52ad172391fa38eb7173752ba57094fd2fa79bad9af5ef372111 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/jq@sha256:1f344751c8bd52ad172391fa38eb7173752ba57094fd2fa79bad9af5ef372111",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/jq@sha256:1f344751c8bd52ad172391fa38eb7173752ba57094fd2fa79bad9af5ef372111"
      },
      "version": "1"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes node autoscaler controller for AWS built from pinned upstream source.",
      "digest": "sha256:4fd8ffd689947ff884a6379db40c8df0a197fc82322ac65bf43e752c3fb931d8",
      "inputDigest": "sha256:e7a26070418809b9dc52f04b684d062368d5f794db623c75f64ca1e317eba9b7",
      "name": "karpenter",
      "reference": "ghcr.io/tektum/karpenter@sha256:4fd8ffd689947ff884a6379db40c8df0a197fc82322ac65bf43e752c3fb931d8",
      "registry": "ghcr.io/tektum/karpenter",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-karpenter-1.11",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.11",
        "1.11-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:06:51Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/karpenter@sha256:4fd8ffd689947ff884a6379db40c8df0a197fc82322ac65bf43e752c3fb931d8 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/karpenter@sha256:4fd8ffd689947ff884a6379db40c8df0a197fc82322ac65bf43e752c3fb931d8",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/karpenter@sha256:4fd8ffd689947ff884a6379db40c8df0a197fc82322ac65bf43e752c3fb931d8"
      },
      "version": "1.11"
    },
    {
      "category": "CI/CD & GitOps",
      "description": "Go container image builder assembled from Wolfi packages.",
      "digest": "sha256:6d04990e5fdcb2c0f9ef5b6090037c884dccf294d048b4a20f39a88ba6b07073",
      "inputDigest": "sha256:3f556fb0fbf6885b1437fe67e87e66544cd8a89b8073d8a8095f8ffa84f02677",
      "name": "ko",
      "reference": "ghcr.io/tektum/ko@sha256:6d04990e5fdcb2c0f9ef5b6090037c884dccf294d048b4a20f39a88ba6b07073",
      "registry": "ghcr.io/tektum/ko",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-ko-0.19.1",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "0.19.1",
        "0.19.1-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:02:08Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ko@sha256:6d04990e5fdcb2c0f9ef5b6090037c884dccf294d048b4a20f39a88ba6b07073 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ko@sha256:6d04990e5fdcb2c0f9ef5b6090037c884dccf294d048b4a20f39a88ba6b07073",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ko@sha256:6d04990e5fdcb2c0f9ef5b6090037c884dccf294d048b4a20f39a88ba6b07073"
      },
      "version": "0.19.1"
    },
    {
      "description": "Kubernetes API server 1.36 assembled from Wolfi packages.",
      "digest": "sha256:4df912d936dab32cae20a974f76ee5109d9f8f6975b2524f594bb499f9131091",
      "inputDigest": "sha256:5e0ead2c3b9508612d9ebdc9db86029c25b6f85b7e910e2b1a812bfc2812e2b3",
      "name": "kube-apiserver",
      "reference": "ghcr.io/tektum/kube-apiserver@sha256:4df912d936dab32cae20a974f76ee5109d9f8f6975b2524f594bb499f9131091",
      "registry": "ghcr.io/tektum/kube-apiserver",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-kube-apiserver-1.36",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.36",
        "1.36-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:13Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kube-apiserver@sha256:4df912d936dab32cae20a974f76ee5109d9f8f6975b2524f594bb499f9131091 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-apiserver@sha256:4df912d936dab32cae20a974f76ee5109d9f8f6975b2524f594bb499f9131091",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-apiserver@sha256:4df912d936dab32cae20a974f76ee5109d9f8f6975b2524f594bb499f9131091"
      },
      "version": "1.36"
    },
    {
      "description": "Kubernetes CIS benchmark checker.",
      "digest": "sha256:ea8d9807e2317cfa5424ca0b8c47f7cddd859b370c1cac2ccca18b41ae26e2f3",
      "inputDigest": "sha256:f9f906d6d12f9e011115e41eb6d142827d8126e624f92fcfda5ca0ec69b4f101",
      "name": "kube-bench",
      "reference": "ghcr.io/tektum/kube-bench@sha256:ea8d9807e2317cfa5424ca0b8c47f7cddd859b370c1cac2ccca18b41ae26e2f3",
      "registry": "ghcr.io/tektum/kube-bench",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 6
        },
        "fixable": 0
      },
      "scanArtifact": "scan-kube-bench-0.11.2",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "0.11.2",
        "0.11.2-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:05:05Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kube-bench@sha256:ea8d9807e2317cfa5424ca0b8c47f7cddd859b370c1cac2ccca18b41ae26e2f3 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-bench@sha256:ea8d9807e2317cfa5424ca0b8c47f7cddd859b370c1cac2ccca18b41ae26e2f3",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-bench@sha256:ea8d9807e2317cfa5424ca0b8c47f7cddd859b370c1cac2ccca18b41ae26e2f3"
      },
      "version": "0.11.2"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes controller manager 1.36 assembled from Wolfi packages.",
      "digest": "sha256:8fd241080654ab9441b5a335d8698b24decf2b123f61582ce223ceda6ef355cc",
      "inputDigest": "sha256:f531f1b49a095e2104d8d7839c5459d73ed2372bb926708ffad951e3b271f47f",
      "name": "kube-controller-manager",
      "reference": "ghcr.io/tektum/kube-controller-manager@sha256:8fd241080654ab9441b5a335d8698b24decf2b123f61582ce223ceda6ef355cc",
      "registry": "ghcr.io/tektum/kube-controller-manager",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-kube-controller-manager-1.36",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.36",
        "1.36-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:39Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kube-controller-manager@sha256:8fd241080654ab9441b5a335d8698b24decf2b123f61582ce223ceda6ef355cc --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-controller-manager@sha256:8fd241080654ab9441b5a335d8698b24decf2b123f61582ce223ceda6ef355cc",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-controller-manager@sha256:8fd241080654ab9441b5a335d8698b24decf2b123f61582ce223ceda6ef355cc"
      },
      "version": "1.36"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes control plane scheduler built from the Wolfi Kubernetes 1.36 package.",
      "digest": "sha256:6a11c429ef89cb092e9aa6f0f51b3d136acaa78f59add53c440e7a9a4eb8f231",
      "inputDigest": "sha256:884bd8e750716a761338cad6365f9aeae774300bd38d2d4b09fc5c58e9856568",
      "name": "kube-scheduler",
      "reference": "ghcr.io/tektum/kube-scheduler@sha256:6a11c429ef89cb092e9aa6f0f51b3d136acaa78f59add53c440e7a9a4eb8f231",
      "registry": "ghcr.io/tektum/kube-scheduler",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-kube-scheduler-1.36",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.36",
        "1.36-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:16Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kube-scheduler@sha256:6a11c429ef89cb092e9aa6f0f51b3d136acaa78f59add53c440e7a9a4eb8f231 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-scheduler@sha256:6a11c429ef89cb092e9aa6f0f51b3d136acaa78f59add53c440e7a9a4eb8f231",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-scheduler@sha256:6a11c429ef89cb092e9aa6f0f51b3d136acaa78f59add53c440e7a9a4eb8f231"
      },
      "version": "1.36"
    },
    {
      "category": "Monitoring & Observability",
      "description": "Kubernetes cluster state metrics exporter built from pinned upstream source.",
      "digest": "sha256:067f5f621a0b8b04b8ddbe60b672d679468d3409e29b83b56c662fd004bf974f",
      "inputDigest": "sha256:e7cc96f76cbbf357a8a03804495cf7f701ed1b4e02e4e6dbe533f1c21a209f7a",
      "name": "kube-state-metrics",
      "reference": "ghcr.io/tektum/kube-state-metrics@sha256:067f5f621a0b8b04b8ddbe60b672d679468d3409e29b83b56c662fd004bf974f",
      "registry": "ghcr.io/tektum/kube-state-metrics",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-kube-state-metrics-2.19.1",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "2.19.1",
        "2.19.1-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:14:09Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kube-state-metrics@sha256:067f5f621a0b8b04b8ddbe60b672d679468d3409e29b83b56c662fd004bf974f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-state-metrics@sha256:067f5f621a0b8b04b8ddbe60b672d679468d3409e29b83b56c662fd004bf974f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-state-metrics@sha256:067f5f621a0b8b04b8ddbe60b672d679468d3409e29b83b56c662fd004bf974f"
      },
      "version": "2.19.1"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes 1.35 command-line client assembled from Wolfi packages.",
      "digest": "sha256:cc1f5c5ef70e0fa6b177f20dacb427d969bdb5f3d3e4f21f4ff6bbdd9368d798",
      "inputDigest": "sha256:585a4879919902d7479b2d005e2baa2457c806c75feb293b7e499464fd0731a1",
      "name": "kubectl",
      "reference": "ghcr.io/tektum/kubectl@sha256:cc1f5c5ef70e0fa6b177f20dacb427d969bdb5f3d3e4f21f4ff6bbdd9368d798",
      "registry": "ghcr.io/tektum/kubectl",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "low": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-kubectl-1.35",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.35",
        "1.35-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:05:45Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kubectl@sha256:cc1f5c5ef70e0fa6b177f20dacb427d969bdb5f3d3e4f21f4ff6bbdd9368d798 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubectl@sha256:cc1f5c5ef70e0fa6b177f20dacb427d969bdb5f3d3e4f21f4ff6bbdd9368d798",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubectl@sha256:cc1f5c5ef70e0fa6b177f20dacb427d969bdb5f3d3e4f21f4ff6bbdd9368d798"
      },
      "version": "1.35"
    },
    {
      "description": "Kubernetes pause container process assembled from Wolfi packages.",
      "digest": "sha256:7ca0ddbf60befc21f83421877d6e35beed959052d2730551b650b89b66ad3428",
      "inputDigest": "sha256:3c05d2a1f0e1388861b0aa718a18d1778d084f1b7db53030f9b4acca25ca612f",
      "name": "kubernetes-pause",
      "reference": "ghcr.io/tektum/kubernetes-pause@sha256:7ca0ddbf60befc21f83421877d6e35beed959052d2730551b650b89b66ad3428",
      "registry": "ghcr.io/tektum/kubernetes-pause",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-kubernetes-pause-3.10",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "3.10",
        "3.10-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:23Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kubernetes-pause@sha256:7ca0ddbf60befc21f83421877d6e35beed959052d2730551b650b89b66ad3428 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubernetes-pause@sha256:7ca0ddbf60befc21f83421877d6e35beed959052d2730551b650b89b66ad3428",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubernetes-pause@sha256:7ca0ddbf60befc21f83421877d6e35beed959052d2730551b650b89b66ad3428"
      },
      "version": "3.10"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "EmberStack Kubernetes Reflector 10.0.64 patched from the upstream image.",
      "digest": "sha256:c93e5ba0006956c8090981f789e87f7b5477110beb517e59f60ca17a31f9c98f",
      "inputDigest": "sha256:0701cd4764cfd64a95e1fae64d23d5b38565e3d68eaa9f5f7d7974e9c5492a51",
      "name": "kubernetes-reflector",
      "reference": "ghcr.io/tektum/kubernetes-reflector@sha256:c93e5ba0006956c8090981f789e87f7b5477110beb517e59f60ca17a31f9c98f",
      "registry": "ghcr.io/tektum/kubernetes-reflector",
      "runId": "32227498240",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/32227498240",
      "scan": {
        "delta": {
          "low": 0,
          "medium": -8,
          "negligible": 0
        },
        "final": {
          "low": 32,
          "medium": 154,
          "negligible": 4
        },
        "fixable": 0,
        "upstream": {
          "low": 32,
          "medium": 162,
          "negligible": 4
        }
      },
      "scanArtifact": "scan-kubernetes-reflector-10.0.65",
      "sourceCommit": "a65c2858cc2c0a46a36bb0d5aa0883f18864c50d",
      "tags": [
        "10.0.65",
        "10.0.65-20260819",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-08-19T07:26:27Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kubernetes-reflector@sha256:c93e5ba0006956c8090981f789e87f7b5477110beb517e59f60ca17a31f9c98f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubernetes-reflector@sha256:c93e5ba0006956c8090981f789e87f7b5477110beb517e59f60ca17a31f9c98f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubernetes-reflector@sha256:c93e5ba0006956c8090981f789e87f7b5477110beb517e59f60ca17a31f9c98f"
      },
      "version": "10.0.65"
    },
    {
      "description": "Grafana Loki 3.6 log aggregation server built from the canonical source release.",
      "digest": "sha256:7e993f11dec5b1a62a628cc1943aee00959f85e794b625c551fc7407365602ce",
      "inputDigest": "sha256:4431c4b43dbe7b009b7454405555cf6bccf4c4c5a84866026b3ddd10ea38513a",
      "name": "loki",
      "reference": "ghcr.io/tektum/loki@sha256:7e993f11dec5b1a62a628cc1943aee00959f85e794b625c551fc7407365602ce",
      "registry": "ghcr.io/tektum/loki",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-loki-3.6",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "3.6",
        "3.6-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:20:56Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/loki@sha256:7e993f11dec5b1a62a628cc1943aee00959f85e794b625c551fc7407365602ce --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/loki@sha256:7e993f11dec5b1a62a628cc1943aee00959f85e794b625c551fc7407365602ce",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/loki@sha256:7e993f11dec5b1a62a628cc1943aee00959f85e794b625c551fc7407365602ce"
      },
      "version": "3.6"
    },
    {
      "category": "Databases & Caching",
      "description": "MariaDB 12.3 UBI 10 patched with Copacetic.",
      "digest": "sha256:a47a5f5537ba038405dddf34c84135fcf940b422966eb661b4d288977d04c2cb",
      "inputDigest": "sha256:9c66534d9eff67b043487e73c3a73b0154d734f57bad51f3dd580a26bdaaf599",
      "name": "mariadb",
      "reference": "ghcr.io/tektum/mariadb@sha256:a47a5f5537ba038405dddf34c84135fcf940b422966eb661b4d288977d04c2cb",
      "registry": "ghcr.io/tektum/mariadb",
      "runId": "32109132598",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/32109132598",
      "scan": {
        "delta": {
          "high": 0,
          "low": 0,
          "medium": 0
        },
        "final": {
          "high": 12,
          "low": 152,
          "medium": 426
        },
        "fixable": 0,
        "upstream": {
          "high": 12,
          "low": 152,
          "medium": 426
        }
      },
      "scanArtifact": "scan-mariadb-12.3",
      "sourceCommit": "b4a26d49ac55411901bb8689b01d3e287a646a2d",
      "tags": [
        "12.3",
        "12.3-20260818",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-08-18T07:02:37Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/mariadb@sha256:a47a5f5537ba038405dddf34c84135fcf940b422966eb661b4d288977d04c2cb --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/mariadb@sha256:a47a5f5537ba038405dddf34c84135fcf940b422966eb661b4d288977d04c2cb",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/mariadb@sha256:a47a5f5537ba038405dddf34c84135fcf940b422966eb661b4d288977d04c2cb"
      },
      "version": "12.3"
    },
    {
      "description": "Apache Maven 3.9 build system assembled from Wolfi packages.",
      "digest": "sha256:0d645c83b9a16976eacdda08f3b8d7f765f2e159968351f8af493b513c83148d",
      "inputDigest": "sha256:44d8404d914643022e288e77ccbdae09559664d6f7a90e905fa78601d02eabc4",
      "name": "maven",
      "reference": "ghcr.io/tektum/maven@sha256:0d645c83b9a16976eacdda08f3b8d7f765f2e159968351f8af493b513c83148d",
      "registry": "ghcr.io/tektum/maven",
      "runId": "31819074304",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31819074304",
      "scan": {
        "all": {
          "high": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-maven-3.9.16",
      "sourceCommit": "3cd3cfd02d29f25b415cd564fd5281a97c9a4659",
      "tags": [
        "3.9.16",
        "3.9.16-20260814",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-14T16:26:36Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/maven@sha256:0d645c83b9a16976eacdda08f3b8d7f765f2e159968351f8af493b513c83148d --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/maven@sha256:0d645c83b9a16976eacdda08f3b8d7f765f2e159968351f8af493b513c83148d",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/maven@sha256:0d645c83b9a16976eacdda08f3b8d7f765f2e159968351f8af493b513c83148d"
      },
      "version": "3.9.16"
    },
    {
      "category": "Databases & Caching",
      "description": "Minimal memcached image assembled from Wolfi packages.",
      "digest": "sha256:efe7d0da4e84681af202e97478cb1fe76c4c542fdae57ee232b1f76b03b36735",
      "inputDigest": "sha256:e6986c5b68d819d0526c775e24e75889c06d2c91a9ab3d2eb262f1dc23d5a453",
      "name": "memcached",
      "reference": "ghcr.io/tektum/memcached@sha256:efe7d0da4e84681af202e97478cb1fe76c4c542fdae57ee232b1f76b03b36735",
      "registry": "ghcr.io/tektum/memcached",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-memcached-1.6",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.6",
        "1.6-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:04:28Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/memcached@sha256:efe7d0da4e84681af202e97478cb1fe76c4c542fdae57ee232b1f76b03b36735 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/memcached@sha256:efe7d0da4e84681af202e97478cb1fe76c4c542fdae57ee232b1f76b03b36735",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/memcached@sha256:efe7d0da4e84681af202e97478cb1fe76c4c542fdae57ee232b1f76b03b36735"
      },
      "version": "1.6"
    },
    {
      "description": "MetalLB speaker 0.15.3 built from a pinned upstream source commit.",
      "digest": "sha256:f573c65bc8c79238793ca8009ec3c10b5879c62a8874a7158becc6c5b30d7b7d",
      "inputDigest": "sha256:8f6953ee7ddf429109aa390b1c973843b53551e746ed0000d2c4265c90ea7ebb",
      "name": "metallb-speaker",
      "reference": "ghcr.io/tektum/metallb-speaker@sha256:f573c65bc8c79238793ca8009ec3c10b5879c62a8874a7158becc6c5b30d7b7d",
      "registry": "ghcr.io/tektum/metallb-speaker",
      "runId": "31808296923",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31808296923",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-metallb-speaker-0.15.3",
      "sourceCommit": "2187b443384d4df7fd5c4e84b45fda8c94e58e09",
      "tags": [
        "0.15.3",
        "0.15.3-20260814",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-14T14:17:54Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/metallb-speaker@sha256:f573c65bc8c79238793ca8009ec3c10b5879c62a8874a7158becc6c5b30d7b7d --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/metallb-speaker@sha256:f573c65bc8c79238793ca8009ec3c10b5879c62a8874a7158becc6c5b30d7b7d",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/metallb-speaker@sha256:f573c65bc8c79238793ca8009ec3c10b5879c62a8874a7158becc6c5b30d7b7d"
      },
      "version": "0.15.3"
    },
    {
      "category": "Monitoring & Observability",
      "description": "Kubernetes Metrics Server 0.9.0 built from a pinned upstream source commit.",
      "digest": "sha256:3791b662481c62b3bf2f6a47a3255241c09b097ae4ab59deaeebb63b449c7743",
      "inputDigest": "sha256:c61cdd2cdd311e1f9662cdd78b9565e62675e976b912fc3668e2171808c8d4a2",
      "name": "metrics-server",
      "reference": "ghcr.io/tektum/metrics-server@sha256:3791b662481c62b3bf2f6a47a3255241c09b097ae4ab59deaeebb63b449c7743",
      "registry": "ghcr.io/tektum/metrics-server",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-metrics-server-0.9.0",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "0.9.0",
        "0.9.0-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:07:17Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/metrics-server@sha256:3791b662481c62b3bf2f6a47a3255241c09b097ae4ab59deaeebb63b449c7743 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/metrics-server@sha256:3791b662481c62b3bf2f6a47a3255241c09b097ae4ab59deaeebb63b449c7743",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/metrics-server@sha256:3791b662481c62b3bf2f6a47a3255241c09b097ae4ab59deaeebb63b449c7743"
      },
      "version": "0.9.0"
    },
    {
      "description": "Eclipse Mosquitto MQTT broker assembled from Wolfi packages.",
      "digest": "sha256:5983475267f6cfe84db0c2370419223765496d5a9f05656f29c847094d199029",
      "inputDigest": "sha256:2c69c4e4868181e408ea0cd38fdac013b66770e1679d1b7c2eae6d4efdd0708d",
      "name": "mosquitto",
      "reference": "ghcr.io/tektum/mosquitto@sha256:5983475267f6cfe84db0c2370419223765496d5a9f05656f29c847094d199029",
      "registry": "ghcr.io/tektum/mosquitto",
      "runId": "31802451792",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31802451792",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-mosquitto-2.0",
      "sourceCommit": "d7077c0f05e06b7ab3e8651056ea5cf2824357a3",
      "tags": [
        "2.0",
        "2.0-20260814",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-14T12:58:30Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/mosquitto@sha256:5983475267f6cfe84db0c2370419223765496d5a9f05656f29c847094d199029 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/mosquitto@sha256:5983475267f6cfe84db0c2370419223765496d5a9f05656f29c847094d199029",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/mosquitto@sha256:5983475267f6cfe84db0c2370419223765496d5a9f05656f29c847094d199029"
      },
      "version": "2.0"
    },
    {
      "description": "High-performance NATS messaging server assembled from Wolfi packages.",
      "digest": "sha256:af62280780150045bbfb523bd73b8de45df6438471499297de51d50fceb85850",
      "name": "nats",
      "reference": "ghcr.io/tektum/nats@sha256:af62280780150045bbfb523bd73b8de45df6438471499297de51d50fceb85850",
      "registry": "ghcr.io/tektum/nats",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-nats-2",
      "tags": [
        "2",
        "2-20260807",
        "latest"
      ],
      "track": "wolfi",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/nats@sha256:af62280780150045bbfb523bd73b8de45df6438471499297de51d50fceb85850 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nats@sha256:af62280780150045bbfb523bd73b8de45df6438471499297de51d50fceb85850",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nats@sha256:af62280780150045bbfb523bd73b8de45df6438471499297de51d50fceb85850"
      },
      "version": "2"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Minimal nginx image assembled from Wolfi packages.",
      "digest": "sha256:1b74ad49ff45144b11daab7bb1cf38d22b57532186427a954bbbdcb25d686aaa",
      "inputDigest": "sha256:9bc27ccd2027d92ca7b2e51ae4a8276c26404e080fd42f2344d86ea045e73fd7",
      "name": "nginx",
      "reference": "ghcr.io/tektum/nginx@sha256:1b74ad49ff45144b11daab7bb1cf38d22b57532186427a954bbbdcb25d686aaa",
      "registry": "ghcr.io/tektum/nginx",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-nginx-1.31",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.31",
        "1.31-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:32Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/nginx@sha256:1b74ad49ff45144b11daab7bb1cf38d22b57532186427a954bbbdcb25d686aaa --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nginx@sha256:1b74ad49ff45144b11daab7bb1cf38d22b57532186427a954bbbdcb25d686aaa",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nginx@sha256:1b74ad49ff45144b11daab7bb1cf38d22b57532186427a954bbbdcb25d686aaa"
      },
      "version": "1.31"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Upstream Node.js 22 slim patched with Copacetic.",
      "digest": "sha256:724799c626585f1de20e9647b71170007b75e8d9942a35ceece5a69a89a8f902",
      "inputDigest": "sha256:ca975f8034ac4c41ec97a84683ae81b282553b4bd05947f9155f70be3347c433",
      "name": "node-22-slim",
      "reference": "ghcr.io/tektum/node-22-slim@sha256:724799c626585f1de20e9647b71170007b75e8d9942a35ceece5a69a89a8f902",
      "registry": "ghcr.io/tektum/node-22-slim",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "delta": {
          "critical": -2,
          "high": -14,
          "low": 0,
          "medium": -16,
          "negligible": 0,
          "unknown": 0
        },
        "final": {
          "critical": 14,
          "high": 34,
          "low": 16,
          "medium": 112,
          "negligible": 116,
          "unknown": 32
        },
        "fixable": 0,
        "upstream": {
          "critical": 16,
          "high": 48,
          "low": 16,
          "medium": 128,
          "negligible": 116,
          "unknown": 32
        }
      },
      "scanArtifact": "scan-node-22-slim-22",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "22",
        "22-20260813",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-08-13T20:11:54Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/node-22-slim@sha256:724799c626585f1de20e9647b71170007b75e8d9942a35ceece5a69a89a8f902 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/node-22-slim@sha256:724799c626585f1de20e9647b71170007b75e8d9942a35ceece5a69a89a8f902",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/node-22-slim@sha256:724799c626585f1de20e9647b71170007b75e8d9942a35ceece5a69a89a8f902"
      },
      "version": "22"
    },
    {
      "description": "Prometheus Node Exporter built from pinned upstream source.",
      "digest": "sha256:84026e14cb89b46d734ffa375110c76d01fd524b5e313fce3671e3fdc3ace459",
      "inputDigest": "sha256:8ccbb5eff62748fcb5c2705e94a402eab1ce71d578868f9c30cf8f31d51b6376",
      "name": "node-exporter",
      "reference": "ghcr.io/tektum/node-exporter@sha256:84026e14cb89b46d734ffa375110c76d01fd524b5e313fce3671e3fdc3ace459",
      "registry": "ghcr.io/tektum/node-exporter",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-node-exporter-1.10.2",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.10.2",
        "1.10.2-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:12:02Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/node-exporter@sha256:84026e14cb89b46d734ffa375110c76d01fd524b5e313fce3671e3fdc3ace459 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/node-exporter@sha256:84026e14cb89b46d734ffa375110c76d01fd524b5e313fce3671e3fdc3ace459",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/node-exporter@sha256:84026e14cb89b46d734ffa375110c76d01fd524b5e313fce3671e3fdc3ace459"
      },
      "version": "1.10.2"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Node.js 20 runtime assembled from Wolfi packages.",
      "digest": "sha256:1780b037d5b0f0f6044d475e2c207064283a0a9700bceb10c59a951bde955380",
      "inputDigest": "sha256:1bca701c9dbd92a33f97929b25d557bac4a21150a40127563b1d338c427b1693",
      "name": "nodejs",
      "reference": "ghcr.io/tektum/nodejs@sha256:1780b037d5b0f0f6044d475e2c207064283a0a9700bceb10c59a951bde955380",
      "registry": "ghcr.io/tektum/nodejs",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 10,
          "low": 10,
          "medium": 12
        },
        "fixable": 0
      },
      "scanArtifact": "scan-nodejs-20",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "20",
        "20-20260813"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:13Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/nodejs@sha256:1780b037d5b0f0f6044d475e2c207064283a0a9700bceb10c59a951bde955380 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:1780b037d5b0f0f6044d475e2c207064283a0a9700bceb10c59a951bde955380",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:1780b037d5b0f0f6044d475e2c207064283a0a9700bceb10c59a951bde955380"
      },
      "version": "20"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Node.js 22 runtime assembled from Wolfi packages.",
      "digest": "sha256:eef64e7fbaaa12b8ee4a6d2f266460ba520f7b1525dcb270c7799254f9645691",
      "inputDigest": "sha256:c358a49e98392e68da6fd12f885595f09cc39587dfb42ed455568d594a8b86d9",
      "name": "nodejs",
      "reference": "ghcr.io/tektum/nodejs@sha256:eef64e7fbaaa12b8ee4a6d2f266460ba520f7b1525dcb270c7799254f9645691",
      "registry": "ghcr.io/tektum/nodejs",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-nodejs-22",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "22",
        "22-20260813"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:01Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/nodejs@sha256:eef64e7fbaaa12b8ee4a6d2f266460ba520f7b1525dcb270c7799254f9645691 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:eef64e7fbaaa12b8ee4a6d2f266460ba520f7b1525dcb270c7799254f9645691",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:eef64e7fbaaa12b8ee4a6d2f266460ba520f7b1525dcb270c7799254f9645691"
      },
      "version": "22"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Node.js 24 runtime assembled from Wolfi packages.",
      "digest": "sha256:20e65320321926d21990d9f4950f9030ccbf227030ce764ed9c9df045a772291",
      "inputDigest": "sha256:358ce78a9f266f43f40957a6a9a37ed18b9b10e550e29a99251312abf9ddddbb",
      "name": "nodejs",
      "reference": "ghcr.io/tektum/nodejs@sha256:20e65320321926d21990d9f4950f9030ccbf227030ce764ed9c9df045a772291",
      "registry": "ghcr.io/tektum/nodejs",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-nodejs-24",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "24",
        "24-20260813"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:27Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/nodejs@sha256:20e65320321926d21990d9f4950f9030ccbf227030ce764ed9c9df045a772291 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:20e65320321926d21990d9f4950f9030ccbf227030ce764ed9c9df045a772291",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:20e65320321926d21990d9f4950f9030ccbf227030ce764ed9c9df045a772291"
      },
      "version": "24"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Node.js 26 runtime assembled from Wolfi packages.",
      "digest": "sha256:164683fd97d0fef781587f30bfc4364477602a561cdf24a0e2e394e46f9e07c0",
      "inputDigest": "sha256:b1b8aa115cc8265d4ee55bda5ec86c98731fea220a0b5427897b430f6e311201",
      "name": "nodejs",
      "reference": "ghcr.io/tektum/nodejs@sha256:164683fd97d0fef781587f30bfc4364477602a561cdf24a0e2e394e46f9e07c0",
      "registry": "ghcr.io/tektum/nodejs",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 8,
          "low": 6,
          "medium": 10
        },
        "fixable": 0
      },
      "scanArtifact": "scan-nodejs-26",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "26",
        "26-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:04:38Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/nodejs@sha256:164683fd97d0fef781587f30bfc4364477602a561cdf24a0e2e394e46f9e07c0 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:164683fd97d0fef781587f30bfc4364477602a561cdf24a0e2e394e46f9e07c0",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:164683fd97d0fef781587f30bfc4364477602a561cdf24a0e2e394e46f9e07c0"
      },
      "version": "26"
    },
    {
      "category": "Policy & Compliance",
      "description": "Open Policy Agent assembled from Wolfi packages.",
      "digest": "sha256:8c19998832dacb76d09815a56686ff41efe04a2c8142bbec8e3dfc19cd0167ac",
      "inputDigest": "sha256:0ae114395e65afd75e711bc628b97752978e2e1e18ed92a5c44d53b2acc5af1a",
      "name": "opa",
      "reference": "ghcr.io/tektum/opa@sha256:8c19998832dacb76d09815a56686ff41efe04a2c8142bbec8e3dfc19cd0167ac",
      "registry": "ghcr.io/tektum/opa",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-opa-1",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1",
        "1-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:04:46Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/opa@sha256:8c19998832dacb76d09815a56686ff41efe04a2c8142bbec8e3dfc19cd0167ac --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/opa@sha256:8c19998832dacb76d09815a56686ff41efe04a2c8142bbec8e3dfc19cd0167ac",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/opa@sha256:8c19998832dacb76d09815a56686ff41efe04a2c8142bbec8e3dfc19cd0167ac"
      },
      "version": "1"
    },
    {
      "category": "Languages & Build Tools",
      "description": "OpenJDK 25 JDK and JRE flavors assembled from Wolfi packages.",
      "digest": "sha256:f878b81776cd835f0931c53325609e4caeb7a31b4a9d89221d70569d3b897ffb",
      "inputDigest": "sha256:e1da49344ded9f28cf7448d554ce16155b94561517f715f3366e712751b4e416",
      "name": "openjdk",
      "reference": "ghcr.io/tektum/openjdk@sha256:f878b81776cd835f0931c53325609e4caeb7a31b4a9d89221d70569d3b897ffb",
      "registry": "ghcr.io/tektum/openjdk",
      "runId": "31802451792",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31802451792",
      "scan": {
        "all": {
          "high": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-openjdk-25",
      "sourceCommit": "d7077c0f05e06b7ab3e8651056ea5cf2824357a3",
      "tags": [
        "25",
        "25-20260814",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-14T12:59:07Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/openjdk@sha256:f878b81776cd835f0931c53325609e4caeb7a31b4a9d89221d70569d3b897ffb --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/openjdk@sha256:f878b81776cd835f0931c53325609e4caeb7a31b4a9d89221d70569d3b897ffb",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/openjdk@sha256:f878b81776cd835f0931c53325609e4caeb7a31b4a9d89221d70569d3b897ffb"
      },
      "version": "25"
    },
    {
      "category": "Languages & Build Tools",
      "description": "OpenJDK 25 JDK and JRE flavors assembled from Wolfi packages.",
      "digest": "sha256:0c468a217390cc18fc60c4963e5b97f0aac93632f5f5d425038a51bc32298d7e",
      "inputDigest": "sha256:ed5eced6a88a154853532dad3a41fa37fe5a449f777952032a13f33c18e648f5",
      "name": "openjdk",
      "reference": "ghcr.io/tektum/openjdk@sha256:0c468a217390cc18fc60c4963e5b97f0aac93632f5f5d425038a51bc32298d7e",
      "registry": "ghcr.io/tektum/openjdk",
      "runId": "31725349783",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31725349783",
      "scan": {
        "all": {
          "high": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-openjdk-25-jre",
      "sourceCommit": "d8488679495d5dbd82f901541cf31a624eb1aecf",
      "tags": [
        "25-jre",
        "25-20260813-jre",
        "latest-jre"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T17:25:27Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/openjdk@sha256:0c468a217390cc18fc60c4963e5b97f0aac93632f5f5d425038a51bc32298d7e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/openjdk@sha256:0c468a217390cc18fc60c4963e5b97f0aac93632f5f5d425038a51bc32298d7e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/openjdk@sha256:0c468a217390cc18fc60c4963e5b97f0aac93632f5f5d425038a51bc32298d7e"
      },
      "version": "25-jre"
    },
    {
      "category": "Monitoring & Observability",
      "description": "OpenTelemetry Collector 0.135.0 built from a pinned upstream source commit.",
      "digest": "sha256:e7be970c01eaecad69235438cef4bbc33042999aab550b373c494fbdb0a60e64",
      "inputDigest": "sha256:a0e2e4a247e90030b4288a1096799fcb339daa1a9e81540718f5abae2bf134ca",
      "name": "otel-collector",
      "reference": "ghcr.io/tektum/otel-collector@sha256:e7be970c01eaecad69235438cef4bbc33042999aab550b373c494fbdb0a60e64",
      "registry": "ghcr.io/tektum/otel-collector",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-otel-collector-0.135.0",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "0.135.0",
        "0.135.0-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:04:01Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/otel-collector@sha256:e7be970c01eaecad69235438cef4bbc33042999aab550b373c494fbdb0a60e64 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/otel-collector@sha256:e7be970c01eaecad69235438cef4bbc33042999aab550b373c494fbdb0a60e64",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/otel-collector@sha256:e7be970c01eaecad69235438cef4bbc33042999aab550b373c494fbdb0a60e64"
      },
      "version": "0.135.0"
    },
    {
      "description": "Perl 5.42 runtime assembled from Wolfi packages.",
      "digest": "sha256:99d0a60fa352b7a677d6c7622f0eb4ccd343c3ac7d5e1f15b51ebed057441d59",
      "inputDigest": "sha256:868bb07abd52c22435b512631debb98b2f58dcdd62d0451fa6fed20d2dc31ba1",
      "name": "perl",
      "reference": "ghcr.io/tektum/perl@sha256:99d0a60fa352b7a677d6c7622f0eb4ccd343c3ac7d5e1f15b51ebed057441d59",
      "registry": "ghcr.io/tektum/perl",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-perl-5.42",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "5.42",
        "5.42-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:36:40Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/perl@sha256:99d0a60fa352b7a677d6c7622f0eb4ccd343c3ac7d5e1f15b51ebed057441d59 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/perl@sha256:99d0a60fa352b7a677d6c7622f0eb4ccd343c3ac7d5e1f15b51ebed057441d59",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/perl@sha256:99d0a60fa352b7a677d6c7622f0eb4ccd343c3ac7d5e1f15b51ebed057441d59"
      },
      "version": "5.42"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL connection pooler built from pinned upstream source.",
      "digest": "sha256:99bc67806c89a874a21b970f702e1b5e6cd45df07e5dd39677b3a5c0bca4672e",
      "inputDigest": "sha256:179e4a7becac6f8484ed404cd682dd54260626f02cda8acf8c037ce55ceb7aad",
      "name": "pgbouncer",
      "reference": "ghcr.io/tektum/pgbouncer@sha256:99bc67806c89a874a21b970f702e1b5e6cd45df07e5dd39677b3a5c0bca4672e",
      "registry": "ghcr.io/tektum/pgbouncer",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-pgbouncer-1.25.2",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.25.2",
        "1.25.2-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:07:51Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/pgbouncer@sha256:99bc67806c89a874a21b970f702e1b5e6cd45df07e5dd39677b3a5c0bca4672e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgbouncer@sha256:99bc67806c89a874a21b970f702e1b5e6cd45df07e5dd39677b3a5c0bca4672e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgbouncer@sha256:99bc67806c89a874a21b970f702e1b5e6cd45df07e5dd39677b3a5c0bca4672e"
      },
      "version": "1.25.2"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL connection pooler assembled from Wolfi packages.",
      "digest": "sha256:f4d1ded900c70b4e049366efd26c5c49268c07c10ee040539e6b4c485415a7aa",
      "inputDigest": "sha256:c798c5e1573963dc9d44c14e3701b95015b6aabc4b0964913cf57b4508d16368",
      "name": "pgcat",
      "reference": "ghcr.io/tektum/pgcat@sha256:f4d1ded900c70b4e049366efd26c5c49268c07c10ee040539e6b4c485415a7aa",
      "registry": "ghcr.io/tektum/pgcat",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-pgcat-1",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1",
        "1-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:14:13Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/pgcat@sha256:f4d1ded900c70b4e049366efd26c5c49268c07c10ee040539e6b4c485415a7aa --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgcat@sha256:f4d1ded900c70b4e049366efd26c5c49268c07c10ee040539e6b4c485415a7aa",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgcat@sha256:f4d1ded900c70b4e049366efd26c5c49268c07c10ee040539e6b4c485415a7aa"
      },
      "version": "1"
    },
    {
      "category": "Databases & Caching",
      "description": "Web-based PostgreSQL browser built from pinned upstream source.",
      "digest": "sha256:ad9d6062aa782e1a16b6cba92150699e8c30baa2f7aaa63ecd8b90e8f77fb01c",
      "inputDigest": "sha256:52e1bb11a6301f15ec7d2a8e3ccb39eaa2ae31692f7dd3fbcfff462a2469d967",
      "name": "pgweb",
      "reference": "ghcr.io/tektum/pgweb@sha256:ad9d6062aa782e1a16b6cba92150699e8c30baa2f7aaa63ecd8b90e8f77fb01c",
      "registry": "ghcr.io/tektum/pgweb",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-pgweb-0.17.0",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "0.17.0",
        "0.17.0-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:03:29Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/pgweb@sha256:ad9d6062aa782e1a16b6cba92150699e8c30baa2f7aaa63ecd8b90e8f77fb01c --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgweb@sha256:ad9d6062aa782e1a16b6cba92150699e8c30baa2f7aaa63ecd8b90e8f77fb01c",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgweb@sha256:ad9d6062aa782e1a16b6cba92150699e8c30baa2f7aaa63ecd8b90e8f77fb01c"
      },
      "version": "0.17.0"
    },
    {
      "category": "Languages & Build Tools",
      "description": "PHP 8.2 runtime assembled from Wolfi packages.",
      "digest": "sha256:da885d961855ccb517d147289274f7142f2d2c998997cd839bea55b8cce9868f",
      "inputDigest": "sha256:35078d3e3694cc72000b714be1361f6e672ed43635080b18d7c4e0d72070f20f",
      "name": "php",
      "reference": "ghcr.io/tektum/php@sha256:da885d961855ccb517d147289274f7142f2d2c998997cd839bea55b8cce9868f",
      "registry": "ghcr.io/tektum/php",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-php-8.2",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "8.2",
        "8.2-20260813"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:09:38Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/php@sha256:da885d961855ccb517d147289274f7142f2d2c998997cd839bea55b8cce9868f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:da885d961855ccb517d147289274f7142f2d2c998997cd839bea55b8cce9868f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:da885d961855ccb517d147289274f7142f2d2c998997cd839bea55b8cce9868f"
      },
      "version": "8.2"
    },
    {
      "category": "Languages & Build Tools",
      "description": "PHP 8.3 runtime assembled from Wolfi packages.",
      "digest": "sha256:4399bfe5209c4f0e650072bba7f2fb3c61589e2882b4779094c2648f9a15fc0b",
      "inputDigest": "sha256:2a0075596655273afef19a401c5e15dd1cff42a473f76d2b6b401955eeebdd93",
      "name": "php",
      "reference": "ghcr.io/tektum/php@sha256:4399bfe5209c4f0e650072bba7f2fb3c61589e2882b4779094c2648f9a15fc0b",
      "registry": "ghcr.io/tektum/php",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-php-8.3",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "8.3",
        "8.3-20260813"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:09:47Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/php@sha256:4399bfe5209c4f0e650072bba7f2fb3c61589e2882b4779094c2648f9a15fc0b --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:4399bfe5209c4f0e650072bba7f2fb3c61589e2882b4779094c2648f9a15fc0b",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:4399bfe5209c4f0e650072bba7f2fb3c61589e2882b4779094c2648f9a15fc0b"
      },
      "version": "8.3"
    },
    {
      "category": "Languages & Build Tools",
      "description": "PHP 8.4 runtime assembled from Wolfi packages.",
      "digest": "sha256:8d6332184ab872b491b28f0fcb16c1c32e2efe1501b3623942cb467b2ef7d22e",
      "inputDigest": "sha256:8d43cd74b89c10db5616d9286fddb54bc652c370332707cab5c4e358357cbba9",
      "name": "php",
      "reference": "ghcr.io/tektum/php@sha256:8d6332184ab872b491b28f0fcb16c1c32e2efe1501b3623942cb467b2ef7d22e",
      "registry": "ghcr.io/tektum/php",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-php-8.4",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "8.4",
        "8.4-20260813"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:19Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/php@sha256:8d6332184ab872b491b28f0fcb16c1c32e2efe1501b3623942cb467b2ef7d22e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:8d6332184ab872b491b28f0fcb16c1c32e2efe1501b3623942cb467b2ef7d22e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:8d6332184ab872b491b28f0fcb16c1c32e2efe1501b3623942cb467b2ef7d22e"
      },
      "version": "8.4"
    },
    {
      "category": "Languages & Build Tools",
      "description": "PHP 8.5 runtime assembled from Wolfi packages.",
      "digest": "sha256:28df27d4d1b95e5c072065d4a11ee7d8ebd0efffa41d237e520fdfddd2689d7d",
      "inputDigest": "sha256:d90c68de512cc399ffb1777e97a900b3f71fed1d6544875f0029f06c912743d7",
      "name": "php",
      "reference": "ghcr.io/tektum/php@sha256:28df27d4d1b95e5c072065d4a11ee7d8ebd0efffa41d237e520fdfddd2689d7d",
      "registry": "ghcr.io/tektum/php",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-php-8.5",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "8.5",
        "8.5-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:09:47Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/php@sha256:28df27d4d1b95e5c072065d4a11ee7d8ebd0efffa41d237e520fdfddd2689d7d --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:28df27d4d1b95e5c072065d4a11ee7d8ebd0efffa41d237e520fdfddd2689d7d",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:28df27d4d1b95e5c072065d4a11ee7d8ebd0efffa41d237e520fdfddd2689d7d"
      },
      "version": "8.5"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL 15 Trixie patched with Copacetic.",
      "digest": "sha256:cefad9773368ab72c3c2a6b32c7ae4bd101e69282a6119cd217edc2200088dd5",
      "inputDigest": "sha256:4ff6683d504c5f95475c792987c3cd6c8c66c9862615dc6d6b816dbc36e63d9f",
      "name": "postgres-15-trixie",
      "reference": "ghcr.io/tektum/postgres-15-trixie@sha256:cefad9773368ab72c3c2a6b32c7ae4bd101e69282a6119cd217edc2200088dd5",
      "registry": "ghcr.io/tektum/postgres-15-trixie",
      "runId": "31941664764",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31941664764",
      "scan": {
        "delta": {
          "critical": 0,
          "high": 0,
          "low": 0,
          "medium": -36,
          "negligible": -18,
          "unknown": -54
        },
        "final": {
          "critical": 50,
          "high": 104,
          "low": 34,
          "medium": 120,
          "negligible": 192,
          "unknown": 18
        },
        "fixable": 0,
        "upstream": {
          "critical": 50,
          "high": 104,
          "low": 34,
          "medium": 156,
          "negligible": 210,
          "unknown": 72
        }
      },
      "scanArtifact": "scan-postgres-15-trixie-15",
      "sourceCommit": "2d03e5ece03cc2ecbf73f2358b61032b0e24b25e",
      "tags": [
        "15",
        "15-20260816",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-08-16T10:31:40Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/postgres-15-trixie@sha256:cefad9773368ab72c3c2a6b32c7ae4bd101e69282a6119cd217edc2200088dd5 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-15-trixie@sha256:cefad9773368ab72c3c2a6b32c7ae4bd101e69282a6119cd217edc2200088dd5",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-15-trixie@sha256:cefad9773368ab72c3c2a6b32c7ae4bd101e69282a6119cd217edc2200088dd5"
      },
      "version": "15"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL 16 Trixie patched with Copacetic.",
      "digest": "sha256:1a2c0cf4403c64cd0568508b13029aef3caf7e5d6fb2e06a37d4bb9da4ccc57d",
      "inputDigest": "sha256:4ad13ceeaab4a06c4467981a230902f863bc384f7c00b652f5028885bbfeb8b2",
      "name": "postgres-16-trixie",
      "reference": "ghcr.io/tektum/postgres-16-trixie@sha256:1a2c0cf4403c64cd0568508b13029aef3caf7e5d6fb2e06a37d4bb9da4ccc57d",
      "registry": "ghcr.io/tektum/postgres-16-trixie",
      "runId": "31941664764",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31941664764",
      "scan": {
        "delta": {
          "critical": 0,
          "high": 0,
          "low": 0,
          "medium": -36,
          "negligible": -18,
          "unknown": -54
        },
        "final": {
          "critical": 50,
          "high": 104,
          "low": 34,
          "medium": 120,
          "negligible": 192,
          "unknown": 18
        },
        "fixable": 0,
        "upstream": {
          "critical": 50,
          "high": 104,
          "low": 34,
          "medium": 156,
          "negligible": 210,
          "unknown": 72
        }
      },
      "scanArtifact": "scan-postgres-16-trixie-16",
      "sourceCommit": "2d03e5ece03cc2ecbf73f2358b61032b0e24b25e",
      "tags": [
        "16",
        "16-20260816",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-08-16T10:31:34Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/postgres-16-trixie@sha256:1a2c0cf4403c64cd0568508b13029aef3caf7e5d6fb2e06a37d4bb9da4ccc57d --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-16-trixie@sha256:1a2c0cf4403c64cd0568508b13029aef3caf7e5d6fb2e06a37d4bb9da4ccc57d",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-16-trixie@sha256:1a2c0cf4403c64cd0568508b13029aef3caf7e5d6fb2e06a37d4bb9da4ccc57d"
      },
      "version": "16"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL 17 Trixie patched with Copacetic.",
      "digest": "sha256:649b10fab337469315fdeddcdbb7b2501da9312ff20cd3bd03a54b1f4c870be6",
      "inputDigest": "sha256:a772ba76792d601f0a1a031a4b4b30505401bca73267732416440f3222b5d55b",
      "name": "postgres-17-trixie",
      "reference": "ghcr.io/tektum/postgres-17-trixie@sha256:649b10fab337469315fdeddcdbb7b2501da9312ff20cd3bd03a54b1f4c870be6",
      "registry": "ghcr.io/tektum/postgres-17-trixie",
      "runId": "31927888990",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31927888990",
      "scan": {
        "delta": {
          "critical": 0,
          "high": 0,
          "low": 0,
          "medium": -36,
          "negligible": -18,
          "unknown": -54
        },
        "final": {
          "critical": 50,
          "high": 104,
          "low": 34,
          "medium": 120,
          "negligible": 192,
          "unknown": 18
        },
        "fixable": 0,
        "upstream": {
          "critical": 50,
          "high": 104,
          "low": 34,
          "medium": 156,
          "negligible": 210,
          "unknown": 72
        }
      },
      "scanArtifact": "scan-postgres-17-trixie-17",
      "sourceCommit": "1c69935aa89dd9f25ed0ff3905b263d9a5753243",
      "tags": [
        "17",
        "17-20260816",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-08-16T05:03:21Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/postgres-17-trixie@sha256:649b10fab337469315fdeddcdbb7b2501da9312ff20cd3bd03a54b1f4c870be6 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-17-trixie@sha256:649b10fab337469315fdeddcdbb7b2501da9312ff20cd3bd03a54b1f4c870be6",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-17-trixie@sha256:649b10fab337469315fdeddcdbb7b2501da9312ff20cd3bd03a54b1f4c870be6"
      },
      "version": "17"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL 18 Trixie patched with Copacetic.",
      "digest": "sha256:911dfa78310f384d433383417aca26e8b9d6dc5db2ae09a812699580651a2af0",
      "inputDigest": "sha256:551d7b5f7569bb377c5b60d0fcad050497d82dbe665f1c47274993a20d2879d9",
      "name": "postgres-18-trixie",
      "reference": "ghcr.io/tektum/postgres-18-trixie@sha256:911dfa78310f384d433383417aca26e8b9d6dc5db2ae09a812699580651a2af0",
      "registry": "ghcr.io/tektum/postgres-18-trixie",
      "runId": "31919402726",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31919402726",
      "scan": {
        "delta": {
          "critical": 0,
          "high": 0,
          "low": 0,
          "medium": -36,
          "negligible": -18,
          "unknown": -54
        },
        "final": {
          "critical": 50,
          "high": 104,
          "low": 34,
          "medium": 120,
          "negligible": 192,
          "unknown": 18
        },
        "fixable": 0,
        "upstream": {
          "critical": 50,
          "high": 104,
          "low": 34,
          "medium": 156,
          "negligible": 210,
          "unknown": 72
        }
      },
      "scanArtifact": "scan-postgres-18-trixie-18",
      "sourceCommit": "d45e69f895061899125226262037a53d092b8c4a",
      "tags": [
        "18",
        "18-20260816",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-08-16T01:27:40Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/postgres-18-trixie@sha256:911dfa78310f384d433383417aca26e8b9d6dc5db2ae09a812699580651a2af0 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-18-trixie@sha256:911dfa78310f384d433383417aca26e8b9d6dc5db2ae09a812699580651a2af0",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-18-trixie@sha256:911dfa78310f384d433383417aca26e8b9d6dc5db2ae09a812699580651a2af0"
      },
      "version": "18"
    },
    {
      "category": "Monitoring & Observability",
      "description": "Prometheus monitoring and time-series database built from pinned upstream source.",
      "digest": "sha256:7484738906f8161ed039bc8142ab37d0a82c8d72589a19b9a66090b558438853",
      "inputDigest": "sha256:9412bcf5f0ca98cff3146521a1c586d1dbf0785371bcbbb747c58128387ab3d0",
      "name": "prometheus",
      "reference": "ghcr.io/tektum/prometheus@sha256:7484738906f8161ed039bc8142ab37d0a82c8d72589a19b9a66090b558438853",
      "registry": "ghcr.io/tektum/prometheus",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-prometheus-3.11",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "3.11",
        "3.11-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:38:21Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/prometheus@sha256:7484738906f8161ed039bc8142ab37d0a82c8d72589a19b9a66090b558438853 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/prometheus@sha256:7484738906f8161ed039bc8142ab37d0a82c8d72589a19b9a66090b558438853",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/prometheus@sha256:7484738906f8161ed039bc8142ab37d0a82c8d72589a19b9a66090b558438853"
      },
      "version": "3.11"
    },
    {
      "description": "Prometheus Operator built from pinned upstream source.",
      "digest": "sha256:41d74807a93c3cc59cd3a94cb9965d0c1dbbc78e352d4631f0e03ac01d6cba06",
      "inputDigest": "sha256:a32d9e8a2f2442d93a961bcfe2587f46a8b186258c6d3570f9e4afb09af339ec",
      "name": "prometheus-operator",
      "reference": "ghcr.io/tektum/prometheus-operator@sha256:41d74807a93c3cc59cd3a94cb9965d0c1dbbc78e352d4631f0e03ac01d6cba06",
      "registry": "ghcr.io/tektum/prometheus-operator",
      "runId": "31819500286",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31819500286",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-prometheus-operator-0.93.0",
      "sourceCommit": "eec9c225c9bd18d42cc370173a842ebe4fb2b099",
      "tags": [
        "0.93.0",
        "0.93.0-20260814",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-14T16:38:49Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/prometheus-operator@sha256:41d74807a93c3cc59cd3a94cb9965d0c1dbbc78e352d4631f0e03ac01d6cba06 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/prometheus-operator@sha256:41d74807a93c3cc59cd3a94cb9965d0c1dbbc78e352d4631f0e03ac01d6cba06",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/prometheus-operator@sha256:41d74807a93c3cc59cd3a94cb9965d0c1dbbc78e352d4631f0e03ac01d6cba06"
      },
      "version": "0.93.0"
    },
    {
      "category": "Databases & Caching",
      "description": "High-performance MySQL proxy assembled from Wolfi packages.",
      "digest": "sha256:21dcce0abcddfa3c3310d500737a57e9576e02fe0b8f2e10b0fde3f810425330",
      "inputDigest": "sha256:e0ad9b60870607f00d4c55730dad74492e34adf576f936bb988a2557e5d10fa5",
      "name": "proxysql",
      "reference": "ghcr.io/tektum/proxysql@sha256:21dcce0abcddfa3c3310d500737a57e9576e02fe0b8f2e10b0fde3f810425330",
      "registry": "ghcr.io/tektum/proxysql",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-proxysql-3",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "3",
        "3-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:36Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/proxysql@sha256:21dcce0abcddfa3c3310d500737a57e9576e02fe0b8f2e10b0fde3f810425330 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/proxysql@sha256:21dcce0abcddfa3c3310d500737a57e9576e02fe0b8f2e10b0fde3f810425330",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/proxysql@sha256:21dcce0abcddfa3c3310d500737a57e9576e02fe0b8f2e10b0fde3f810425330"
      },
      "version": "3"
    },
    {
      "category": "Monitoring & Observability",
      "description": "Prometheus Pushgateway push acceptor for ephemeral and batch jobs, built from a pinned source commit.",
      "digest": "sha256:5f1d81cdeb3cffd7e9638b289d4414f3e976b63f2efd919919271ca1996bec52",
      "inputDigest": "sha256:528c891cb62ae873b9856e4025fceeec71cdd836eb70acbb52a2e6bc144a635c",
      "name": "pushgateway",
      "reference": "ghcr.io/tektum/pushgateway@sha256:5f1d81cdeb3cffd7e9638b289d4414f3e976b63f2efd919919271ca1996bec52",
      "registry": "ghcr.io/tektum/pushgateway",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-pushgateway-1.11",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.11",
        "1.11-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:03:24Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/pushgateway@sha256:5f1d81cdeb3cffd7e9638b289d4414f3e976b63f2efd919919271ca1996bec52 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pushgateway@sha256:5f1d81cdeb3cffd7e9638b289d4414f3e976b63f2efd919919271ca1996bec52",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pushgateway@sha256:5f1d81cdeb3cffd7e9638b289d4414f3e976b63f2efd919919271ca1996bec52"
      },
      "version": "1.11"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Python 3.10 runtime assembled from Wolfi packages.",
      "digest": "sha256:92054ab3753dae13dc68831dc1f23c8513373de0a3147300365c06bacbf73d16",
      "inputDigest": "sha256:a96331c291159249c6da857fd6a7ee4b26d9c3b7a114dd2c4f76b50dc1783104",
      "name": "python",
      "reference": "ghcr.io/tektum/python@sha256:92054ab3753dae13dc68831dc1f23c8513373de0a3147300365c06bacbf73d16",
      "registry": "ghcr.io/tektum/python",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 16,
          "low": 4,
          "medium": 16,
          "negligible": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-python-3.10",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "3.10",
        "3.10-20260813"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:09:46Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/python@sha256:92054ab3753dae13dc68831dc1f23c8513373de0a3147300365c06bacbf73d16 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:92054ab3753dae13dc68831dc1f23c8513373de0a3147300365c06bacbf73d16",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:92054ab3753dae13dc68831dc1f23c8513373de0a3147300365c06bacbf73d16"
      },
      "version": "3.10"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Python 3.11 runtime assembled from Wolfi packages.",
      "digest": "sha256:8ae51acbaf9bcb13af10bd8804ab71f363ef198cb469260450451928ab42bef7",
      "inputDigest": "sha256:b33b2fc753353bbd9fac72b5ad3f93e55d3a197705a9f64048edf7def37ff2f4",
      "name": "python",
      "reference": "ghcr.io/tektum/python@sha256:8ae51acbaf9bcb13af10bd8804ab71f363ef198cb469260450451928ab42bef7",
      "registry": "ghcr.io/tektum/python",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 10,
          "low": 2,
          "medium": 12,
          "negligible": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-python-3.11",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "3.11",
        "3.11-20260813"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:09:59Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/python@sha256:8ae51acbaf9bcb13af10bd8804ab71f363ef198cb469260450451928ab42bef7 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:8ae51acbaf9bcb13af10bd8804ab71f363ef198cb469260450451928ab42bef7",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:8ae51acbaf9bcb13af10bd8804ab71f363ef198cb469260450451928ab42bef7"
      },
      "version": "3.11"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Python 3.12 runtime assembled from Wolfi packages.",
      "digest": "sha256:92ad06d9c2c1b648633064daf59f34445b2bfb8c69aa92c5e0c251f3bcafa0c0",
      "inputDigest": "sha256:cb3a0f7f6dc756c0dfa6ccefaf0d4f22524410f945d0633bbb3ee11e8bd1b778",
      "name": "python",
      "reference": "ghcr.io/tektum/python@sha256:92ad06d9c2c1b648633064daf59f34445b2bfb8c69aa92c5e0c251f3bcafa0c0",
      "registry": "ghcr.io/tektum/python",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 16,
          "low": 4,
          "medium": 12,
          "negligible": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-python-3.12",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "3.12",
        "3.12-20260813"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:09:38Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/python@sha256:92ad06d9c2c1b648633064daf59f34445b2bfb8c69aa92c5e0c251f3bcafa0c0 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:92ad06d9c2c1b648633064daf59f34445b2bfb8c69aa92c5e0c251f3bcafa0c0",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:92ad06d9c2c1b648633064daf59f34445b2bfb8c69aa92c5e0c251f3bcafa0c0"
      },
      "version": "3.12"
    },
    {
      "category": "Messaging & Streaming",
      "description": "RabbitMQ patched from the official image.",
      "digest": "sha256:20bc933f78fa367dfd69366ed1b8b73f378bab41e6628ffdeeddf5910505f629",
      "inputDigest": "sha256:d54bb643281df1119464430c8a746d9de617018f7168e7b9a739800f93600e56",
      "name": "rabbitmq",
      "reference": "ghcr.io/tektum/rabbitmq@sha256:20bc933f78fa367dfd69366ed1b8b73f378bab41e6628ffdeeddf5910505f629",
      "registry": "ghcr.io/tektum/rabbitmq",
      "runId": "32351845265",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/32351845265",
      "scan": {
        "delta": {
          "high": -2,
          "low": -2,
          "medium": -4,
          "negligible": 0
        },
        "final": {
          "low": 30,
          "medium": 146,
          "negligible": 4
        },
        "fixable": 0,
        "upstream": {
          "high": 2,
          "low": 32,
          "medium": 150,
          "negligible": 4
        }
      },
      "scanArtifact": "scan-rabbitmq-4.3",
      "sourceCommit": "437c676b8ca2319d7629151169f0ef0d52ecb8ab",
      "tags": [
        "4",
        "4.3",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-08-20T09:23:30Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/rabbitmq@sha256:20bc933f78fa367dfd69366ed1b8b73f378bab41e6628ffdeeddf5910505f629 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rabbitmq@sha256:20bc933f78fa367dfd69366ed1b8b73f378bab41e6628ffdeeddf5910505f629",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rabbitmq@sha256:20bc933f78fa367dfd69366ed1b8b73f378bab41e6628ffdeeddf5910505f629"
      },
      "version": "4.3"
    },
    {
      "category": "Messaging & Streaming",
      "description": "RabbitMQ Cluster Operator 2 assembled from pinned source.",
      "digest": "sha256:0f253ab4601c4540250702441e294899d5754c86f10bb9a4d8432dbaa19b43d1",
      "inputDigest": "sha256:b808fc222722a5dac3744a986e27760d971a512e04bc25b6b29a505e3955d1af",
      "name": "rabbitmq-cluster-operator",
      "reference": "ghcr.io/tektum/rabbitmq-cluster-operator@sha256:0f253ab4601c4540250702441e294899d5754c86f10bb9a4d8432dbaa19b43d1",
      "registry": "ghcr.io/tektum/rabbitmq-cluster-operator",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-rabbitmq-cluster-operator-2",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "2",
        "2-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:05:26Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/rabbitmq-cluster-operator@sha256:0f253ab4601c4540250702441e294899d5754c86f10bb9a4d8432dbaa19b43d1 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rabbitmq-cluster-operator@sha256:0f253ab4601c4540250702441e294899d5754c86f10bb9a4d8432dbaa19b43d1",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rabbitmq-cluster-operator@sha256:0f253ab4601c4540250702441e294899d5754c86f10bb9a4d8432dbaa19b43d1"
      },
      "version": "2"
    },
    {
      "description": "Restic 0.18 backup and restore CLI built from pinned upstream source.",
      "digest": "sha256:553d80bfb9f933103d85e1c4c88d127438e3c09761a15ad7972d88191b6ba512",
      "inputDigest": "sha256:127030d5c8362a9c53614cff040942357246c144dc58c47a4ed9120abccd1b3c",
      "name": "restic",
      "reference": "ghcr.io/tektum/restic@sha256:553d80bfb9f933103d85e1c4c88d127438e3c09761a15ad7972d88191b6ba512",
      "registry": "ghcr.io/tektum/restic",
      "runId": "31958819729",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31958819729",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-restic-0.18",
      "sourceCommit": "1b11db07072e3cc0c40313e954b5b218e573a3ab",
      "tags": [
        "0.18",
        "0.18-20260816",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-16T16:36:51Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/restic@sha256:553d80bfb9f933103d85e1c4c88d127438e3c09761a15ad7972d88191b6ba512 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/restic@sha256:553d80bfb9f933103d85e1c4c88d127438e3c09761a15ad7972d88191b6ba512",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/restic@sha256:553d80bfb9f933103d85e1c4c88d127438e3c09761a15ad7972d88191b6ba512"
      },
      "version": "0.18"
    },
    {
      "category": "Databases & Caching",
      "description": "rqlite distributed SQLite built from pinned upstream source.",
      "digest": "sha256:5d135f6726fb158c9d1bb2c738cf5201ccc621a6eed62071089166156069af2e",
      "inputDigest": "sha256:f359a813dee7282722397618d11a14d1e32aa2cbcc715b4537d393aecd77d064",
      "name": "rqlite",
      "reference": "ghcr.io/tektum/rqlite@sha256:5d135f6726fb158c9d1bb2c738cf5201ccc621a6eed62071089166156069af2e",
      "registry": "ghcr.io/tektum/rqlite",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-rqlite-8",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "8",
        "8-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:18:57Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/rqlite@sha256:5d135f6726fb158c9d1bb2c738cf5201ccc621a6eed62071089166156069af2e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rqlite@sha256:5d135f6726fb158c9d1bb2c738cf5201ccc621a6eed62071089166156069af2e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rqlite@sha256:5d135f6726fb158c9d1bb2c738cf5201ccc621a6eed62071089166156069af2e"
      },
      "version": "8"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby 3.3 runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:6581c421ea7a620511d639f9c40cc8d9f4e184d854716bd377bedfbf545946af",
      "inputDigest": "sha256:05dd956fcf0fa3cb72df77551b18b2c1aa751bb63cd7c6f08a2e4e81c435a807",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:6581c421ea7a620511d639f9c40cc8d9f4e184d854716bd377bedfbf545946af",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-3.3",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "3.3",
        "3.3-20260813"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:28Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:6581c421ea7a620511d639f9c40cc8d9f4e184d854716bd377bedfbf545946af --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:6581c421ea7a620511d639f9c40cc8d9f4e184d854716bd377bedfbf545946af",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:6581c421ea7a620511d639f9c40cc8d9f4e184d854716bd377bedfbf545946af"
      },
      "version": "3.3"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby 3.3 runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:28bd571201b8fcdb4b27f132520d888a4e08202b2f7fa20fcf81befa3604b74f",
      "inputDigest": "sha256:5e84c57cad5dbda88969e1d1ab7ee020a2db183d127bd75151b9247a19667cda",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:28bd571201b8fcdb4b27f132520d888a4e08202b2f7fa20fcf81befa3604b74f",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "31725349783",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31725349783",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-3.3-dev",
      "sourceCommit": "d8488679495d5dbd82f901541cf31a624eb1aecf",
      "tags": [
        "3.3-dev",
        "3.3-20260813-dev"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T17:25:58Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:28bd571201b8fcdb4b27f132520d888a4e08202b2f7fa20fcf81befa3604b74f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:28bd571201b8fcdb4b27f132520d888a4e08202b2f7fa20fcf81befa3604b74f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:28bd571201b8fcdb4b27f132520d888a4e08202b2f7fa20fcf81befa3604b74f"
      },
      "version": "3.3-dev"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby 3.3 runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:dad29efc790eee5d7664974d2e8ab8677f4e42b221969aecdafa60639eebfb33",
      "inputDigest": "sha256:f4671ca01cdaf32494b279675f7ba42b764ad72f89ec7d77cfe4da0087589eb5",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:dad29efc790eee5d7664974d2e8ab8677f4e42b221969aecdafa60639eebfb33",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 6
        },
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-3.3-fips",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "3.3-fips",
        "3.3-20260813-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:31Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:dad29efc790eee5d7664974d2e8ab8677f4e42b221969aecdafa60639eebfb33 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:dad29efc790eee5d7664974d2e8ab8677f4e42b221969aecdafa60639eebfb33",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:dad29efc790eee5d7664974d2e8ab8677f4e42b221969aecdafa60639eebfb33"
      },
      "version": "3.3-fips"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby 4.0 runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:6ad6b1c6000a852f95bb88dcd0b3d2c05aabf5d4dd001c77f69e3f587eaa5842",
      "inputDigest": "sha256:59932fb84a2c30893120a75fa086c6d2cb2f9231cd8add70406c35b9afaa81a4",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:6ad6b1c6000a852f95bb88dcd0b3d2c05aabf5d4dd001c77f69e3f587eaa5842",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-4.0",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "4.0",
        "4.0-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:53Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:6ad6b1c6000a852f95bb88dcd0b3d2c05aabf5d4dd001c77f69e3f587eaa5842 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:6ad6b1c6000a852f95bb88dcd0b3d2c05aabf5d4dd001c77f69e3f587eaa5842",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:6ad6b1c6000a852f95bb88dcd0b3d2c05aabf5d4dd001c77f69e3f587eaa5842"
      },
      "version": "4.0"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby 4.0 runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:8fe7f683a1c694d37d3b6109695caa4ec6a8dcbd03e4d6fa849ebb62600c5255",
      "inputDigest": "sha256:392534eb014791851b25398539f6b95680bc40f8a7a99b81989f4053217d41ad",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:8fe7f683a1c694d37d3b6109695caa4ec6a8dcbd03e4d6fa849ebb62600c5255",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-4.0-dev",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "4.0-dev",
        "4.0-20260813-dev",
        "latest-dev"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:02:34Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:8fe7f683a1c694d37d3b6109695caa4ec6a8dcbd03e4d6fa849ebb62600c5255 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:8fe7f683a1c694d37d3b6109695caa4ec6a8dcbd03e4d6fa849ebb62600c5255",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:8fe7f683a1c694d37d3b6109695caa4ec6a8dcbd03e4d6fa849ebb62600c5255"
      },
      "version": "4.0-dev"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby 4.0 runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:c3fd3b9ed48c412a1c2f537eae5c1a398664eb284279e7b009f4fd06f5a6d100",
      "inputDigest": "sha256:9afe55916102d4945b778c012f19e0d0ee5941c5ca0714120edbef21ace716cc",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:c3fd3b9ed48c412a1c2f537eae5c1a398664eb284279e7b009f4fd06f5a6d100",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 6
        },
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-4.0-fips",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "4.0-fips",
        "4.0-20260813-fips",
        "latest-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:34Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:c3fd3b9ed48c412a1c2f537eae5c1a398664eb284279e7b009f4fd06f5a6d100 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:c3fd3b9ed48c412a1c2f537eae5c1a398664eb284279e7b009f4fd06f5a6d100",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:c3fd3b9ed48c412a1c2f537eae5c1a398664eb284279e7b009f4fd06f5a6d100"
      },
      "version": "4.0-fips"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Rust 1.86 toolchain assembled from Wolfi packages.",
      "digest": "sha256:c363d113622d3c4df657ad126ddf9dabe5f9cb6a8135fa60ccbe9ab6d6108269",
      "inputDigest": "sha256:7dfc55351f31833bcf153969eb21c17225a4fe040e9441ba0aef95419b2fcc29",
      "name": "rust",
      "reference": "ghcr.io/tektum/rust@sha256:c363d113622d3c4df657ad126ddf9dabe5f9cb6a8135fa60ccbe9ab6d6108269",
      "registry": "ghcr.io/tektum/rust",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-rust-1",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1",
        "1-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:03:23Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/rust@sha256:c363d113622d3c4df657ad126ddf9dabe5f9cb6a8135fa60ccbe9ab6d6108269 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rust@sha256:c363d113622d3c4df657ad126ddf9dabe5f9cb6a8135fa60ccbe9ab6d6108269",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rust@sha256:c363d113622d3c4df657ad126ddf9dabe5f9cb6a8135fa60ccbe9ab6d6108269"
      },
      "version": "1"
    },
    {
      "category": "Security & Identity",
      "description": "Sealed Secrets controller and kubeseal CLI built from pinned upstream source.",
      "digest": "sha256:f5476153f434683395649775d75cd3264679f1c5d47164339fdef253d1b23576",
      "inputDigest": "sha256:e85d9e9aab52d9dae39780dda7956a339d595cebaf15d09b508d0e30e190cf10",
      "name": "sealed-secrets",
      "reference": "ghcr.io/tektum/sealed-secrets@sha256:f5476153f434683395649775d75cd3264679f1c5d47164339fdef253d1b23576",
      "registry": "ghcr.io/tektum/sealed-secrets",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-sealed-secrets-0.38.4",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "0.38.4",
        "0.38.4-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:05:11Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/sealed-secrets@sha256:f5476153f434683395649775d75cd3264679f1c5d47164339fdef253d1b23576 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/sealed-secrets@sha256:f5476153f434683395649775d75cd3264679f1c5d47164339fdef253d1b23576",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/sealed-secrets@sha256:f5476153f434683395649775d75cd3264679f1c5d47164339fdef253d1b23576"
      },
      "version": "0.38.4"
    },
    {
      "category": "Base & Utilities",
      "description": "Minimal root filesystem with CA certificates and timezone data.",
      "digest": "sha256:74c67d5f2707a0609b799351642173f3b4e0ab2599b276d78315d24cc2f45387",
      "inputDigest": "sha256:603ff05be10d907e4f824933dd96d56c3c36b3d6f1a76df187f6252af6a55eef",
      "name": "static",
      "reference": "ghcr.io/tektum/static@sha256:74c67d5f2707a0609b799351642173f3b4e0ab2599b276d78315d24cc2f45387",
      "registry": "ghcr.io/tektum/static",
      "runId": "31725349783",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31725349783",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-static-wolfi",
      "sourceCommit": "d8488679495d5dbd82f901541cf31a624eb1aecf",
      "tags": [
        "wolfi",
        "wolfi-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T17:24:32Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/static@sha256:74c67d5f2707a0609b799351642173f3b4e0ab2599b276d78315d24cc2f45387 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/static@sha256:74c67d5f2707a0609b799351642173f3b4e0ab2599b276d78315d24cc2f45387",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/static@sha256:74c67d5f2707a0609b799351642173f3b4e0ab2599b276d78315d24cc2f45387"
      },
      "version": "wolfi"
    },
    {
      "description": "Tekton Pipelines Kubernetes controller built from a pinned upstream source commit.",
      "digest": "sha256:b8345569e5c8da921237dfceac1477716ca8a72141880066cb64b282a55acbb0",
      "inputDigest": "sha256:ac43cb12b8da0fd6d8e4906f1a84ad861fe0221a2fad90f9b660c46b400656d8",
      "name": "tekton-controller",
      "reference": "ghcr.io/tektum/tekton-controller@sha256:b8345569e5c8da921237dfceac1477716ca8a72141880066cb64b282a55acbb0",
      "registry": "ghcr.io/tektum/tekton-controller",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "critical": 4,
          "medium": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-tekton-controller-0.61",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "0.61",
        "0.61-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:21:11Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/tekton-controller@sha256:b8345569e5c8da921237dfceac1477716ca8a72141880066cb64b282a55acbb0 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/tekton-controller@sha256:b8345569e5c8da921237dfceac1477716ca8a72141880066cb64b282a55acbb0",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/tekton-controller@sha256:b8345569e5c8da921237dfceac1477716ca8a72141880066cb64b282a55acbb0"
      },
      "version": "0.61"
    },
    {
      "category": "CI/CD & GitOps",
      "description": "OpenTofu 1.12, a Terraform-compatible IaC CLI, published as terraform; pinned upstream source build.",
      "digest": "sha256:d25cecefc8fdfc4f4d844d70376eefbd69d9dda5f873304cf18721ae818799ad",
      "inputDigest": "sha256:b8bd1af4ef485d126cb7f63c35d1d71cfc318420db888be35c23bef3c0ab8b21",
      "name": "terraform",
      "reference": "ghcr.io/tektum/terraform@sha256:d25cecefc8fdfc4f4d844d70376eefbd69d9dda5f873304cf18721ae818799ad",
      "registry": "ghcr.io/tektum/terraform",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-terraform-1.12",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.12",
        "1.12-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:16:44Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/terraform@sha256:d25cecefc8fdfc4f4d844d70376eefbd69d9dda5f873304cf18721ae818799ad --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/terraform@sha256:d25cecefc8fdfc4f4d844d70376eefbd69d9dda5f873304cf18721ae818799ad",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/terraform@sha256:d25cecefc8fdfc4f4d844d70376eefbd69d9dda5f873304cf18721ae818799ad"
      },
      "version": "1.12"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Traefik built from pinned source with plain and Go FIPS flavors.",
      "digest": "sha256:a0c7b4fd87095b32e4d7f3e944a0a413aaed7ef5af84e13976822c58e35094eb",
      "inputDigest": "sha256:798d0c0cdb51f8affbdbc74d586fc9c0472d78fc6497b78e730cd5dedc396496",
      "name": "traefik",
      "reference": "ghcr.io/tektum/traefik@sha256:a0c7b4fd87095b32e4d7f3e944a0a413aaed7ef5af84e13976822c58e35094eb",
      "registry": "ghcr.io/tektum/traefik",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-traefik-3.7.10",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "3",
        "3.7.10",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:10:02Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/traefik@sha256:a0c7b4fd87095b32e4d7f3e944a0a413aaed7ef5af84e13976822c58e35094eb --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/traefik@sha256:a0c7b4fd87095b32e4d7f3e944a0a413aaed7ef5af84e13976822c58e35094eb",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/traefik@sha256:a0c7b4fd87095b32e4d7f3e944a0a413aaed7ef5af84e13976822c58e35094eb"
      },
      "version": "3.7.10"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Traefik built from pinned source with plain and Go FIPS flavors.",
      "digest": "sha256:7162b04e1b6fcb3b68b5114853449cf62427fbc0b57ce3097cc94b4928545635",
      "inputDigest": "sha256:fca5dc6887d458653d25ff3a74bc3563fe97432a155fe21857dc5f2ef3ac4409",
      "name": "traefik",
      "reference": "ghcr.io/tektum/traefik@sha256:7162b04e1b6fcb3b68b5114853449cf62427fbc0b57ce3097cc94b4928545635",
      "registry": "ghcr.io/tektum/traefik",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-traefik-3.7.10-fips",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "3-fips",
        "3.7.10-fips",
        "latest-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:09:50Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/traefik@sha256:7162b04e1b6fcb3b68b5114853449cf62427fbc0b57ce3097cc94b4928545635 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/traefik@sha256:7162b04e1b6fcb3b68b5114853449cf62427fbc0b57ce3097cc94b4928545635",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/traefik@sha256:7162b04e1b6fcb3b68b5114853449cf62427fbc0b57ce3097cc94b4928545635"
      },
      "version": "3.7.10-fips"
    },
    {
      "category": "Security & Identity",
      "description": "Vulnerability and misconfiguration scanner.",
      "digest": "sha256:18979bad367c1690e0ec26acdb168b177919fcaebbe3b056665e8e20a14893cf",
      "inputDigest": "sha256:307b3f8987728009f5ff683e207c6b3a65558de8514955769b38d27b3a891d8d",
      "name": "trivy",
      "reference": "ghcr.io/tektum/trivy@sha256:18979bad367c1690e0ec26acdb168b177919fcaebbe3b056665e8e20a14893cf",
      "registry": "ghcr.io/tektum/trivy",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-trivy-0.73.0",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "0.73.0",
        "0.73.0-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:11:06Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/trivy@sha256:18979bad367c1690e0ec26acdb168b177919fcaebbe3b056665e8e20a14893cf --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/trivy@sha256:18979bad367c1690e0ec26acdb168b177919fcaebbe3b056665e8e20a14893cf",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/trivy@sha256:18979bad367c1690e0ec26acdb168b177919fcaebbe3b056665e8e20a14893cf"
      },
      "version": "0.73.0"
    },
    {
      "category": "Databases & Caching",
      "description": "Valkey 9.0 built from pinned source with CLI and persistent data support.",
      "digest": "sha256:034d13f6ad4002b1ad150172af1c08cc25f5b3431418ae400bc02fc862335e4f",
      "inputDigest": "sha256:321f17cba40447cfa167cd61f01c6db53ead6a33b60ef48dc3484ba978ef4d41",
      "name": "valkey",
      "reference": "ghcr.io/tektum/valkey@sha256:034d13f6ad4002b1ad150172af1c08cc25f5b3431418ae400bc02fc862335e4f",
      "registry": "ghcr.io/tektum/valkey",
      "runId": "32353173620",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/32353173620",
      "scan": {
        "all": {
          "critical": 4,
          "high": 16,
          "medium": 12
        },
        "fixable": 0
      },
      "scanArtifact": "scan-valkey-9.0",
      "sourceCommit": "09b58fd8d2c6b095e52d784adc2e16db43985ab4",
      "tags": [
        "9.0",
        "9.0-20260820",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-20T09:34:42Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/valkey@sha256:034d13f6ad4002b1ad150172af1c08cc25f5b3431418ae400bc02fc862335e4f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/valkey@sha256:034d13f6ad4002b1ad150172af1c08cc25f5b3431418ae400bc02fc862335e4f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/valkey@sha256:034d13f6ad4002b1ad150172af1c08cc25f5b3431418ae400bc02fc862335e4f"
      },
      "version": "9.0"
    },
    {
      "description": "Minimal Vector stdin-to-console observability pipeline built from source on Wolfi.",
      "digest": "sha256:663904a41c0bbb72ee0046516a01597ab454d89a4586e858f08aa168e647d1d8",
      "inputDigest": "sha256:25386ea8bb4a66508a507af34e6e67d35c9d02a58115eb748bd8bd46875beff6",
      "name": "vector",
      "reference": "ghcr.io/tektum/vector@sha256:663904a41c0bbb72ee0046516a01597ab454d89a4586e858f08aa168e647d1d8",
      "registry": "ghcr.io/tektum/vector",
      "runId": "31868964386",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31868964386",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-vector-0.57",
      "sourceCommit": "e1e349c3d1827ba89b95c1aae30bd6f347881c78",
      "tags": [
        "0.57",
        "0.57-20260815",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-15T07:54:01Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/vector@sha256:663904a41c0bbb72ee0046516a01597ab454d89a4586e858f08aa168e647d1d8 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/vector@sha256:663904a41c0bbb72ee0046516a01597ab454d89a4586e858f08aa168e647d1d8",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/vector@sha256:663904a41c0bbb72ee0046516a01597ab454d89a4586e858f08aa168e647d1d8"
      },
      "version": "0.57"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes backup and restore from pinned upstream source.",
      "digest": "sha256:a3add1614cacd9b27d88c165b58a79e638469d9f0afffb11cff640d384024e1c",
      "inputDigest": "sha256:4254551ed64ea4696583f5cee58afe37b353fe049da2d2e4ff34ea6e412ab469",
      "name": "velero",
      "reference": "ghcr.io/tektum/velero@sha256:a3add1614cacd9b27d88c165b58a79e638469d9f0afffb11cff640d384024e1c",
      "registry": "ghcr.io/tektum/velero",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-velero-1.18.2",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "1.18.2",
        "1.18.2-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:07:41Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/velero@sha256:a3add1614cacd9b27d88c165b58a79e638469d9f0afffb11cff640d384024e1c --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/velero@sha256:a3add1614cacd9b27d88c165b58a79e638469d9f0afffb11cff640d384024e1c",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/velero@sha256:a3add1614cacd9b27d88c165b58a79e638469d9f0afffb11cff640d384024e1c"
      },
      "version": "1.18.2"
    },
    {
      "category": "Base & Utilities",
      "description": "Small interactive Wolfi base with apk and BusyBox.",
      "digest": "sha256:3f800eaa63c6789c4fb67da9a267dc1639074b1cb5e64ef63142b66e6fc10060",
      "inputDigest": "sha256:245e00a2389e3c189fd65f6b1de081ce5506ed9279f1f08e02075f3aa1eb8883",
      "name": "wolfi-base",
      "reference": "ghcr.io/tektum/wolfi-base@sha256:3f800eaa63c6789c4fb67da9a267dc1639074b1cb5e64ef63142b66e6fc10060",
      "registry": "ghcr.io/tektum/wolfi-base",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-wolfi-base-wolfi",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "wolfi",
        "wolfi-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:09:35Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/wolfi-base@sha256:3f800eaa63c6789c4fb67da9a267dc1639074b1cb5e64ef63142b66e6fc10060 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/wolfi-base@sha256:3f800eaa63c6789c4fb67da9a267dc1639074b1cb5e64ef63142b66e6fc10060",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/wolfi-base@sha256:3f800eaa63c6789c4fb67da9a267dc1639074b1cb5e64ef63142b66e6fc10060"
      },
      "version": "wolfi"
    },
    {
      "category": "Base & Utilities",
      "description": "Minimal yq image assembled from Wolfi packages.",
      "digest": "sha256:f34022f00701d8ab2fbe76f7805c6b0c249f448f5808d09a2e9ca1546b1a3d54",
      "inputDigest": "sha256:a4e0606315fc7513c90a35e34a09d89f5a8b3dc33bb4459d446ed6635cc732a5",
      "name": "yq",
      "reference": "ghcr.io/tektum/yq@sha256:f34022f00701d8ab2fbe76f7805c6b0c249f448f5808d09a2e9ca1546b1a3d54",
      "registry": "ghcr.io/tektum/yq",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-yq-4",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "4",
        "4-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:01:07Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/yq@sha256:f34022f00701d8ab2fbe76f7805c6b0c249f448f5808d09a2e9ca1546b1a3d54 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/yq@sha256:f34022f00701d8ab2fbe76f7805c6b0c249f448f5808d09a2e9ca1546b1a3d54",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/yq@sha256:f34022f00701d8ab2fbe76f7805c6b0c249f448f5808d09a2e9ca1546b1a3d54"
      },
      "version": "4"
    },
    {
      "description": "Apache ZooKeeper 3.9 coordination service built from pinned source.",
      "digest": "sha256:01d6d3532d01013d4e08ebcce02414217bccfdd4f70fe5dabbba75083acab512",
      "inputDigest": "sha256:c9de0f9694bf6e37800716306db98a3c085d7c3f3ea1b6d16bcb2e3db1e22e6d",
      "name": "zookeeper",
      "reference": "ghcr.io/tektum/zookeeper@sha256:01d6d3532d01013d4e08ebcce02414217bccfdd4f70fe5dabbba75083acab512",
      "registry": "ghcr.io/tektum/zookeeper",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {
          "high": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-zookeeper-3.9",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "3.9",
        "3.9-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:20:32Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/zookeeper@sha256:01d6d3532d01013d4e08ebcce02414217bccfdd4f70fe5dabbba75083acab512 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/zookeeper@sha256:01d6d3532d01013d4e08ebcce02414217bccfdd4f70fe5dabbba75083acab512",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/zookeeper@sha256:01d6d3532d01013d4e08ebcce02414217bccfdd4f70fe5dabbba75083acab512"
      },
      "version": "3.9"
    },
    {
      "description": "Zot 2.1.20 OCI registry built from a pinned upstream source commit.",
      "digest": "sha256:da77434e9859020c109a58e084d916b71fc5d814354438ccb7841a5b2a975a3b",
      "inputDigest": "sha256:ea34cf661d8dab1ea5fce9380576e64390367b95b641d5ddd0e7a0e27387c320",
      "name": "zot",
      "reference": "ghcr.io/tektum/zot@sha256:da77434e9859020c109a58e084d916b71fc5d814354438ccb7841a5b2a975a3b",
      "registry": "ghcr.io/tektum/zot",
      "runId": "31738535795",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/31738535795",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-zot-2.1.20",
      "sourceCommit": "04cc2db70e28dad956bba5b7c74cf2a191fa6b8b",
      "tags": [
        "2.1.20",
        "2.1.20-20260813",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-08-13T20:18:39Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/zot@sha256:da77434e9859020c109a58e084d916b71fc5d814354438ccb7841a5b2a975a3b --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/zot@sha256:da77434e9859020c109a58e084d916b71fc5d814354438ccb7841a5b2a975a3b",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/zot@sha256:da77434e9859020c109a58e084d916b71fc5d814354438ccb7841a5b2a975a3b"
      },
      "version": "2.1.20"
    }
  ],
  "policy": {
    "certificateIdentity": "https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main",
    "certificateIssuer": "https://token.actions.githubusercontent.com",
    "cosignMinimumVersion": "3.0.6",
    "fixableVulnerabilitiesAllowed": 0,
    "sbomFormat": "SPDX-JSON"
  },
  "publishedAt": "2026-08-20T10:26:53Z",
  "schemaVersion": 2,
  "source": {
    "commit": "cf504d14104995abdba2b9cb61c2b6f4dd6f8482",
    "runId": "32355265584",
    "runUrl": "https://github.com/tektum/verity-images/actions/runs/32355265584"
  }
}