{
  "images": [
    {
      "category": "Monitoring & Observability",
      "description": "Prometheus Alertmanager built from pinned upstream source.",
      "digest": "sha256:3b811b2cb475f3597ca7b7b07926d881f039bc0bf0841e7cab216831cee735fc",
      "inputDigest": "sha256:e83b92ead741a384d0ced499fb1f2b5c0348138f47b2d3ac110e5132b267fca9",
      "name": "alertmanager",
      "reference": "ghcr.io/tektum/alertmanager@sha256:3b811b2cb475f3597ca7b7b07926d881f039bc0bf0841e7cab216831cee735fc",
      "registry": "ghcr.io/tektum/alertmanager",
      "runId": "38785775415",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38785775415",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-alertmanager-0",
      "sourceCommit": "8fc09de08fefe8c630a15160b7061f89ab8316e3",
      "tags": [
        "0",
        "0-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T18:41:45Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/alertmanager@sha256:3b811b2cb475f3597ca7b7b07926d881f039bc0bf0841e7cab216831cee735fc --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/alertmanager@sha256:3b811b2cb475f3597ca7b7b07926d881f039bc0bf0841e7cab216831cee735fc",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/alertmanager@sha256:3b811b2cb475f3597ca7b7b07926d881f039bc0bf0841e7cab216831cee735fc"
      },
      "version": "0"
    },
    {
      "description": "Argo Workflows executor built from a pinned upstream source release.",
      "digest": "sha256:da00b749b068f245fecdbff09db580416e38de402a00f3cc9fa80aafc81aa1c0",
      "inputDigest": "sha256:08d6952b0db871060f47130e6593c655b275b66a97aec19b3c1999fa121083d3",
      "name": "argo-workflows",
      "reference": "ghcr.io/tektum/argo-workflows@sha256:da00b749b068f245fecdbff09db580416e38de402a00f3cc9fa80aafc81aa1c0",
      "registry": "ghcr.io/tektum/argo-workflows",
      "runId": "38705900650",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705900650",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-argo-workflows-4.1",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "4.1",
        "4.1-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T09:19:00Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/argo-workflows@sha256:da00b749b068f245fecdbff09db580416e38de402a00f3cc9fa80aafc81aa1c0 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/argo-workflows@sha256:da00b749b068f245fecdbff09db580416e38de402a00f3cc9fa80aafc81aa1c0",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/argo-workflows@sha256:da00b749b068f245fecdbff09db580416e38de402a00f3cc9fa80aafc81aa1c0"
      },
      "version": "4.1"
    },
    {
      "description": "Argo CD built from a pinned upstream source release.",
      "digest": "sha256:544e778096dfa386187fddc5bc99127d4956a35ff9cf43e7b86d13635f69d155",
      "inputDigest": "sha256:d6e3b2059bf4bacf0b260edf84b81a9f4b1fdcb517ba01693f5cd4497c5b224b",
      "name": "argocd",
      "reference": "ghcr.io/tektum/argocd@sha256:544e778096dfa386187fddc5bc99127d4956a35ff9cf43e7b86d13635f69d155",
      "registry": "ghcr.io/tektum/argocd",
      "runId": "37765606707",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/37765606707",
      "scan": {
        "all": {
          "low": 2,
          "unknown": 6
        },
        "fixable": 0
      },
      "scanArtifact": "scan-argocd-3.5",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "3.5",
        "3.5-20261008",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-08T11:52:50Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/argocd@sha256:544e778096dfa386187fddc5bc99127d4956a35ff9cf43e7b86d13635f69d155 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/argocd@sha256:544e778096dfa386187fddc5bc99127d4956a35ff9cf43e7b86d13635f69d155",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/argocd@sha256:544e778096dfa386187fddc5bc99127d4956a35ff9cf43e7b86d13635f69d155"
      },
      "version": "3.5"
    },
    {
      "category": "Base & Utilities",
      "description": "Syntax-highlighting cat replacement assembled from Wolfi packages.",
      "digest": "sha256:027272648619b1cad7707e243bc127121daca3980c220fd45835286dc3f00fb7",
      "inputDigest": "sha256:a7eef39683efe1cf7633ff83222cb5330df792066cfff07a0a3b846c0cd1f6c6",
      "name": "bat",
      "reference": "ghcr.io/tektum/bat@sha256:027272648619b1cad7707e243bc127121daca3980c220fd45835286dc3f00fb7",
      "registry": "ghcr.io/tektum/bat",
      "runId": "38705906962",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705906962",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-bat-0",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "0",
        "0-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T09:02:27Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/bat@sha256:027272648619b1cad7707e243bc127121daca3980c220fd45835286dc3f00fb7 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/bat@sha256:027272648619b1cad7707e243bc127121daca3980c220fd45835286dc3f00fb7",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/bat@sha256:027272648619b1cad7707e243bc127121daca3980c220fd45835286dc3f00fb7"
      },
      "version": "0"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Bazel build system assembled from Wolfi packages.",
      "digest": "sha256:0ae0818dacb312e9f117e7068d08283f931dcf6cfdf6447b6e1b9804c6fed4c2",
      "inputDigest": "sha256:fc2b42f3ce82817cdfa9f675705586cc912fa2f036194df3fd0793aee127e65a",
      "name": "bazel",
      "reference": "ghcr.io/tektum/bazel@sha256:0ae0818dacb312e9f117e7068d08283f931dcf6cfdf6447b6e1b9804c6fed4c2",
      "registry": "ghcr.io/tektum/bazel",
      "runId": "36458447285",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36458447285",
      "scan": {
        "all": {
          "medium": 10
        },
        "fixable": 0
      },
      "scanArtifact": "scan-bazel-9",
      "sourceCommit": "284aed568ada93d16d1a5a4ee0f32de0f86d3bcd",
      "tags": [
        "9",
        "9-20260928",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-28T17:33:53Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/bazel@sha256:0ae0818dacb312e9f117e7068d08283f931dcf6cfdf6447b6e1b9804c6fed4c2 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/bazel@sha256:0ae0818dacb312e9f117e7068d08283f931dcf6cfdf6447b6e1b9804c6fed4c2",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/bazel@sha256:0ae0818dacb312e9f117e7068d08283f931dcf6cfdf6447b6e1b9804c6fed4c2"
      },
      "version": "9"
    },
    {
      "category": "Monitoring & Observability",
      "description": "Prometheus Blackbox Exporter built from pinned upstream source.",
      "digest": "sha256:aaed34d89a8e809f0aeb2ed55d2cc8e46aa8df1b376df475039d128f8f1d5f34",
      "inputDigest": "sha256:b500b2aae0343ae584485eda5da1a87568d474e0330d504afcdff5e5f618c53c",
      "name": "blackbox-exporter",
      "reference": "ghcr.io/tektum/blackbox-exporter@sha256:aaed34d89a8e809f0aeb2ed55d2cc8e46aa8df1b376df475039d128f8f1d5f34",
      "registry": "ghcr.io/tektum/blackbox-exporter",
      "runId": "38705910028",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705910028",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-blackbox-exporter-0.28.0",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "0.28.0",
        "0.28.0-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:42:34Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/blackbox-exporter@sha256:aaed34d89a8e809f0aeb2ed55d2cc8e46aa8df1b376df475039d128f8f1d5f34 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/blackbox-exporter@sha256:aaed34d89a8e809f0aeb2ed55d2cc8e46aa8df1b376df475039d128f8f1d5f34",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/blackbox-exporter@sha256:aaed34d89a8e809f0aeb2ed55d2cc8e46aa8df1b376df475039d128f8f1d5f34"
      },
      "version": "0.28.0"
    },
    {
      "category": "Base & Utilities",
      "description": "Docker Official BusyBox byte-identical mirror.",
      "digest": "sha256:1fb6008d891733dc177f67317d2fa13307d9fd91ade04aed760722ab0a6c0c8d",
      "inputDigest": "sha256:0295c637358406328ceb60c39d38b8447b1903494f365800093c3ab2c87368ea",
      "name": "busybox",
      "reference": "ghcr.io/tektum/busybox@sha256:1fb6008d891733dc177f67317d2fa13307d9fd91ade04aed760722ab0a6c0c8d",
      "registry": "ghcr.io/tektum/busybox",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "delta": {
          "high": 0
        },
        "final": {
          "high": 6
        },
        "fixable": 0,
        "upstream": {
          "high": 6
        }
      },
      "scanArtifact": "scan-busybox-1.38.0",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "1.38.0",
        "1.38.0-20260907",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-07T16:36:33Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/busybox@sha256:1fb6008d891733dc177f67317d2fa13307d9fd91ade04aed760722ab0a6c0c8d --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/busybox@sha256:1fb6008d891733dc177f67317d2fa13307d9fd91ade04aed760722ab0a6c0c8d",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/busybox@sha256:1fb6008d891733dc177f67317d2fa13307d9fd91ade04aed760722ab0a6c0c8d"
      },
      "version": "1.38.0"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Caddy built from pinned source with plain and Go FIPS flavors.",
      "digest": "sha256:aa65acbbb7adb12606fbaabc4762c16911aecd94049fbfa8b72277082ac65ee4",
      "inputDigest": "sha256:1c348d9713bff5c2264a88e07fc270ab5255b283f418892531708fdd9d5894ef",
      "name": "caddy",
      "reference": "ghcr.io/tektum/caddy@sha256:aa65acbbb7adb12606fbaabc4762c16911aecd94049fbfa8b72277082ac65ee4",
      "registry": "ghcr.io/tektum/caddy",
      "runId": "38734295991",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38734295991",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-caddy-2.11.7",
      "sourceCommit": "0567b052999542ab441df29e74c832eec304cdf0",
      "tags": [
        "2",
        "2.11.7",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T12:44:11Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/caddy@sha256:aa65acbbb7adb12606fbaabc4762c16911aecd94049fbfa8b72277082ac65ee4 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/caddy@sha256:aa65acbbb7adb12606fbaabc4762c16911aecd94049fbfa8b72277082ac65ee4",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/caddy@sha256:aa65acbbb7adb12606fbaabc4762c16911aecd94049fbfa8b72277082ac65ee4"
      },
      "version": "2.11.7"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Caddy built from pinned source with plain and Go FIPS flavors.",
      "digest": "sha256:0fdc87b51b2b9ba5786e1b478f99055389504fc464762e75f5646aa28ccc6c54",
      "inputDigest": "sha256:5a3418e659817daee901a57ad67505d050cafbd3fc8a870570341be5de48f8f7",
      "name": "caddy",
      "reference": "ghcr.io/tektum/caddy@sha256:0fdc87b51b2b9ba5786e1b478f99055389504fc464762e75f5646aa28ccc6c54",
      "registry": "ghcr.io/tektum/caddy",
      "runId": "38734295991",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38734295991",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-caddy-2.11.7-fips",
      "sourceCommit": "0567b052999542ab441df29e74c832eec304cdf0",
      "tags": [
        "2-fips",
        "2.11.7-fips",
        "latest-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T12:44:27Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/caddy@sha256:0fdc87b51b2b9ba5786e1b478f99055389504fc464762e75f5646aa28ccc6c54 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/caddy@sha256:0fdc87b51b2b9ba5786e1b478f99055389504fc464762e75f5646aa28ccc6c54",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/caddy@sha256:0fdc87b51b2b9ba5786e1b478f99055389504fc464762e75f5646aa28ccc6c54"
      },
      "version": "2.11.7-fips"
    },
    {
      "category": "Databases & Caching",
      "description": "Apache Cassandra distributed NoSQL database assembled from Wolfi packages.",
      "digest": "sha256:09ec3a3c38d28075238e86ff3928fa9831476b1d6f8edd0f257410630729b6d4",
      "inputDigest": "sha256:244f024b8c0102d727faffd5efe2eb98c3fa5978a4e3e8d0d3f4fe2502dec2ac",
      "name": "cassandra",
      "reference": "ghcr.io/tektum/cassandra@sha256:09ec3a3c38d28075238e86ff3928fa9831476b1d6f8edd0f257410630729b6d4",
      "registry": "ghcr.io/tektum/cassandra",
      "runId": "38736097140",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38736097140",
      "scan": {
        "all": {
          "medium": 18,
          "negligible": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-cassandra-5.0",
      "sourceCommit": "6ff27a9d90d1c00267658b88b67b2cd01a217f7c",
      "tags": [
        "5.0",
        "5.0-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T13:27:48Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/cassandra@sha256:09ec3a3c38d28075238e86ff3928fa9831476b1d6f8edd0f257410630729b6d4 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cassandra@sha256:09ec3a3c38d28075238e86ff3928fa9831476b1d6f8edd0f257410630729b6d4",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cassandra@sha256:09ec3a3c38d28075238e86ff3928fa9831476b1d6f8edd0f257410630729b6d4"
      },
      "version": "5.0"
    },
    {
      "description": "Kubernetes controller for automated certificate issuance and renewal.",
      "digest": "sha256:ddbdba974cd571ef4fbc835da475dc99e0334977e16bbe11512b691f8d67a90b",
      "inputDigest": "sha256:12a5d38baeaea4f78f298d67a1a8e2604eafdbed8c8b5b87fdd1352816912fac",
      "name": "cert-manager-controller",
      "reference": "ghcr.io/tektum/cert-manager-controller@sha256:ddbdba974cd571ef4fbc835da475dc99e0334977e16bbe11512b691f8d67a90b",
      "registry": "ghcr.io/tektum/cert-manager-controller",
      "runId": "38705916983",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705916983",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-cert-manager-controller-1.19",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.19",
        "1.19-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:51:23Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/cert-manager-controller@sha256:ddbdba974cd571ef4fbc835da475dc99e0334977e16bbe11512b691f8d67a90b --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cert-manager-controller@sha256:ddbdba974cd571ef4fbc835da475dc99e0334977e16bbe11512b691f8d67a90b",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cert-manager-controller@sha256:ddbdba974cd571ef4fbc835da475dc99e0334977e16bbe11512b691f8d67a90b"
      },
      "version": "1.19"
    },
    {
      "category": "Databases & Caching",
      "description": "ClickHouse column-oriented database assembled from Wolfi packages.",
      "digest": "sha256:94a6722bba61a2586b63cb66f191f9870ffdec4a2302bb8cca3e6dabc8ee461d",
      "inputDigest": "sha256:d534b1088ed9264f3fb2e14a2684745e76b9c6dee5c4c3224ace63bf3102c356",
      "name": "clickhouse",
      "reference": "ghcr.io/tektum/clickhouse@sha256:94a6722bba61a2586b63cb66f191f9870ffdec4a2302bb8cca3e6dabc8ee461d",
      "registry": "ghcr.io/tektum/clickhouse",
      "runId": "38937796073",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38937796073",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-clickhouse-26.5",
      "sourceCommit": "8aa16b573913d02fb60230dfc559ed75c37df386",
      "tags": [
        "26.5",
        "26.5-20261016",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T17:17:11Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/clickhouse@sha256:94a6722bba61a2586b63cb66f191f9870ffdec4a2302bb8cca3e6dabc8ee461d --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/clickhouse@sha256:94a6722bba61a2586b63cb66f191f9870ffdec4a2302bb8cca3e6dabc8ee461d",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/clickhouse@sha256:94a6722bba61a2586b63cb66f191f9870ffdec4a2302bb8cca3e6dabc8ee461d"
      },
      "version": "26.5"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes Cluster Autoscaler assembled from Wolfi packages.",
      "digest": "sha256:e89fbfc39bf0728ac3a94f5054827a0884e219fcf6cc053d80f26cca8d9c9b68",
      "inputDigest": "sha256:6dd5096fe4a42f0525ab59148b2f0c66e7736c2a88afcd0a1265d2e3dfbbd29e",
      "name": "cluster-autoscaler",
      "reference": "ghcr.io/tektum/cluster-autoscaler@sha256:e89fbfc39bf0728ac3a94f5054827a0884e219fcf6cc053d80f26cca8d9c9b68",
      "registry": "ghcr.io/tektum/cluster-autoscaler",
      "runId": "38705920295",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705920295",
      "scan": {
        "all": {
          "low": 2,
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-cluster-autoscaler-1.36",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.36",
        "1.36-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T09:10:43Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/cluster-autoscaler@sha256:e89fbfc39bf0728ac3a94f5054827a0884e219fcf6cc053d80f26cca8d9c9b68 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cluster-autoscaler@sha256:e89fbfc39bf0728ac3a94f5054827a0884e219fcf6cc053d80f26cca8d9c9b68",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cluster-autoscaler@sha256:e89fbfc39bf0728ac3a94f5054827a0884e219fcf6cc053d80f26cca8d9c9b68"
      },
      "version": "1.36"
    },
    {
      "description": "Cross-platform build system assembled from pinned upstream source.",
      "digest": "sha256:95fe13c0177fb8b1d3e43042c8164e832a1a4faae99676aeb69724a17e764041",
      "inputDigest": "sha256:54b9cbd5d2a67c4351337b69fed0b089abb6de9e88aa79412ea40632b1fac75a",
      "name": "cmake",
      "reference": "ghcr.io/tektum/cmake@sha256:95fe13c0177fb8b1d3e43042c8164e832a1a4faae99676aeb69724a17e764041",
      "registry": "ghcr.io/tektum/cmake",
      "runId": "35201603677",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/35201603677",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-cmake-4.1",
      "sourceCommit": "436263074efad0e50361e41458a303d6bab109df",
      "tags": [
        "4.1",
        "4.1-20260917",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-17T10:48:20Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/cmake@sha256:95fe13c0177fb8b1d3e43042c8164e832a1a4faae99676aeb69724a17e764041 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cmake@sha256:95fe13c0177fb8b1d3e43042c8164e832a1a4faae99676aeb69724a17e764041",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cmake@sha256:95fe13c0177fb8b1d3e43042c8164e832a1a4faae99676aeb69724a17e764041"
      },
      "version": "4.1"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "ConfigMap and Secret volume watcher with webhook-triggered reloads.",
      "digest": "sha256:23f57d64149b4a55bcbf60804c1d5a39efdf89c3043e99e7e4f4b2308a6a049c",
      "inputDigest": "sha256:13e2439fbd170dc79fdc817224522f51cf65d1c29a19b7982da48430621c4a47",
      "name": "configmap-reload",
      "reference": "ghcr.io/tektum/configmap-reload@sha256:23f57d64149b4a55bcbf60804c1d5a39efdf89c3043e99e7e4f4b2308a6a049c",
      "registry": "ghcr.io/tektum/configmap-reload",
      "runId": "38538417244",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38538417244",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-configmap-reload-latest",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "latest",
        "latest-20261014"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-14T09:04:36Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/configmap-reload@sha256:23f57d64149b4a55bcbf60804c1d5a39efdf89c3043e99e7e4f4b2308a6a049c --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/configmap-reload@sha256:23f57d64149b4a55bcbf60804c1d5a39efdf89c3043e99e7e4f4b2308a6a049c",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/configmap-reload@sha256:23f57d64149b4a55bcbf60804c1d5a39efdf89c3043e99e7e4f4b2308a6a049c"
      },
      "version": "latest"
    },
    {
      "description": "Contour Kubernetes ingress controller built from a pinned upstream source commit.",
      "digest": "sha256:6f8ad23aa7e127e71c76f98d2a0944a073b731044b2498d097eef9396efc8b10",
      "inputDigest": "sha256:6900e90b1ed3f78c61ff0eb623b2d05e17616629b42643798a588ca89ea84e47",
      "name": "contour",
      "reference": "ghcr.io/tektum/contour@sha256:6f8ad23aa7e127e71c76f98d2a0944a073b731044b2498d097eef9396efc8b10",
      "registry": "ghcr.io/tektum/contour",
      "runId": "38705927044",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705927044",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-contour-1.33",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.33",
        "1.33-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:49:03Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/contour@sha256:6f8ad23aa7e127e71c76f98d2a0944a073b731044b2498d097eef9396efc8b10 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/contour@sha256:6f8ad23aa7e127e71c76f98d2a0944a073b731044b2498d097eef9396efc8b10",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/contour@sha256:6f8ad23aa7e127e71c76f98d2a0944a073b731044b2498d097eef9396efc8b10"
      },
      "version": "1.33"
    },
    {
      "category": "Service Mesh & Networking",
      "description": "Extensible DNS server with a plugin-based configuration model.",
      "digest": "sha256:c6e68dbef6e813a9cd7dab45e0821621cd186c8f587172ec5c8e44893dc26fa0",
      "inputDigest": "sha256:ace183ac074d35386e979932ab722b3da5ea9238b806e476e1f35653efc39c43",
      "name": "coredns",
      "reference": "ghcr.io/tektum/coredns@sha256:c6e68dbef6e813a9cd7dab45e0821621cd186c8f587172ec5c8e44893dc26fa0",
      "registry": "ghcr.io/tektum/coredns",
      "runId": "38705930163",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705930163",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-coredns-1.14",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.14",
        "1.14-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:47:42Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/coredns@sha256:c6e68dbef6e813a9cd7dab45e0821621cd186c8f587172ec5c8e44893dc26fa0 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/coredns@sha256:c6e68dbef6e813a9cd7dab45e0821621cd186c8f587172ec5c8e44893dc26fa0",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/coredns@sha256:c6e68dbef6e813a9cd7dab45e0821621cd186c8f587172ec5c8e44893dc26fa0"
      },
      "version": "1.14"
    },
    {
      "category": "Security & Identity",
      "description": "Minimal Sigstore Cosign image assembled from Wolfi packages.",
      "digest": "sha256:1f7df14eb99f025bd3c8bac850c1f6b1f869e308be44c885240667ac2cdd3972",
      "inputDigest": "sha256:42d32e91d6473fe7624fbd1094be2fbf8cc06bc08695b12c182cf7b277bee30e",
      "name": "cosign",
      "reference": "ghcr.io/tektum/cosign@sha256:1f7df14eb99f025bd3c8bac850c1f6b1f869e308be44c885240667ac2cdd3972",
      "registry": "ghcr.io/tektum/cosign",
      "runId": "38907432951",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38907432951",
      "scan": {
        "all": {
          "unknown": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-cosign-2",
      "sourceCommit": "f24c643852115bb8f6896ef6fbedf8c25995c0f4",
      "tags": [
        "2",
        "2-20261016",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T13:27:07Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/cosign@sha256:1f7df14eb99f025bd3c8bac850c1f6b1f869e308be44c885240667ac2cdd3972 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cosign@sha256:1f7df14eb99f025bd3c8bac850c1f6b1f869e308be44c885240667ac2cdd3972",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/cosign@sha256:1f7df14eb99f025bd3c8bac850c1f6b1f869e308be44c885240667ac2cdd3972"
      },
      "version": "2"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Crossplane cloud native control plane built from pinned source.",
      "digest": "sha256:cf5b4f312e7a9bd5190b745191e311e2b93cc4a4de701d71bc9319385542ab3b",
      "inputDigest": "sha256:bd002752135142bc7fc017cc604f5448dd0dc3ff114af1bdd1603e000ff78ad5",
      "name": "crossplane",
      "reference": "ghcr.io/tektum/crossplane@sha256:cf5b4f312e7a9bd5190b745191e311e2b93cc4a4de701d71bc9319385542ab3b",
      "registry": "ghcr.io/tektum/crossplane",
      "runId": "38705933374",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705933374",
      "scan": {
        "all": {
          "unknown": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-crossplane-2.3.4",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "2",
        "2.3.4",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:50:27Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/crossplane@sha256:cf5b4f312e7a9bd5190b745191e311e2b93cc4a4de701d71bc9319385542ab3b --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/crossplane@sha256:cf5b4f312e7a9bd5190b745191e311e2b93cc4a4de701d71bc9319385542ab3b",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/crossplane@sha256:cf5b4f312e7a9bd5190b745191e311e2b93cc4a4de701d71bc9319385542ab3b"
      },
      "version": "2.3.4"
    },
    {
      "category": "Base & Utilities",
      "description": "curl HTTP client.",
      "digest": "sha256:e2c0015e1ae2381ea76329a7864829d095759d5a60e7c472c547180fbc02901a",
      "inputDigest": "sha256:3248b5022004ee94d1446c0d9226afa418caaedfe1a8e708363a18d4adb2c7c7",
      "name": "curl",
      "reference": "ghcr.io/tektum/curl@sha256:e2c0015e1ae2381ea76329a7864829d095759d5a60e7c472c547180fbc02901a",
      "registry": "ghcr.io/tektum/curl",
      "runId": "35102610705",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/35102610705",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-curl-8",
      "sourceCommit": "83d98283a5991181d1119b9ec401a1a8e791fa4d",
      "tags": [
        "8",
        "8-20260916",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-16T13:35:20Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/curl@sha256:e2c0015e1ae2381ea76329a7864829d095759d5a60e7c472c547180fbc02901a --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/curl@sha256:e2c0015e1ae2381ea76329a7864829d095759d5a60e7c472c547180fbc02901a",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/curl@sha256:e2c0015e1ae2381ea76329a7864829d095759d5a60e7c472c547180fbc02901a"
      },
      "version": "8"
    },
    {
      "category": "Base & Utilities",
      "description": "Debian slim patched with Copacetic from fixable Trivy findings.",
      "digest": "sha256:7318f9d367fc4aa81376177f3a0a360e01c52933a0a9925fcd1a5785e412ead7",
      "inputDigest": "sha256:8163b9fb9f9c9857c06cf117e42632d5817e5f6bb312570082c6cd840f302aef",
      "name": "debian-12-slim",
      "reference": "ghcr.io/tektum/debian-12-slim@sha256:7318f9d367fc4aa81376177f3a0a360e01c52933a0a9925fcd1a5785e412ead7",
      "registry": "ghcr.io/tektum/debian-12-slim",
      "runId": "38729722510",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38729722510",
      "scan": {
        "delta": {
          "critical": -10,
          "high": -18,
          "low": 0,
          "medium": -12,
          "negligible": 0
        },
        "final": {
          "critical": 4,
          "high": 140,
          "low": 26,
          "medium": 144,
          "negligible": 130
        },
        "fixable": 0,
        "upstream": {
          "critical": 14,
          "high": 158,
          "low": 26,
          "medium": 156,
          "negligible": 130
        }
      },
      "scanArtifact": "scan-debian-12-slim-12",
      "sourceCommit": "8125181b61b94c3a2624c4012b3795de4dc9d0a1",
      "tags": [
        "12",
        "12-20261015",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-10-15T11:50:47Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/debian-12-slim@sha256:7318f9d367fc4aa81376177f3a0a360e01c52933a0a9925fcd1a5785e412ead7 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/debian-12-slim@sha256:7318f9d367fc4aa81376177f3a0a360e01c52933a0a9925fcd1a5785e412ead7",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/debian-12-slim@sha256:7318f9d367fc4aa81376177f3a0a360e01c52933a0a9925fcd1a5785e412ead7"
      },
      "version": "12"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Deno JavaScript and TypeScript runtime assembled from Wolfi packages.",
      "digest": "sha256:5c43d1e9721bfe2ce085c9a200ae61fbcd2cbd7ab8c37bd5f0a4edc06e4b460e",
      "inputDigest": "sha256:d4f34c4a30d1df1d9e969b56ca1e1f6462e0e1b291052e75e4bf61f12781415a",
      "name": "deno",
      "reference": "ghcr.io/tektum/deno@sha256:5c43d1e9721bfe2ce085c9a200ae61fbcd2cbd7ab8c37bd5f0a4edc06e4b460e",
      "registry": "ghcr.io/tektum/deno",
      "runId": "34698289265",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34698289265",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-deno-2",
      "sourceCommit": "ddbbd1a9b2349195c7ac96cdf05c70ce33043cd9",
      "tags": [
        "2",
        "2-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T17:39:13Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/deno@sha256:5c43d1e9721bfe2ce085c9a200ae61fbcd2cbd7ab8c37bd5f0a4edc06e4b460e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/deno@sha256:5c43d1e9721bfe2ce085c9a200ae61fbcd2cbd7ab8c37bd5f0a4edc06e4b460e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/deno@sha256:5c43d1e9721bfe2ce085c9a200ae61fbcd2cbd7ab8c37bd5f0a4edc06e4b460e"
      },
      "version": "2"
    },
    {
      "category": "Logging",
      "description": "Elastic Cloud on Kubernetes operator.",
      "digest": "sha256:5c5c28669a0b4ff86020ca6be03633e405e038ad36a3c914e05dbdbea5092fad",
      "inputDigest": "sha256:acf34ce7fbad28f78241b808af724c11fd4b9938e784ecd414221b84bf07a700",
      "name": "eck-operator",
      "reference": "ghcr.io/tektum/eck-operator@sha256:5c5c28669a0b4ff86020ca6be03633e405e038ad36a3c914e05dbdbea5092fad",
      "registry": "ghcr.io/tektum/eck-operator",
      "runId": "35525831962",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/35525831962",
      "scan": {
        "delta": {
          "high": -24,
          "low": -6,
          "medium": -8,
          "unknown": 0
        },
        "final": {
          "unknown": 2
        },
        "fixable": 0,
        "upstream": {
          "high": 24,
          "low": 6,
          "medium": 8,
          "unknown": 2
        }
      },
      "scanArtifact": "scan-eck-operator-3.5.0",
      "sourceCommit": "990f8ed479614f90b5749bcacb91139d348e9aab",
      "tags": [
        "3.5.0",
        "3.5.0-20260920",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-20T17:32:58Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/eck-operator@sha256:5c5c28669a0b4ff86020ca6be03633e405e038ad36a3c914e05dbdbea5092fad --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/eck-operator@sha256:5c5c28669a0b4ff86020ca6be03633e405e038ad36a3c914e05dbdbea5092fad",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/eck-operator@sha256:5c5c28669a0b4ff86020ca6be03633e405e038ad36a3c914e05dbdbea5092fad"
      },
      "version": "3.5.0"
    },
    {
      "description": "EMQX patched from the official image.",
      "digest": "sha256:87adfc58ecc4a1530c03f0c87900d0dcd6e301616439abaf21348b22fdd33117",
      "inputDigest": "sha256:be198aed52828222eb4d58b81e5b33fb8b2561fb8976f58017427cc153a79c5a",
      "name": "emqx",
      "reference": "ghcr.io/tektum/emqx@sha256:87adfc58ecc4a1530c03f0c87900d0dcd6e301616439abaf21348b22fdd33117",
      "registry": "ghcr.io/tektum/emqx",
      "runId": "38705942949",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705942949",
      "scan": {
        "delta": {
          "critical": -18,
          "high": -196,
          "low": -38,
          "medium": -103,
          "negligible": 34,
          "unknown": 64
        },
        "final": {
          "critical": 24,
          "high": 162,
          "low": 20,
          "medium": 114,
          "negligible": 176,
          "unknown": 64
        },
        "fixable": 0,
        "upstream": {
          "critical": 42,
          "high": 358,
          "low": 58,
          "medium": 217,
          "negligible": 142
        }
      },
      "scanArtifact": "scan-emqx-5.10.4",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "5",
        "5.10.4",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-10-15T08:37:27Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/emqx@sha256:87adfc58ecc4a1530c03f0c87900d0dcd6e301616439abaf21348b22fdd33117 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/emqx@sha256:87adfc58ecc4a1530c03f0c87900d0dcd6e301616439abaf21348b22fdd33117",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/emqx@sha256:87adfc58ecc4a1530c03f0c87900d0dcd6e301616439abaf21348b22fdd33117"
      },
      "version": "5.10.4"
    },
    {
      "category": "Service Mesh & Networking",
      "description": "Cloud-native high-performance edge/middle/service proxy built from Wolfi packages.",
      "digest": "sha256:a9bba261e50b868bd53129e9e6c14322fe906bed11112ca969af0a73957e81d7",
      "inputDigest": "sha256:54398382ceb7013ed9a06d69fcfab3df0b7828f3bc32e4c9a0f6c737b00ac9ce",
      "name": "envoy",
      "reference": "ghcr.io/tektum/envoy@sha256:a9bba261e50b868bd53129e9e6c14322fe906bed11112ca969af0a73957e81d7",
      "registry": "ghcr.io/tektum/envoy",
      "runId": "34718315324",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34718315324",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-envoy-1.37",
      "sourceCommit": "b35fc153d9f313f465e1ee7c71df380c19a380b4",
      "tags": [
        "1.37",
        "1.37-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T20:57:56Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/envoy@sha256:a9bba261e50b868bd53129e9e6c14322fe906bed11112ca969af0a73957e81d7 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/envoy@sha256:a9bba261e50b868bd53129e9e6c14322fe906bed11112ca969af0a73957e81d7",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/envoy@sha256:a9bba261e50b868bd53129e9e6c14322fe906bed11112ca969af0a73957e81d7"
      },
      "version": "1.37"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Erlang/OTP runtime assembled from Wolfi packages.",
      "digest": "sha256:e3672d35a5878ff3a15dc1f340621d9f4b0e5841e31c824b93bf33666942bf5c",
      "inputDigest": "sha256:e535361154f9847271ee0139c777e1905d1b24efcef70d86ebeb28e4f42b6a48",
      "name": "erlang",
      "reference": "ghcr.io/tektum/erlang@sha256:e3672d35a5878ff3a15dc1f340621d9f4b0e5841e31c824b93bf33666942bf5c",
      "registry": "ghcr.io/tektum/erlang",
      "runId": "36458447285",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36458447285",
      "scan": {
        "all": {
          "medium": 8
        },
        "fixable": 0
      },
      "scanArtifact": "scan-erlang-28",
      "sourceCommit": "284aed568ada93d16d1a5a4ee0f32de0f86d3bcd",
      "tags": [
        "28",
        "28-20260928",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-28T17:33:05Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/erlang@sha256:e3672d35a5878ff3a15dc1f340621d9f4b0e5841e31c824b93bf33666942bf5c --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/erlang@sha256:e3672d35a5878ff3a15dc1f340621d9f4b0e5841e31c824b93bf33666942bf5c",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/erlang@sha256:e3672d35a5878ff3a15dc1f340621d9f4b0e5841e31c824b93bf33666942bf5c"
      },
      "version": "28"
    },
    {
      "category": "Databases & Caching",
      "description": "Distributed reliable key-value store for shared configuration and service discovery.",
      "digest": "sha256:4259074cf7ec90f08295ae5afd8569401c8538775b39f098aaed799113f5ccf4",
      "inputDigest": "sha256:20c5afa305e9275f224b314d083d09636f263dee024eec615c48a7bdedcbcea5",
      "name": "etcd",
      "reference": "ghcr.io/tektum/etcd@sha256:4259074cf7ec90f08295ae5afd8569401c8538775b39f098aaed799113f5ccf4",
      "registry": "ghcr.io/tektum/etcd",
      "runId": "38705945810",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705945810",
      "scan": {
        "all": {
          "unknown": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-etcd-3.7",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "3.7",
        "3.7-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:47:36Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/etcd@sha256:4259074cf7ec90f08295ae5afd8569401c8538775b39f098aaed799113f5ccf4 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/etcd@sha256:4259074cf7ec90f08295ae5afd8569401c8538775b39f098aaed799113f5ccf4",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/etcd@sha256:4259074cf7ec90f08295ae5afd8569401c8538775b39f098aaed799113f5ccf4"
      },
      "version": "3.7"
    },
    {
      "description": "Kubernetes DNS record controller built from a pinned upstream source commit.",
      "digest": "sha256:2d525c7a329666aa33f81c92c89aa4263ffa7438b5a3c9a00d0ae83a297dae79",
      "inputDigest": "sha256:0d3a7af89821246c60d542d1a547d2045e317c6038458b5d072088d2df930853",
      "name": "external-dns",
      "reference": "ghcr.io/tektum/external-dns@sha256:2d525c7a329666aa33f81c92c89aa4263ffa7438b5a3c9a00d0ae83a297dae79",
      "registry": "ghcr.io/tektum/external-dns",
      "runId": "38705949300",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705949300",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-external-dns-0.19.0",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "0.19.0",
        "0.19.0-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T09:01:11Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/external-dns@sha256:2d525c7a329666aa33f81c92c89aa4263ffa7438b5a3c9a00d0ae83a297dae79 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/external-dns@sha256:2d525c7a329666aa33f81c92c89aa4263ffa7438b5a3c9a00d0ae83a297dae79",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/external-dns@sha256:2d525c7a329666aa33f81c92c89aa4263ffa7438b5a3c9a00d0ae83a297dae79"
      },
      "version": "0.19.0"
    },
    {
      "category": "Security & Identity",
      "description": "External Secrets Operator built from pinned upstream source.",
      "digest": "sha256:557e06b3232ecfc4a15b3df49f15f7f53a1178a2219862608e5d3c693fc2b259",
      "inputDigest": "sha256:2a41f536306c4d6d021922876c685f2c46ac9be296bb3ec501ce7c19ec99544c",
      "name": "external-secrets",
      "reference": "ghcr.io/tektum/external-secrets@sha256:557e06b3232ecfc4a15b3df49f15f7f53a1178a2219862608e5d3c693fc2b259",
      "registry": "ghcr.io/tektum/external-secrets",
      "runId": "38705952736",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705952736",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-external-secrets-2.6.0",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "2.6.0",
        "2.6.0-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T09:29:42Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/external-secrets@sha256:557e06b3232ecfc4a15b3df49f15f7f53a1178a2219862608e5d3c693fc2b259 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/external-secrets@sha256:557e06b3232ecfc4a15b3df49f15f7f53a1178a2219862608e5d3c693fc2b259",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/external-secrets@sha256:557e06b3232ecfc4a15b3df49f15f7f53a1178a2219862608e5d3c693fc2b259"
      },
      "version": "2.6.0"
    },
    {
      "category": "Base & Utilities",
      "description": "Minimal fd image built from pinned upstream source.",
      "digest": "sha256:7c41208394015fdcf224953d3c5540286b3a385219989283e74bdab435308e48",
      "inputDigest": "sha256:1d287015b03ad8c13cd298833e09079bfda8fee89392235a5762577291f58798",
      "name": "fd",
      "reference": "ghcr.io/tektum/fd@sha256:7c41208394015fdcf224953d3c5540286b3a385219989283e74bdab435308e48",
      "registry": "ghcr.io/tektum/fd",
      "runId": "38705955882",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705955882",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-fd-10",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "10",
        "10-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:56:21Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/fd@sha256:7c41208394015fdcf224953d3c5540286b3a385219989283e74bdab435308e48 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/fd@sha256:7c41208394015fdcf224953d3c5540286b3a385219989283e74bdab435308e48",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/fd@sha256:7c41208394015fdcf224953d3c5540286b3a385219989283e74bdab435308e48"
      },
      "version": "10"
    },
    {
      "description": "Fluent Bit log processor and forwarder built from source.",
      "digest": "sha256:06668fd4bbbb3317b7ee61fe6a6823da1db8e499fc94a451abed91583f98c6c2",
      "inputDigest": "sha256:cb8f808e297bc1a428d96ae65012721598302172b2efff7873d3efa598700d55",
      "name": "fluent-bit",
      "reference": "ghcr.io/tektum/fluent-bit@sha256:06668fd4bbbb3317b7ee61fe6a6823da1db8e499fc94a451abed91583f98c6c2",
      "registry": "ghcr.io/tektum/fluent-bit",
      "runId": "38705959220",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705959220",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-fluent-bit-4.2",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "4.2",
        "4.2-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T09:04:21Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/fluent-bit@sha256:06668fd4bbbb3317b7ee61fe6a6823da1db8e499fc94a451abed91583f98c6c2 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/fluent-bit@sha256:06668fd4bbbb3317b7ee61fe6a6823da1db8e499fc94a451abed91583f98c6c2",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/fluent-bit@sha256:06668fd4bbbb3317b7ee61fe6a6823da1db8e499fc94a451abed91583f98c6c2"
      },
      "version": "4.2"
    },
    {
      "description": "Flux Helm Controller built from a pinned upstream source commit.",
      "digest": "sha256:8c079f11630c18d4da67cdb83f23a823642fa98590a355c316efad0d690d0a5a",
      "inputDigest": "sha256:d7daa0a00ed1856029a0aa4f053c284dfef579f6708054cb0ebb6c024e5ca034",
      "name": "flux-helm-controller",
      "reference": "ghcr.io/tektum/flux-helm-controller@sha256:8c079f11630c18d4da67cdb83f23a823642fa98590a355c316efad0d690d0a5a",
      "registry": "ghcr.io/tektum/flux-helm-controller",
      "runId": "38705962721",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705962721",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-flux-helm-controller-1.6",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.6",
        "1.6-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:50:43Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/flux-helm-controller@sha256:8c079f11630c18d4da67cdb83f23a823642fa98590a355c316efad0d690d0a5a --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/flux-helm-controller@sha256:8c079f11630c18d4da67cdb83f23a823642fa98590a355c316efad0d690d0a5a",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/flux-helm-controller@sha256:8c079f11630c18d4da67cdb83f23a823642fa98590a355c316efad0d690d0a5a"
      },
      "version": "1.6"
    },
    {
      "description": "Policy controller for Kubernetes admission and audit.",
      "digest": "sha256:17e7dd65afb63964493b23cec30cc6e94e199ca09b99d5b40aba58308455de26",
      "inputDigest": "sha256:64a59ddffa4be1b9f89d4def91b72cad3688466a3d0ffe9974d9efa3a8e48088",
      "name": "gatekeeper",
      "reference": "ghcr.io/tektum/gatekeeper@sha256:17e7dd65afb63964493b23cec30cc6e94e199ca09b99d5b40aba58308455de26",
      "registry": "ghcr.io/tektum/gatekeeper",
      "runId": "38705965940",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705965940",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-gatekeeper-3.19",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "3.19",
        "3.19-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:55:54Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/gatekeeper@sha256:17e7dd65afb63964493b23cec30cc6e94e199ca09b99d5b40aba58308455de26 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gatekeeper@sha256:17e7dd65afb63964493b23cec30cc6e94e199ca09b99d5b40aba58308455de26",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gatekeeper@sha256:17e7dd65afb63964493b23cec30cc6e94e199ca09b99d5b40aba58308455de26"
      },
      "version": "3.19"
    },
    {
      "category": "Languages & Build Tools",
      "description": "GCC compiler toolchain assembled from Wolfi packages.",
      "digest": "sha256:772b400ab36cae90deae07c4294249d027a2ef6818e4640392f43f7543d8a26c",
      "inputDigest": "sha256:bb097138caf4fa3fb70793057054b926e44a41b853ef82066414e0860b762b1a",
      "name": "gcc",
      "reference": "ghcr.io/tektum/gcc@sha256:772b400ab36cae90deae07c4294249d027a2ef6818e4640392f43f7543d8a26c",
      "registry": "ghcr.io/tektum/gcc",
      "runId": "36458447285",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36458447285",
      "scan": {
        "all": {
          "medium": 8
        },
        "fixable": 0
      },
      "scanArtifact": "scan-gcc-15",
      "sourceCommit": "284aed568ada93d16d1a5a4ee0f32de0f86d3bcd",
      "tags": [
        "15",
        "15-20260928",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-28T17:33:21Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/gcc@sha256:772b400ab36cae90deae07c4294249d027a2ef6818e4640392f43f7543d8a26c --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gcc@sha256:772b400ab36cae90deae07c4294249d027a2ef6818e4640392f43f7543d8a26c",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gcc@sha256:772b400ab36cae90deae07c4294249d027a2ef6818e4640392f43f7543d8a26c"
      },
      "version": "15"
    },
    {
      "description": "GitLab Runner with the shell executor, built from pinned source on Wolfi.",
      "digest": "sha256:5e444fda55aa3300dcc70d78789c418672f6d7321b1453664d504d36f2a9861a",
      "inputDigest": "sha256:98bc1d8f99a460a76c740d28c898a8a9eb98eb0cf5837cbf028d8c9b825b7f4b",
      "name": "gitlab-runner",
      "reference": "ghcr.io/tektum/gitlab-runner@sha256:5e444fda55aa3300dcc70d78789c418672f6d7321b1453664d504d36f2a9861a",
      "registry": "ghcr.io/tektum/gitlab-runner",
      "runId": "38705969227",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705969227",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-gitlab-runner-19.3",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "19.3",
        "19.3-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:44:41Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/gitlab-runner@sha256:5e444fda55aa3300dcc70d78789c418672f6d7321b1453664d504d36f2a9861a --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gitlab-runner@sha256:5e444fda55aa3300dcc70d78789c418672f6d7321b1453664d504d36f2a9861a",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gitlab-runner@sha256:5e444fda55aa3300dcc70d78789c418672f6d7321b1453664d504d36f2a9861a"
      },
      "version": "19.3"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Go toolchain packaged from pinned upstream releases with plain and FIPS flavors.",
      "digest": "sha256:060f61d420c89ee4bf0022028684a35e15b8d630182c2dd1c155c5915298cd27",
      "inputDigest": "sha256:dd543cd487e9cdba7409bf097a589e95725680a9f9181db4f1a1d8cbe8d4ac9e",
      "name": "go",
      "reference": "ghcr.io/tektum/go@sha256:060f61d420c89ee4bf0022028684a35e15b8d630182c2dd1c155c5915298cd27",
      "registry": "ghcr.io/tektum/go",
      "runId": "37765635065",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/37765635065",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-go-1.25",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.25",
        "1.25-20261008"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-08T10:51:20Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/go@sha256:060f61d420c89ee4bf0022028684a35e15b8d630182c2dd1c155c5915298cd27 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:060f61d420c89ee4bf0022028684a35e15b8d630182c2dd1c155c5915298cd27",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:060f61d420c89ee4bf0022028684a35e15b8d630182c2dd1c155c5915298cd27"
      },
      "version": "1.25"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Go toolchain packaged from pinned upstream releases with plain and FIPS flavors.",
      "digest": "sha256:aee6bdbc09736201b187603a94366249c45574367fc778b260ba66626d43f6e2",
      "inputDigest": "sha256:3d23e9cf059c36538c3719720d62d0adfaf2ef4de2b08b02560f5fad066ad021",
      "name": "go",
      "reference": "ghcr.io/tektum/go@sha256:aee6bdbc09736201b187603a94366249c45574367fc778b260ba66626d43f6e2",
      "registry": "ghcr.io/tektum/go",
      "runId": "37765637924",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/37765637924",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-go-1.25-fips",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.25-fips",
        "1.25-20261008-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-08T10:51:15Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/go@sha256:aee6bdbc09736201b187603a94366249c45574367fc778b260ba66626d43f6e2 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:aee6bdbc09736201b187603a94366249c45574367fc778b260ba66626d43f6e2",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:aee6bdbc09736201b187603a94366249c45574367fc778b260ba66626d43f6e2"
      },
      "version": "1.25-fips"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Go toolchain packaged from pinned upstream releases with plain and FIPS flavors.",
      "digest": "sha256:0e4c56218431de7d45bb4ea0ab074aa838bef2898eabbc51974e275764da398e",
      "inputDigest": "sha256:14d83367bab8dbd3e47527de429eeed40a406b90cf68ed0435427ccc41d96171",
      "name": "go",
      "reference": "ghcr.io/tektum/go@sha256:0e4c56218431de7d45bb4ea0ab074aa838bef2898eabbc51974e275764da398e",
      "registry": "ghcr.io/tektum/go",
      "runId": "37765640790",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/37765640790",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-go-1.26",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.26",
        "1.26-20261008"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-08T10:51:14Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/go@sha256:0e4c56218431de7d45bb4ea0ab074aa838bef2898eabbc51974e275764da398e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:0e4c56218431de7d45bb4ea0ab074aa838bef2898eabbc51974e275764da398e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:0e4c56218431de7d45bb4ea0ab074aa838bef2898eabbc51974e275764da398e"
      },
      "version": "1.26"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Go toolchain packaged from pinned upstream releases with plain and FIPS flavors.",
      "digest": "sha256:cbf6333bdde90f3d88622e1197b8e57717365ada153b3f0c4cdd6de8f6bd7289",
      "inputDigest": "sha256:dee602b99b5f165f4c9d9df916156643c0baf91b7e0a596a6a2787acfa2e351f",
      "name": "go",
      "reference": "ghcr.io/tektum/go@sha256:cbf6333bdde90f3d88622e1197b8e57717365ada153b3f0c4cdd6de8f6bd7289",
      "registry": "ghcr.io/tektum/go",
      "runId": "37765643521",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/37765643521",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-go-1.26-fips",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.26-fips",
        "1.26-20261008-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-08T10:51:27Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/go@sha256:cbf6333bdde90f3d88622e1197b8e57717365ada153b3f0c4cdd6de8f6bd7289 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:cbf6333bdde90f3d88622e1197b8e57717365ada153b3f0c4cdd6de8f6bd7289",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:cbf6333bdde90f3d88622e1197b8e57717365ada153b3f0c4cdd6de8f6bd7289"
      },
      "version": "1.26-fips"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Go toolchain packaged from pinned upstream releases with plain and FIPS flavors.",
      "digest": "sha256:2e778a2a8c6d6d702d44965f01942cefc052bd2a7a43dc10e0036bd6f7314382",
      "inputDigest": "sha256:e45695f77af54580d5065269c81f65d39da4a0c13240c2e3b38e653ff897ca74",
      "name": "go",
      "reference": "ghcr.io/tektum/go@sha256:2e778a2a8c6d6d702d44965f01942cefc052bd2a7a43dc10e0036bd6f7314382",
      "registry": "ghcr.io/tektum/go",
      "runId": "37765646509",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/37765646509",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-go-1.27",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.27",
        "1.27-20261008",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-08T10:51:19Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/go@sha256:2e778a2a8c6d6d702d44965f01942cefc052bd2a7a43dc10e0036bd6f7314382 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:2e778a2a8c6d6d702d44965f01942cefc052bd2a7a43dc10e0036bd6f7314382",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:2e778a2a8c6d6d702d44965f01942cefc052bd2a7a43dc10e0036bd6f7314382"
      },
      "version": "1.27"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Go toolchain packaged from pinned upstream releases with plain and FIPS flavors.",
      "digest": "sha256:2d9128fc655b8c8509d92839202d992cb45789b5091c65aab557a4d6ee726825",
      "inputDigest": "sha256:34f06625216a6154a1b21c862354e1c21655c6e5366ee43f962326b5139ad114",
      "name": "go",
      "reference": "ghcr.io/tektum/go@sha256:2d9128fc655b8c8509d92839202d992cb45789b5091c65aab557a4d6ee726825",
      "registry": "ghcr.io/tektum/go",
      "runId": "37765649535",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/37765649535",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-go-1.27-fips",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.27-fips",
        "1.27-20261008-fips",
        "latest-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-08T10:51:41Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/go@sha256:2d9128fc655b8c8509d92839202d992cb45789b5091c65aab557a4d6ee726825 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:2d9128fc655b8c8509d92839202d992cb45789b5091c65aab557a4d6ee726825",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/go@sha256:2d9128fc655b8c8509d92839202d992cb45789b5091c65aab557a4d6ee726825"
      },
      "version": "1.27-fips"
    },
    {
      "description": "Gradle build system assembled from Wolfi packages.",
      "digest": "sha256:3395225a85d93bfcfdb73a81abc064d81aeb5893502cdf9196ba6d24003a0437",
      "inputDigest": "sha256:bc9cc18cfc538731c84321f6273fd24453cea3ddd2799ff92bd496bd576f0f11",
      "name": "gradle",
      "reference": "ghcr.io/tektum/gradle@sha256:3395225a85d93bfcfdb73a81abc064d81aeb5893502cdf9196ba6d24003a0437",
      "registry": "ghcr.io/tektum/gradle",
      "runId": "35526776474",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/35526776474",
      "scan": {
        "all": {
          "high": 2,
          "medium": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-gradle-9.7.0",
      "sourceCommit": "1d97fa47cf35f22044540b2387e0b69b52abf74e",
      "tags": [
        "9.7.0",
        "9.7.0-20260920",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-20T17:49:06Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/gradle@sha256:3395225a85d93bfcfdb73a81abc064d81aeb5893502cdf9196ba6d24003a0437 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gradle@sha256:3395225a85d93bfcfdb73a81abc064d81aeb5893502cdf9196ba6d24003a0437",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/gradle@sha256:3395225a85d93bfcfdb73a81abc064d81aeb5893502cdf9196ba6d24003a0437"
      },
      "version": "9.7.0"
    },
    {
      "category": "Monitoring & Observability",
      "description": "The open and composable observability and data visualization platform.",
      "digest": "sha256:39d50dadadc4586023ee67a91f4e265cb6cef83d401db07a2f1e26b4c886fbf7",
      "inputDigest": "sha256:050248bea984a1a1a6418b9d68bb7fd15e7fbbc1b8a792aa0ef7007f956ac6a5",
      "name": "grafana",
      "reference": "ghcr.io/tektum/grafana@sha256:39d50dadadc4586023ee67a91f4e265cb6cef83d401db07a2f1e26b4c886fbf7",
      "registry": "ghcr.io/tektum/grafana",
      "runId": "38873023897",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38873023897",
      "scan": {
        "all": {
          "high": 4,
          "medium": 6,
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-grafana-13.2",
      "sourceCommit": "a3480e0e3b34bafb8a36dcb6e99a605e81ba859f",
      "tags": [
        "13.2",
        "13.2-20261016",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T10:42:36Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/grafana@sha256:39d50dadadc4586023ee67a91f4e265cb6cef83d401db07a2f1e26b4c886fbf7 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/grafana@sha256:39d50dadadc4586023ee67a91f4e265cb6cef83d401db07a2f1e26b4c886fbf7",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/grafana@sha256:39d50dadadc4586023ee67a91f4e265cb6cef83d401db07a2f1e26b4c886fbf7"
      },
      "version": "13.2"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "High performance TCP/HTTP load balancer built from pinned upstream source.",
      "digest": "sha256:61ebad7e3b373b7fb14b9ed762d1db8c5efd72e4cdcd86b717ab23fa47d21203",
      "inputDigest": "sha256:c482d698f8504550fa27f18f607ef52dacfdabd88cf874d92da9b4bf80f50f25",
      "name": "haproxy",
      "reference": "ghcr.io/tektum/haproxy@sha256:61ebad7e3b373b7fb14b9ed762d1db8c5efd72e4cdcd86b717ab23fa47d21203",
      "registry": "ghcr.io/tektum/haproxy",
      "runId": "38705980096",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705980096",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-haproxy-3.4",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "3.4",
        "3.4-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:35:45Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/haproxy@sha256:61ebad7e3b373b7fb14b9ed762d1db8c5efd72e4cdcd86b717ab23fa47d21203 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/haproxy@sha256:61ebad7e3b373b7fb14b9ed762d1db8c5efd72e4cdcd86b717ab23fa47d21203",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/haproxy@sha256:61ebad7e3b373b7fb14b9ed762d1db8c5efd72e4cdcd86b717ab23fa47d21203"
      },
      "version": "3.4"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "HAProxy Ingress Controller assembled from Wolfi packages.",
      "digest": "sha256:a4287b36c4b371edf5f3d6e13f0d519e17108b05f9a453c4d286e0689bff0790",
      "inputDigest": "sha256:108bd0e2c88b14b30a3ee52bce0bb2b8a3e0ec2e59371d91b9766ff2ab21cc85",
      "name": "haproxy-ingress",
      "reference": "ghcr.io/tektum/haproxy-ingress@sha256:a4287b36c4b371edf5f3d6e13f0d519e17108b05f9a453c4d286e0689bff0790",
      "registry": "ghcr.io/tektum/haproxy-ingress",
      "runId": "38705976611",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705976611",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-haproxy-ingress-0",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "0",
        "0-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:45:38Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/haproxy-ingress@sha256:a4287b36c4b371edf5f3d6e13f0d519e17108b05f9a453c4d286e0689bff0790 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/haproxy-ingress@sha256:a4287b36c4b371edf5f3d6e13f0d519e17108b05f9a453c4d286e0689bff0790",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/haproxy-ingress@sha256:a4287b36c4b371edf5f3d6e13f0d519e17108b05f9a453c4d286e0689bff0790"
      },
      "version": "0"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Minimal Helm image assembled from Wolfi packages.",
      "digest": "sha256:8a219412e789f837e1c81a44d0959a3ccd6bd7a9e875961789ee9c603ca5f305",
      "inputDigest": "sha256:bc4784753ef8c4eec34236aa606378a0a9e5697fedc865a049ad5c9648f4156b",
      "name": "helm",
      "reference": "ghcr.io/tektum/helm@sha256:8a219412e789f837e1c81a44d0959a3ccd6bd7a9e875961789ee9c603ca5f305",
      "registry": "ghcr.io/tektum/helm",
      "runId": "38775113877",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38775113877",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-helm-4.2.4",
      "sourceCommit": "1a3a4dfd003d02c42d657a99ac148cb0aa841912",
      "tags": [
        "4.2.4",
        "4.2.4-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T17:32:11Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/helm@sha256:8a219412e789f837e1c81a44d0959a3ccd6bd7a9e875961789ee9c603ca5f305 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/helm@sha256:8a219412e789f837e1c81a44d0959a3ccd6bd7a9e875961789ee9c603ca5f305",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/helm@sha256:8a219412e789f837e1c81a44d0959a3ccd6bd7a9e875961789ee9c603ca5f305"
      },
      "version": "4.2.4"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Minimal Apache HTTP Server image assembled from Wolfi packages.",
      "digest": "sha256:47ab36726f8444f4e46c8b0364fa2812a76c2d35962a4782ec7cec12110b147c",
      "inputDigest": "sha256:88f42779dc247b75b784b5d6f79db3cf46946f950c11026ea9cedff0bd48fba5",
      "name": "httpd",
      "reference": "ghcr.io/tektum/httpd@sha256:47ab36726f8444f4e46c8b0364fa2812a76c2d35962a4782ec7cec12110b147c",
      "registry": "ghcr.io/tektum/httpd",
      "runId": "36458447285",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36458447285",
      "scan": {
        "all": {
          "medium": 10
        },
        "fixable": 0
      },
      "scanArtifact": "scan-httpd-2.4",
      "sourceCommit": "284aed568ada93d16d1a5a4ee0f32de0f86d3bcd",
      "tags": [
        "2.4",
        "2.4-20260928",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-28T17:33:01Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/httpd@sha256:47ab36726f8444f4e46c8b0364fa2812a76c2d35962a4782ec7cec12110b147c --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/httpd@sha256:47ab36726f8444f4e46c8b0364fa2812a76c2d35962a4782ec7cec12110b147c",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/httpd@sha256:47ab36726f8444f4e46c8b0364fa2812a76c2d35962a4782ec7cec12110b147c"
      },
      "version": "2.4"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Minimal Apache HTTP Server image assembled from Wolfi packages.",
      "digest": "sha256:78ea1ddb1d8626572f1d67539463f31f18954a1955bf6ffaadc6a27c876d497f",
      "inputDigest": "sha256:e8ccef4380a5ce8803d928439a70262cd37026254b8ee78fc2441c1badf217fc",
      "name": "httpd",
      "reference": "ghcr.io/tektum/httpd@sha256:78ea1ddb1d8626572f1d67539463f31f18954a1955bf6ffaadc6a27c876d497f",
      "registry": "ghcr.io/tektum/httpd",
      "runId": "36458447285",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36458447285",
      "scan": {
        "all": {
          "medium": 10
        },
        "fixable": 0
      },
      "scanArtifact": "scan-httpd-2.4-fips",
      "sourceCommit": "284aed568ada93d16d1a5a4ee0f32de0f86d3bcd",
      "tags": [
        "2.4-fips",
        "2.4-20260928-fips",
        "latest-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-28T17:32:45Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/httpd@sha256:78ea1ddb1d8626572f1d67539463f31f18954a1955bf6ffaadc6a27c876d497f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/httpd@sha256:78ea1ddb1d8626572f1d67539463f31f18954a1955bf6ffaadc6a27c876d497f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/httpd@sha256:78ea1ddb1d8626572f1d67539463f31f18954a1955bf6ffaadc6a27c876d497f"
      },
      "version": "2.4-fips"
    },
    {
      "category": "Databases & Caching",
      "description": "InfluxDB time-series database with persistent file storage.",
      "digest": "sha256:b7278e9a38907f6e3a6d66c2a0356a160f2f8bd4e97bbaecadb444d08b171b85",
      "inputDigest": "sha256:c9761ccaac545f9b6e39ba2dfeed363121fbe346383dfb562be70ed8ba230ebf",
      "name": "influxdb",
      "reference": "ghcr.io/tektum/influxdb@sha256:b7278e9a38907f6e3a6d66c2a0356a160f2f8bd4e97bbaecadb444d08b171b85",
      "registry": "ghcr.io/tektum/influxdb",
      "runId": "36458447285",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36458447285",
      "scan": {
        "all": {
          "low": 2,
          "medium": 14
        },
        "fixable": 0
      },
      "scanArtifact": "scan-influxdb-3.8",
      "sourceCommit": "284aed568ada93d16d1a5a4ee0f32de0f86d3bcd",
      "tags": [
        "3.8",
        "3.8-20260928",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-28T17:33:03Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/influxdb@sha256:b7278e9a38907f6e3a6d66c2a0356a160f2f8bd4e97bbaecadb444d08b171b85 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/influxdb@sha256:b7278e9a38907f6e3a6d66c2a0356a160f2f8bd4e97bbaecadb444d08b171b85",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/influxdb@sha256:b7278e9a38907f6e3a6d66c2a0356a160f2f8bd4e97bbaecadb444d08b171b85"
      },
      "version": "3.8"
    },
    {
      "category": "Base & Utilities",
      "description": "Command-line JSON processor.",
      "digest": "sha256:31cb08f5a8f7de8b57d6ad54455f5ffca00455b2ad83ecf1f00214e40a776f60",
      "inputDigest": "sha256:e0d86f069575c9f65de9b6a446a5868ed23835d0945cf6156a2261843daf1562",
      "name": "jq",
      "reference": "ghcr.io/tektum/jq@sha256:31cb08f5a8f7de8b57d6ad54455f5ffca00455b2ad83ecf1f00214e40a776f60",
      "registry": "ghcr.io/tektum/jq",
      "runId": "34720781440",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34720781440",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-jq-1",
      "sourceCommit": "67fd56363723d2427fb249d8751fa5e8eacfbf9b",
      "tags": [
        "1",
        "1-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T21:46:09Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/jq@sha256:31cb08f5a8f7de8b57d6ad54455f5ffca00455b2ad83ecf1f00214e40a776f60 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/jq@sha256:31cb08f5a8f7de8b57d6ad54455f5ffca00455b2ad83ecf1f00214e40a776f60",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/jq@sha256:31cb08f5a8f7de8b57d6ad54455f5ffca00455b2ad83ecf1f00214e40a776f60"
      },
      "version": "1"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes node autoscaler controller for AWS built from pinned upstream source.",
      "digest": "sha256:3a4ffca002657646841b4d267da038d3453485600b3b3c0bea99d1994e621e1b",
      "inputDigest": "sha256:2f494578b99f162574fce292374fb4178dc92ddc440fe1678411a81019ca832c",
      "name": "karpenter",
      "reference": "ghcr.io/tektum/karpenter@sha256:3a4ffca002657646841b4d267da038d3453485600b3b3c0bea99d1994e621e1b",
      "registry": "ghcr.io/tektum/karpenter",
      "runId": "38043477596",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38043477596",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-karpenter-1.14",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.14",
        "1.14-20261010",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-10T10:23:35Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/karpenter@sha256:3a4ffca002657646841b4d267da038d3453485600b3b3c0bea99d1994e621e1b --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/karpenter@sha256:3a4ffca002657646841b4d267da038d3453485600b3b3c0bea99d1994e621e1b",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/karpenter@sha256:3a4ffca002657646841b4d267da038d3453485600b3b3c0bea99d1994e621e1b"
      },
      "version": "1.14"
    },
    {
      "category": "CI/CD & GitOps",
      "description": "Go container image builder assembled from Wolfi packages.",
      "digest": "sha256:7d6118076f3d12b596005b43b5b678685bf77778be8ed866337a93bc35692b2e",
      "inputDigest": "sha256:2af6255e0dc87f290391a30a2f2fd519ac6084c884265277d7f0f9d2ea8c8fa0",
      "name": "ko",
      "reference": "ghcr.io/tektum/ko@sha256:7d6118076f3d12b596005b43b5b678685bf77778be8ed866337a93bc35692b2e",
      "registry": "ghcr.io/tektum/ko",
      "runId": "34566130443",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34566130443",
      "scan": {
        "all": {
          "unknown": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-ko-0.19.1",
      "sourceCommit": "1a54cde581d76cd1e16555a159483ab184cfdfb1",
      "tags": [
        "0.19.1",
        "0.19.1-20260911",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-11T05:32:25Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ko@sha256:7d6118076f3d12b596005b43b5b678685bf77778be8ed866337a93bc35692b2e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ko@sha256:7d6118076f3d12b596005b43b5b678685bf77778be8ed866337a93bc35692b2e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ko@sha256:7d6118076f3d12b596005b43b5b678685bf77778be8ed866337a93bc35692b2e"
      },
      "version": "0.19.1"
    },
    {
      "description": "Kubernetes API server assembled from Wolfi packages.",
      "digest": "sha256:14fe627b2f03b51e71554ad62658eaf614f663d2923a651814c4a787cd7f3a07",
      "inputDigest": "sha256:d5ff3e1a1a4a645e6e730b62d62b6bc87beb1162b68712b8744766114ef751bd",
      "name": "kube-apiserver",
      "reference": "ghcr.io/tektum/kube-apiserver@sha256:14fe627b2f03b51e71554ad62658eaf614f663d2923a651814c4a787cd7f3a07",
      "registry": "ghcr.io/tektum/kube-apiserver",
      "runId": "38907967299",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38907967299",
      "scan": {
        "all": {
          "low": 2,
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-kube-apiserver-1.37",
      "sourceCommit": "5057b693056720f6e6a2d0c160e3f5bd49ca9144",
      "tags": [
        "1.37",
        "1.37-20261016",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T13:30:27Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kube-apiserver@sha256:14fe627b2f03b51e71554ad62658eaf614f663d2923a651814c4a787cd7f3a07 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-apiserver@sha256:14fe627b2f03b51e71554ad62658eaf614f663d2923a651814c4a787cd7f3a07",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-apiserver@sha256:14fe627b2f03b51e71554ad62658eaf614f663d2923a651814c4a787cd7f3a07"
      },
      "version": "1.37"
    },
    {
      "description": "Kubernetes CIS benchmark checker.",
      "digest": "sha256:4795e247e50eacd457e81a6fa8d1e5d8bfe660481155a0f29490be28c20d8a24",
      "inputDigest": "sha256:f525fa288e7baa45707cca02ba7e10c12ee7ba0ca902fd23920a44753f1de8dd",
      "name": "kube-bench",
      "reference": "ghcr.io/tektum/kube-bench@sha256:4795e247e50eacd457e81a6fa8d1e5d8bfe660481155a0f29490be28c20d8a24",
      "registry": "ghcr.io/tektum/kube-bench",
      "runId": "34577988254",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34577988254",
      "scan": {
        "all": {
          "medium": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-kube-bench-0.16.0",
      "sourceCommit": "1a54cde581d76cd1e16555a159483ab184cfdfb1",
      "tags": [
        "0.16.0",
        "0.16.0-20260911",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-11T08:24:06Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kube-bench@sha256:4795e247e50eacd457e81a6fa8d1e5d8bfe660481155a0f29490be28c20d8a24 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-bench@sha256:4795e247e50eacd457e81a6fa8d1e5d8bfe660481155a0f29490be28c20d8a24",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-bench@sha256:4795e247e50eacd457e81a6fa8d1e5d8bfe660481155a0f29490be28c20d8a24"
      },
      "version": "0.16.0"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes controller manager assembled from Wolfi packages.",
      "digest": "sha256:de8d2c4aa2d131976d1fae8e56e2b886f219a5bf7d67d63681a310a96873c40c",
      "inputDigest": "sha256:56c7b5c1ea1c7d56ff0a3ea380eb6daea3849569601785d50681641504c2f85c",
      "name": "kube-controller-manager",
      "reference": "ghcr.io/tektum/kube-controller-manager@sha256:de8d2c4aa2d131976d1fae8e56e2b886f219a5bf7d67d63681a310a96873c40c",
      "registry": "ghcr.io/tektum/kube-controller-manager",
      "runId": "38908412864",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38908412864",
      "scan": {
        "all": {
          "low": 2,
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-kube-controller-manager-1.37",
      "sourceCommit": "053f81d9503823d388970b3f0d020f5bbd6260c7",
      "tags": [
        "1.37",
        "1.37-20261016",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T13:34:12Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kube-controller-manager@sha256:de8d2c4aa2d131976d1fae8e56e2b886f219a5bf7d67d63681a310a96873c40c --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-controller-manager@sha256:de8d2c4aa2d131976d1fae8e56e2b886f219a5bf7d67d63681a310a96873c40c",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-controller-manager@sha256:de8d2c4aa2d131976d1fae8e56e2b886f219a5bf7d67d63681a310a96873c40c"
      },
      "version": "1.37"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes control plane scheduler assembled from Wolfi packages.",
      "digest": "sha256:9d281918eb084de962dcae18cad9872eef11d6fff93eb5be03d8a3ff354eb88a",
      "inputDigest": "sha256:4966c7188dae85cae07f6b8024d1f7ef256f2552b4bd68463fb5c19150fd4042",
      "name": "kube-scheduler",
      "reference": "ghcr.io/tektum/kube-scheduler@sha256:9d281918eb084de962dcae18cad9872eef11d6fff93eb5be03d8a3ff354eb88a",
      "registry": "ghcr.io/tektum/kube-scheduler",
      "runId": "36474921108",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36474921108",
      "scan": {
        "all": {
          "low": 2,
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-kube-scheduler-1.37",
      "sourceCommit": "bf03b2651c435bb3a159e3d1786a18dac1123f05",
      "tags": [
        "1.37",
        "1.37-20260928",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-28T19:55:36Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kube-scheduler@sha256:9d281918eb084de962dcae18cad9872eef11d6fff93eb5be03d8a3ff354eb88a --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-scheduler@sha256:9d281918eb084de962dcae18cad9872eef11d6fff93eb5be03d8a3ff354eb88a",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-scheduler@sha256:9d281918eb084de962dcae18cad9872eef11d6fff93eb5be03d8a3ff354eb88a"
      },
      "version": "1.37"
    },
    {
      "category": "Monitoring & Observability",
      "description": "Kubernetes cluster state metrics exporter built from pinned upstream source.",
      "digest": "sha256:df4eb74d5e3d8226761fd3396143f81ec9ea944ff37a7fc3a490b26a4bd50fdf",
      "inputDigest": "sha256:109e51bb743bb7f9d083b836560741af00882c2255afa8d78c2e98e433a7c512",
      "name": "kube-state-metrics",
      "reference": "ghcr.io/tektum/kube-state-metrics@sha256:df4eb74d5e3d8226761fd3396143f81ec9ea944ff37a7fc3a490b26a4bd50fdf",
      "registry": "ghcr.io/tektum/kube-state-metrics",
      "runId": "38753192696",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38753192696",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-kube-state-metrics-2.20.0",
      "sourceCommit": "47bf01d3468fe7d52617b80b7c6dadf5afe133bc",
      "tags": [
        "2.20.0",
        "2.20.0-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T15:00:56Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kube-state-metrics@sha256:df4eb74d5e3d8226761fd3396143f81ec9ea944ff37a7fc3a490b26a4bd50fdf --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-state-metrics@sha256:df4eb74d5e3d8226761fd3396143f81ec9ea944ff37a7fc3a490b26a4bd50fdf",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kube-state-metrics@sha256:df4eb74d5e3d8226761fd3396143f81ec9ea944ff37a7fc3a490b26a4bd50fdf"
      },
      "version": "2.20.0"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes command-line client assembled from Wolfi packages.",
      "digest": "sha256:8b4b696c44acb1234d8d74049592842a8b32c75d46a923049f7eae37d8883960",
      "inputDigest": "sha256:6fb3ee44a066b881087b37144f9a30f92532cf2198052ef4a1c4502fc6a3fa60",
      "name": "kubectl",
      "reference": "ghcr.io/tektum/kubectl@sha256:8b4b696c44acb1234d8d74049592842a8b32c75d46a923049f7eae37d8883960",
      "registry": "ghcr.io/tektum/kubectl",
      "runId": "38705984051",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705984051",
      "scan": {
        "all": {
          "low": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-kubectl-1.35",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.35",
        "1.35-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T09:00:04Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kubectl@sha256:8b4b696c44acb1234d8d74049592842a8b32c75d46a923049f7eae37d8883960 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubectl@sha256:8b4b696c44acb1234d8d74049592842a8b32c75d46a923049f7eae37d8883960",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubectl@sha256:8b4b696c44acb1234d8d74049592842a8b32c75d46a923049f7eae37d8883960"
      },
      "version": "1.35"
    },
    {
      "description": "Kubernetes pause container process assembled from Wolfi packages.",
      "digest": "sha256:ede03c16282bd0d272f7eab54a5d8dca549b4e39cf08306fb1fd75998786f46f",
      "inputDigest": "sha256:9708c18a6e3c1cdf1d7d28b5211d2be795d7abc2cb2689554da4285befbfe5d9",
      "name": "kubernetes-pause",
      "reference": "ghcr.io/tektum/kubernetes-pause@sha256:ede03c16282bd0d272f7eab54a5d8dca549b4e39cf08306fb1fd75998786f46f",
      "registry": "ghcr.io/tektum/kubernetes-pause",
      "runId": "35017734828",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/35017734828",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-kubernetes-pause-3.10",
      "sourceCommit": "3eef51b00f03a111c5c46d021ac736f7f81b314c",
      "tags": [
        "3.10",
        "3.10-20260915",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-15T20:09:59Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kubernetes-pause@sha256:ede03c16282bd0d272f7eab54a5d8dca549b4e39cf08306fb1fd75998786f46f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubernetes-pause@sha256:ede03c16282bd0d272f7eab54a5d8dca549b4e39cf08306fb1fd75998786f46f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubernetes-pause@sha256:ede03c16282bd0d272f7eab54a5d8dca549b4e39cf08306fb1fd75998786f46f"
      },
      "version": "3.10"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "EmberStack Kubernetes Reflector patched from the upstream image.",
      "digest": "sha256:ed65317d451ae324d3d480e768312bf5e500410adce46d547d9e208a4186de1e",
      "inputDigest": "sha256:7e7684fe72261a826602879322ddadb930e6bbf525b56395c8b5cfe68b94aef1",
      "name": "kubernetes-reflector",
      "reference": "ghcr.io/tektum/kubernetes-reflector@sha256:ed65317d451ae324d3d480e768312bf5e500410adce46d547d9e208a4186de1e",
      "registry": "ghcr.io/tektum/kubernetes-reflector",
      "runId": "36848391944",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36848391944",
      "scan": {
        "delta": {
          "high": -4,
          "low": -50,
          "medium": -154,
          "negligible": 0
        },
        "final": {
          "low": 14,
          "medium": 114,
          "negligible": 4
        },
        "fixable": 0,
        "upstream": {
          "high": 4,
          "low": 64,
          "medium": 268,
          "negligible": 4
        }
      },
      "scanArtifact": "scan-kubernetes-reflector-10.0.65",
      "sourceCommit": "8a2a11a7e53b0caac06ac8f8cb5cdb7cf0e238e5",
      "tags": [
        "10.0.65",
        "10.0.65-20261001",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-10-01T10:25:06Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/kubernetes-reflector@sha256:ed65317d451ae324d3d480e768312bf5e500410adce46d547d9e208a4186de1e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubernetes-reflector@sha256:ed65317d451ae324d3d480e768312bf5e500410adce46d547d9e208a4186de1e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/kubernetes-reflector@sha256:ed65317d451ae324d3d480e768312bf5e500410adce46d547d9e208a4186de1e"
      },
      "version": "10.0.65"
    },
    {
      "description": "Grafana Loki log aggregation server built from the canonical source release.",
      "digest": "sha256:d26b0b42e67a36f4ec41c6792c5913de010668093b13f5c1ee7078c8d20458bf",
      "inputDigest": "sha256:7dbaaab803c9c480741ae43254e0a6e368918c5fed782752aa0bd3078b5da468",
      "name": "loki",
      "reference": "ghcr.io/tektum/loki@sha256:d26b0b42e67a36f4ec41c6792c5913de010668093b13f5c1ee7078c8d20458bf",
      "registry": "ghcr.io/tektum/loki",
      "runId": "38785795002",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38785795002",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-loki-3.6",
      "sourceCommit": "8fc09de08fefe8c630a15160b7061f89ab8316e3",
      "tags": [
        "3.6",
        "3.6-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T19:05:17Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/loki@sha256:d26b0b42e67a36f4ec41c6792c5913de010668093b13f5c1ee7078c8d20458bf --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/loki@sha256:d26b0b42e67a36f4ec41c6792c5913de010668093b13f5c1ee7078c8d20458bf",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/loki@sha256:d26b0b42e67a36f4ec41c6792c5913de010668093b13f5c1ee7078c8d20458bf"
      },
      "version": "3.6"
    },
    {
      "category": "Databases & Caching",
      "description": "MariaDB UBI image patched with Copacetic.",
      "digest": "sha256:ace9525c7bdcfcc1296c297e89d2af88e15defe6eddd69c406f9cbcc61504565",
      "inputDigest": "sha256:a1b4dd7871d22a6d179c9cfd942d865b57b28048e3d7d2c2f974e1d6a6231892",
      "name": "mariadb",
      "reference": "ghcr.io/tektum/mariadb@sha256:ace9525c7bdcfcc1296c297e89d2af88e15defe6eddd69c406f9cbcc61504565",
      "registry": "ghcr.io/tektum/mariadb",
      "runId": "35529193979",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/35529193979",
      "scan": {
        "delta": {
          "critical": -2,
          "high": -58,
          "low": -4,
          "medium": -48
        },
        "final": {
          "high": 94,
          "low": 184,
          "medium": 610
        },
        "fixable": 0,
        "upstream": {
          "critical": 2,
          "high": 152,
          "low": 188,
          "medium": 658
        }
      },
      "scanArtifact": "scan-mariadb-12.3",
      "sourceCommit": "421d70c65534f362d9ed31c94d420d9898ab8137",
      "tags": [
        "12.3",
        "12.3-20260920",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-20T18:40:06Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/mariadb@sha256:ace9525c7bdcfcc1296c297e89d2af88e15defe6eddd69c406f9cbcc61504565 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/mariadb@sha256:ace9525c7bdcfcc1296c297e89d2af88e15defe6eddd69c406f9cbcc61504565",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/mariadb@sha256:ace9525c7bdcfcc1296c297e89d2af88e15defe6eddd69c406f9cbcc61504565"
      },
      "version": "12.3"
    },
    {
      "description": "Apache Maven build system assembled from Wolfi packages.",
      "digest": "sha256:c17d007fa7075c6cd0a6c6a78d02e18360cae60218c7a3cf6f7c53970a91b306",
      "inputDigest": "sha256:abf7acc9ff03dad175536f82bdd5ece82c007cb60226191aea595c9f78377be3",
      "name": "maven",
      "reference": "ghcr.io/tektum/maven@sha256:c17d007fa7075c6cd0a6c6a78d02e18360cae60218c7a3cf6f7c53970a91b306",
      "registry": "ghcr.io/tektum/maven",
      "runId": "35328023587",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/35328023587",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-maven-3.9.16",
      "sourceCommit": "ea59c2f1399a10a3473f8a1d1c7aabece236272e",
      "tags": [
        "3.9.16",
        "3.9.16-20260918",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-18T09:12:39Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/maven@sha256:c17d007fa7075c6cd0a6c6a78d02e18360cae60218c7a3cf6f7c53970a91b306 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/maven@sha256:c17d007fa7075c6cd0a6c6a78d02e18360cae60218c7a3cf6f7c53970a91b306",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/maven@sha256:c17d007fa7075c6cd0a6c6a78d02e18360cae60218c7a3cf6f7c53970a91b306"
      },
      "version": "3.9.16"
    },
    {
      "category": "Databases & Caching",
      "description": "Minimal memcached image assembled from Wolfi packages.",
      "digest": "sha256:a421fcca516dc4394616a1dabc83a0effdb66ffb8479af22d5fc2ff99f048b2f",
      "inputDigest": "sha256:ace707806dc4361a83dbed5a67b01f216bf36260c98110ff4acbc87f8929124f",
      "name": "memcached",
      "reference": "ghcr.io/tektum/memcached@sha256:a421fcca516dc4394616a1dabc83a0effdb66ffb8479af22d5fc2ff99f048b2f",
      "registry": "ghcr.io/tektum/memcached",
      "runId": "36456474102",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36456474102",
      "scan": {
        "all": {
          "medium": 8
        },
        "fixable": 0
      },
      "scanArtifact": "scan-memcached-1.6",
      "sourceCommit": "44f0903d14fe636852e4919c37f8598069e07ed0",
      "tags": [
        "1.6",
        "1.6-20260928",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-28T17:19:08Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/memcached@sha256:a421fcca516dc4394616a1dabc83a0effdb66ffb8479af22d5fc2ff99f048b2f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/memcached@sha256:a421fcca516dc4394616a1dabc83a0effdb66ffb8479af22d5fc2ff99f048b2f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/memcached@sha256:a421fcca516dc4394616a1dabc83a0effdb66ffb8479af22d5fc2ff99f048b2f"
      },
      "version": "1.6"
    },
    {
      "description": "MetalLB speaker built from a pinned upstream source commit.",
      "digest": "sha256:9cbd3b00b47fdc000d6ecb995f53024fe71522967d5a5e4644d03793f3c74c8b",
      "inputDigest": "sha256:399c2ae003dbe71c648ababdc80d82d7ece91287a7e61111422f1ade3bf73bfb",
      "name": "metallb-speaker",
      "reference": "ghcr.io/tektum/metallb-speaker@sha256:9cbd3b00b47fdc000d6ecb995f53024fe71522967d5a5e4644d03793f3c74c8b",
      "registry": "ghcr.io/tektum/metallb-speaker",
      "runId": "38705993533",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705993533",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-metallb-speaker-0.15.3",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "0.15.3",
        "0.15.3-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:50:43Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/metallb-speaker@sha256:9cbd3b00b47fdc000d6ecb995f53024fe71522967d5a5e4644d03793f3c74c8b --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/metallb-speaker@sha256:9cbd3b00b47fdc000d6ecb995f53024fe71522967d5a5e4644d03793f3c74c8b",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/metallb-speaker@sha256:9cbd3b00b47fdc000d6ecb995f53024fe71522967d5a5e4644d03793f3c74c8b"
      },
      "version": "0.15.3"
    },
    {
      "category": "Monitoring & Observability",
      "description": "Kubernetes Metrics Server built from a pinned upstream source commit.",
      "digest": "sha256:df6d004816f630ff5da482ca2d40c3bf64b7fa228eecb2c52bd31919d451b1e5",
      "inputDigest": "sha256:8e7aaa9853fb093df69112eb16adb78002f34119fb4924306f8e08bb41b9cbf0",
      "name": "metrics-server",
      "reference": "ghcr.io/tektum/metrics-server@sha256:df6d004816f630ff5da482ca2d40c3bf64b7fa228eecb2c52bd31919d451b1e5",
      "registry": "ghcr.io/tektum/metrics-server",
      "runId": "38705997016",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38705997016",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-metrics-server-0.9.0",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "0.9.0",
        "0.9.0-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:57:40Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/metrics-server@sha256:df6d004816f630ff5da482ca2d40c3bf64b7fa228eecb2c52bd31919d451b1e5 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/metrics-server@sha256:df6d004816f630ff5da482ca2d40c3bf64b7fa228eecb2c52bd31919d451b1e5",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/metrics-server@sha256:df6d004816f630ff5da482ca2d40c3bf64b7fa228eecb2c52bd31919d451b1e5"
      },
      "version": "0.9.0"
    },
    {
      "description": "MinIO-compatible S3 object storage server built from the PGSTY Silo fork.",
      "digest": "sha256:8de6a8b88305b3cfb43bac08fa41ea15ab8937d4f12887c03c4a8310eae2af63",
      "inputDigest": "sha256:ea593d824b9ba66cfcb2396300b73f5b77be797cdb0f951d4b5e47d485ae4b2c",
      "name": "minio",
      "reference": "ghcr.io/tektum/minio@sha256:8de6a8b88305b3cfb43bac08fa41ea15ab8937d4f12887c03c4a8310eae2af63",
      "registry": "ghcr.io/tektum/minio",
      "runId": "38706000411",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38706000411",
      "scan": {
        "all": {
          "high": 2,
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-minio-2026.09.16",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "2026.09.16",
        "2026.09.16-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T09:11:49Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/minio@sha256:8de6a8b88305b3cfb43bac08fa41ea15ab8937d4f12887c03c4a8310eae2af63 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/minio@sha256:8de6a8b88305b3cfb43bac08fa41ea15ab8937d4f12887c03c4a8310eae2af63",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/minio@sha256:8de6a8b88305b3cfb43bac08fa41ea15ab8937d4f12887c03c4a8310eae2af63"
      },
      "version": "2026.09.16"
    },
    {
      "description": "Eclipse Mosquitto MQTT broker assembled from Wolfi packages.",
      "digest": "sha256:85cc08fa306671801c183e66a821b868e4877fb7d949e4a9cee6ea382aae8521",
      "inputDigest": "sha256:299196f4e17add55640be05b43e4c74916f067ac6f6ee455212edc4d10bcc55f",
      "name": "mosquitto",
      "reference": "ghcr.io/tektum/mosquitto@sha256:85cc08fa306671801c183e66a821b868e4877fb7d949e4a9cee6ea382aae8521",
      "registry": "ghcr.io/tektum/mosquitto",
      "runId": "38731142348",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38731142348",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-mosquitto-2.1",
      "sourceCommit": "2c922bbdad86d689f4647ebbbe83d66c38694576",
      "tags": [
        "2.1",
        "2.1-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T12:01:26Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/mosquitto@sha256:85cc08fa306671801c183e66a821b868e4877fb7d949e4a9cee6ea382aae8521 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/mosquitto@sha256:85cc08fa306671801c183e66a821b868e4877fb7d949e4a9cee6ea382aae8521",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/mosquitto@sha256:85cc08fa306671801c183e66a821b868e4877fb7d949e4a9cee6ea382aae8521"
      },
      "version": "2.1"
    },
    {
      "category": "Messaging & Streaming",
      "description": "High-performance NATS messaging server assembled from Wolfi packages.",
      "digest": "sha256:c05e7d9a2ae026bc3a80ff116ceedf11255e3b1c782bc82fb7a71e388b3d9ca5",
      "inputDigest": "sha256:89c580b2563bc9fb10e5b95e7117f138fa7d23b30eea0cd31a38e7ef88954425",
      "name": "nats",
      "reference": "ghcr.io/tektum/nats@sha256:c05e7d9a2ae026bc3a80ff116ceedf11255e3b1c782bc82fb7a71e388b3d9ca5",
      "registry": "ghcr.io/tektum/nats",
      "runId": "38706003850",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38706003850",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-nats-2",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "2",
        "2-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:47:24Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/nats@sha256:c05e7d9a2ae026bc3a80ff116ceedf11255e3b1c782bc82fb7a71e388b3d9ca5 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nats@sha256:c05e7d9a2ae026bc3a80ff116ceedf11255e3b1c782bc82fb7a71e388b3d9ca5",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nats@sha256:c05e7d9a2ae026bc3a80ff116ceedf11255e3b1c782bc82fb7a71e388b3d9ca5"
      },
      "version": "2"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Minimal nginx image assembled from Wolfi packages.",
      "digest": "sha256:bbf7caa06ce90501ff55377ad7ed919c7a2a25ddcc9c2a53f7c6dbf0bf79431e",
      "inputDigest": "sha256:849d0596e200aa8a555e9ee6854d59118ea3c18f466154df731d4794cba94f8f",
      "name": "nginx",
      "reference": "ghcr.io/tektum/nginx@sha256:bbf7caa06ce90501ff55377ad7ed919c7a2a25ddcc9c2a53f7c6dbf0bf79431e",
      "registry": "ghcr.io/tektum/nginx",
      "runId": "36458897067",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36458897067",
      "scan": {
        "all": {
          "medium": 8
        },
        "fixable": 0
      },
      "scanArtifact": "scan-nginx-1.31",
      "sourceCommit": "590f9dc989de952272f2158181df25f4d098137c",
      "tags": [
        "1.31",
        "1.31-20260928",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-28T17:37:21Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/nginx@sha256:bbf7caa06ce90501ff55377ad7ed919c7a2a25ddcc9c2a53f7c6dbf0bf79431e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nginx@sha256:bbf7caa06ce90501ff55377ad7ed919c7a2a25ddcc9c2a53f7c6dbf0bf79431e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nginx@sha256:bbf7caa06ce90501ff55377ad7ed919c7a2a25ddcc9c2a53f7c6dbf0bf79431e"
      },
      "version": "1.31"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Upstream Node.js slim image patched with Copacetic.",
      "digest": "sha256:8be28dd20dde392331f5127edb582decdf14b20f89f25ae715a8242cf6550dfb",
      "inputDigest": "sha256:a07867e86c065ec3a7b56735fde8a45fead85b2eac480ea14f9b14367ae016f3",
      "name": "node-22-slim",
      "reference": "ghcr.io/tektum/node-22-slim@sha256:8be28dd20dde392331f5127edb582decdf14b20f89f25ae715a8242cf6550dfb",
      "registry": "ghcr.io/tektum/node-22-slim",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "delta": {
          "critical": -2,
          "high": -22,
          "low": -2,
          "medium": -14,
          "negligible": 0,
          "unknown": 0
        },
        "final": {
          "critical": 14,
          "high": 100,
          "low": 16,
          "medium": 126,
          "negligible": 116,
          "unknown": 48
        },
        "fixable": 0,
        "upstream": {
          "critical": 16,
          "high": 122,
          "low": 18,
          "medium": 140,
          "negligible": 116,
          "unknown": 48
        }
      },
      "scanArtifact": "scan-node-22-slim-22",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "22",
        "22-20260907",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-07T16:41:10Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/node-22-slim@sha256:8be28dd20dde392331f5127edb582decdf14b20f89f25ae715a8242cf6550dfb --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/node-22-slim@sha256:8be28dd20dde392331f5127edb582decdf14b20f89f25ae715a8242cf6550dfb",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/node-22-slim@sha256:8be28dd20dde392331f5127edb582decdf14b20f89f25ae715a8242cf6550dfb"
      },
      "version": "22"
    },
    {
      "description": "Prometheus Node Exporter built from pinned upstream source.",
      "digest": "sha256:53db5cef7d7b71e4a179391c5e7b4583b5376718a5fd3b200f8c22f5505d39d4",
      "inputDigest": "sha256:ac98dfbbec6767277ac3eba6660ff4b1d40855dbc3a590116642320f15482ab2",
      "name": "node-exporter",
      "reference": "ghcr.io/tektum/node-exporter@sha256:53db5cef7d7b71e4a179391c5e7b4583b5376718a5fd3b200f8c22f5505d39d4",
      "registry": "ghcr.io/tektum/node-exporter",
      "runId": "38706010753",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38706010753",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-node-exporter-1.10.2",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.10.2",
        "1.10.2-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:48:27Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/node-exporter@sha256:53db5cef7d7b71e4a179391c5e7b4583b5376718a5fd3b200f8c22f5505d39d4 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/node-exporter@sha256:53db5cef7d7b71e4a179391c5e7b4583b5376718a5fd3b200f8c22f5505d39d4",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/node-exporter@sha256:53db5cef7d7b71e4a179391c5e7b4583b5376718a5fd3b200f8c22f5505d39d4"
      },
      "version": "1.10.2"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Node.js runtime assembled from Wolfi packages.",
      "digest": "sha256:85e1695d062c1a633fa2801431200ba39047f8797c4eea81f5f768a0756190a0",
      "inputDigest": "sha256:68e94634b3cd92a15a7d779ff19eeb6a216b0de8df22d909ac132fbe697225b6",
      "name": "nodejs",
      "reference": "ghcr.io/tektum/nodejs@sha256:85e1695d062c1a633fa2801431200ba39047f8797c4eea81f5f768a0756190a0",
      "registry": "ghcr.io/tektum/nodejs",
      "runId": "35201500929",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/35201500929",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-nodejs-22",
      "sourceCommit": "436263074efad0e50361e41458a303d6bab109df",
      "tags": [
        "22",
        "22-20260917"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-17T08:51:45Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/nodejs@sha256:85e1695d062c1a633fa2801431200ba39047f8797c4eea81f5f768a0756190a0 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:85e1695d062c1a633fa2801431200ba39047f8797c4eea81f5f768a0756190a0",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:85e1695d062c1a633fa2801431200ba39047f8797c4eea81f5f768a0756190a0"
      },
      "version": "22"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Node.js runtime assembled from Wolfi packages.",
      "digest": "sha256:1c798056c29b6f2eb319a8520f513ec1a43af034f76907233ae22a11196b0856",
      "inputDigest": "sha256:97da9d01a7342a6d28be67c4e47de824eda949092413c55e2dc5b11aa8e7e19d",
      "name": "nodejs",
      "reference": "ghcr.io/tektum/nodejs@sha256:1c798056c29b6f2eb319a8520f513ec1a43af034f76907233ae22a11196b0856",
      "registry": "ghcr.io/tektum/nodejs",
      "runId": "35103100034",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/35103100034",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-nodejs-24",
      "sourceCommit": "1e856534fff63fc8a8ced9a6ae866f702f8b5e7f",
      "tags": [
        "24",
        "24-20260916"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-16T13:39:58Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/nodejs@sha256:1c798056c29b6f2eb319a8520f513ec1a43af034f76907233ae22a11196b0856 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:1c798056c29b6f2eb319a8520f513ec1a43af034f76907233ae22a11196b0856",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:1c798056c29b6f2eb319a8520f513ec1a43af034f76907233ae22a11196b0856"
      },
      "version": "24"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Node.js runtime assembled from Wolfi packages.",
      "digest": "sha256:8ccf9c69359294ca85540046bd25b805d5f18f2859613bcb85f41a3a7b9cf47a",
      "inputDigest": "sha256:c245fd928dffa2b9e75dfdae01ff25eb664546aa06752d12a86b723e1052b696",
      "name": "nodejs",
      "reference": "ghcr.io/tektum/nodejs@sha256:8ccf9c69359294ca85540046bd25b805d5f18f2859613bcb85f41a3a7b9cf47a",
      "registry": "ghcr.io/tektum/nodejs",
      "runId": "38908939216",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38908939216",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-nodejs-26",
      "sourceCommit": "7bbd72136b44bf09717e07482a06452f3b8238cb",
      "tags": [
        "26",
        "26-20261016",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T13:38:14Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/nodejs@sha256:8ccf9c69359294ca85540046bd25b805d5f18f2859613bcb85f41a3a7b9cf47a --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:8ccf9c69359294ca85540046bd25b805d5f18f2859613bcb85f41a3a7b9cf47a",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/nodejs@sha256:8ccf9c69359294ca85540046bd25b805d5f18f2859613bcb85f41a3a7b9cf47a"
      },
      "version": "26"
    },
    {
      "category": "Policy & Compliance",
      "description": "Open Policy Agent assembled from Wolfi packages.",
      "digest": "sha256:590b66a1aed885111e8a504cffa7a6be5fa0fc35f021bc542093ae2231c76f74",
      "inputDigest": "sha256:4786ff9ae372b2f59b0d0f8cf0450eb0efdef8d66e8d566af558f53eb8cb1eeb",
      "name": "opa",
      "reference": "ghcr.io/tektum/opa@sha256:590b66a1aed885111e8a504cffa7a6be5fa0fc35f021bc542093ae2231c76f74",
      "registry": "ghcr.io/tektum/opa",
      "runId": "38909390993",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38909390993",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-opa-1",
      "sourceCommit": "c56e55b44a65b67f31a59367957395716873b97a",
      "tags": [
        "1",
        "1-20261016",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T13:41:27Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/opa@sha256:590b66a1aed885111e8a504cffa7a6be5fa0fc35f021bc542093ae2231c76f74 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/opa@sha256:590b66a1aed885111e8a504cffa7a6be5fa0fc35f021bc542093ae2231c76f74",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/opa@sha256:590b66a1aed885111e8a504cffa7a6be5fa0fc35f021bc542093ae2231c76f74"
      },
      "version": "1"
    },
    {
      "category": "Languages & Build Tools",
      "description": "OpenJDK JDK and JRE flavors assembled from Wolfi packages.",
      "digest": "sha256:b9a7df6c87c6193c738e59adac611abe5bcba6acdd1e5b049970d45fb8c178b8",
      "inputDigest": "sha256:c4616875a90cc62f82007bf64f7848c3f16bc3f4d9fd17cad591a82cae58d9cf",
      "name": "openjdk",
      "reference": "ghcr.io/tektum/openjdk@sha256:b9a7df6c87c6193c738e59adac611abe5bcba6acdd1e5b049970d45fb8c178b8",
      "registry": "ghcr.io/tektum/openjdk",
      "runId": "35201451255",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/35201451255",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-openjdk-25",
      "sourceCommit": "5f839a7f90e73c03b4ceb672fd5c5215284ca3de",
      "tags": [
        "25",
        "25-20260917",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-17T08:49:07Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/openjdk@sha256:b9a7df6c87c6193c738e59adac611abe5bcba6acdd1e5b049970d45fb8c178b8 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/openjdk@sha256:b9a7df6c87c6193c738e59adac611abe5bcba6acdd1e5b049970d45fb8c178b8",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/openjdk@sha256:b9a7df6c87c6193c738e59adac611abe5bcba6acdd1e5b049970d45fb8c178b8"
      },
      "version": "25"
    },
    {
      "category": "Languages & Build Tools",
      "description": "OpenJDK JDK and JRE flavors assembled from Wolfi packages.",
      "digest": "sha256:5ca411f356a95f35048eaceda15d6253be4633460b8a60c7e2f7c05d9daa382e",
      "inputDigest": "sha256:8146cec45158c5b31b2a72abd9c6d1885d7f4d8771eaa23475f706e86d18a059",
      "name": "openjdk",
      "reference": "ghcr.io/tektum/openjdk@sha256:5ca411f356a95f35048eaceda15d6253be4633460b8a60c7e2f7c05d9daa382e",
      "registry": "ghcr.io/tektum/openjdk",
      "runId": "36455996630",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36455996630",
      "scan": {
        "all": {
          "medium": 10
        },
        "fixable": 0
      },
      "scanArtifact": "scan-openjdk-25-jre",
      "sourceCommit": "80231368cd65fd12de24a3258f8fb2ee782b235f",
      "tags": [
        "25-jre",
        "25-20260928-jre",
        "latest-jre"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-28T17:11:28Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/openjdk@sha256:5ca411f356a95f35048eaceda15d6253be4633460b8a60c7e2f7c05d9daa382e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/openjdk@sha256:5ca411f356a95f35048eaceda15d6253be4633460b8a60c7e2f7c05d9daa382e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/openjdk@sha256:5ca411f356a95f35048eaceda15d6253be4633460b8a60c7e2f7c05d9daa382e"
      },
      "version": "25-jre"
    },
    {
      "category": "Monitoring & Observability",
      "description": "OpenTelemetry Collector built from a pinned upstream source commit.",
      "digest": "sha256:eeb58c2d5a9e6a4d7ec1994c6ea0c867e0162601e702ffd4db1a63b24be0d3e0",
      "inputDigest": "sha256:dd80a6cc671415272bf8ea377dff87294721c4b66407c26d47839aafeb569fc1",
      "name": "otel-collector",
      "reference": "ghcr.io/tektum/otel-collector@sha256:eeb58c2d5a9e6a4d7ec1994c6ea0c867e0162601e702ffd4db1a63b24be0d3e0",
      "registry": "ghcr.io/tektum/otel-collector",
      "runId": "38706014425",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38706014425",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-otel-collector-0.160.0",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "0.160.0",
        "0.160.0-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:50:11Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/otel-collector@sha256:eeb58c2d5a9e6a4d7ec1994c6ea0c867e0162601e702ffd4db1a63b24be0d3e0 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/otel-collector@sha256:eeb58c2d5a9e6a4d7ec1994c6ea0c867e0162601e702ffd4db1a63b24be0d3e0",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/otel-collector@sha256:eeb58c2d5a9e6a4d7ec1994c6ea0c867e0162601e702ffd4db1a63b24be0d3e0"
      },
      "version": "0.160.0"
    },
    {
      "description": "Perl runtime assembled from Wolfi packages.",
      "digest": "sha256:d9b53120571c55ac6103a02eb19cac74a698421ab399429676b0958ffa8cecef",
      "inputDigest": "sha256:38fc25a87af2dbc68c2db8af18b5e623851d561a5c0d59a3d62184d5cee7e9bf",
      "name": "perl",
      "reference": "ghcr.io/tektum/perl@sha256:d9b53120571c55ac6103a02eb19cac74a698421ab399429676b0958ffa8cecef",
      "registry": "ghcr.io/tektum/perl",
      "runId": "38706018076",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38706018076",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-perl-5.42",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "5.42",
        "5.42-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T09:14:11Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/perl@sha256:d9b53120571c55ac6103a02eb19cac74a698421ab399429676b0958ffa8cecef --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/perl@sha256:d9b53120571c55ac6103a02eb19cac74a698421ab399429676b0958ffa8cecef",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/perl@sha256:d9b53120571c55ac6103a02eb19cac74a698421ab399429676b0958ffa8cecef"
      },
      "version": "5.42"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL connection pooler built from pinned upstream source.",
      "digest": "sha256:ca49fdbbcd81b8b8b96d29c82e73c7745cb4f9547d833c6a526bf9dc5b2c0e82",
      "inputDigest": "sha256:2c7e53fe67ce5160df810f927f4371e3916f1dc95b7658444617cb8a52d97fe0",
      "name": "pgbouncer",
      "reference": "ghcr.io/tektum/pgbouncer@sha256:ca49fdbbcd81b8b8b96d29c82e73c7745cb4f9547d833c6a526bf9dc5b2c0e82",
      "registry": "ghcr.io/tektum/pgbouncer",
      "runId": "34682341005",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682341005",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-pgbouncer-1.25.2",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "1.25.2",
        "1.25.2-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:12:13Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/pgbouncer@sha256:ca49fdbbcd81b8b8b96d29c82e73c7745cb4f9547d833c6a526bf9dc5b2c0e82 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgbouncer@sha256:ca49fdbbcd81b8b8b96d29c82e73c7745cb4f9547d833c6a526bf9dc5b2c0e82",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgbouncer@sha256:ca49fdbbcd81b8b8b96d29c82e73c7745cb4f9547d833c6a526bf9dc5b2c0e82"
      },
      "version": "1.25.2"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL connection pooler assembled from Wolfi packages.",
      "digest": "sha256:c0dad6e9626ffc4a9b090fdc6cd5ca8a0319e806688fc4ce65548e06ddf47ce0",
      "inputDigest": "sha256:ed091998c13e5ff4dc9bad4b401f3299d8b95ef65857d031939311469f65eeea",
      "name": "pgcat",
      "reference": "ghcr.io/tektum/pgcat@sha256:c0dad6e9626ffc4a9b090fdc6cd5ca8a0319e806688fc4ce65548e06ddf47ce0",
      "registry": "ghcr.io/tektum/pgcat",
      "runId": "34682341872",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34682341872",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-pgcat-1",
      "sourceCommit": "3e38aa9334b078cb7eb1e105d4f17b2c6aff4c60",
      "tags": [
        "1",
        "1-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T08:36:02Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/pgcat@sha256:c0dad6e9626ffc4a9b090fdc6cd5ca8a0319e806688fc4ce65548e06ddf47ce0 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgcat@sha256:c0dad6e9626ffc4a9b090fdc6cd5ca8a0319e806688fc4ce65548e06ddf47ce0",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgcat@sha256:c0dad6e9626ffc4a9b090fdc6cd5ca8a0319e806688fc4ce65548e06ddf47ce0"
      },
      "version": "1"
    },
    {
      "category": "Databases & Caching",
      "description": "Web-based PostgreSQL browser built from pinned upstream source.",
      "digest": "sha256:5b5f7a813ab4639314a9156c6b3ef3ade4e0ccf0ccb5caf2ea4d090c4a851780",
      "inputDigest": "sha256:a4ceb658d66e878fc9791bab7371569af4252b0dc0b9c5d78bb39521c72d6b04",
      "name": "pgweb",
      "reference": "ghcr.io/tektum/pgweb@sha256:5b5f7a813ab4639314a9156c6b3ef3ade4e0ccf0ccb5caf2ea4d090c4a851780",
      "registry": "ghcr.io/tektum/pgweb",
      "runId": "38706025079",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38706025079",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-pgweb-0.17.0",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "0.17.0",
        "0.17.0-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:50:55Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/pgweb@sha256:5b5f7a813ab4639314a9156c6b3ef3ade4e0ccf0ccb5caf2ea4d090c4a851780 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgweb@sha256:5b5f7a813ab4639314a9156c6b3ef3ade4e0ccf0ccb5caf2ea4d090c4a851780",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pgweb@sha256:5b5f7a813ab4639314a9156c6b3ef3ade4e0ccf0ccb5caf2ea4d090c4a851780"
      },
      "version": "0.17.0"
    },
    {
      "category": "Languages & Build Tools",
      "description": "PHP runtime assembled from Wolfi packages.",
      "digest": "sha256:3a0af2f2dbafbd138c7f5b5bbfa915285613c1652ea935819af79b6533c189d5",
      "inputDigest": "sha256:36d656fcbaf8a2fa3d0befef4d7a2c973f52483b87e5176aa170dca4c10ed210",
      "name": "php",
      "reference": "ghcr.io/tektum/php@sha256:3a0af2f2dbafbd138c7f5b5bbfa915285613c1652ea935819af79b6533c189d5",
      "registry": "ghcr.io/tektum/php",
      "runId": "35527925485",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/35527925485",
      "scan": {
        "all": {
          "high": 2,
          "medium": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-php-8.2",
      "sourceCommit": "2c0a9917e9c4a248dccdeab4281d4c46d6ffd31c",
      "tags": [
        "8.2",
        "8.2-20260920"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-20T18:07:32Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/php@sha256:3a0af2f2dbafbd138c7f5b5bbfa915285613c1652ea935819af79b6533c189d5 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:3a0af2f2dbafbd138c7f5b5bbfa915285613c1652ea935819af79b6533c189d5",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:3a0af2f2dbafbd138c7f5b5bbfa915285613c1652ea935819af79b6533c189d5"
      },
      "version": "8.2"
    },
    {
      "category": "Languages & Build Tools",
      "description": "PHP runtime assembled from Wolfi packages.",
      "digest": "sha256:ebbce19ae430a33f52ca5498773f3e378c75f6ae6c18e31a67021d4498a229f3",
      "inputDigest": "sha256:191687f514e4143fb439fdccaed7f041fe791ea93f420d13dd9b29c856feed1c",
      "name": "php",
      "reference": "ghcr.io/tektum/php@sha256:ebbce19ae430a33f52ca5498773f3e378c75f6ae6c18e31a67021d4498a229f3",
      "registry": "ghcr.io/tektum/php",
      "runId": "38908939216",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38908939216",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-php-8.3",
      "sourceCommit": "7bbd72136b44bf09717e07482a06452f3b8238cb",
      "tags": [
        "8.3",
        "8.3-20261016"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T13:38:18Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/php@sha256:ebbce19ae430a33f52ca5498773f3e378c75f6ae6c18e31a67021d4498a229f3 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:ebbce19ae430a33f52ca5498773f3e378c75f6ae6c18e31a67021d4498a229f3",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:ebbce19ae430a33f52ca5498773f3e378c75f6ae6c18e31a67021d4498a229f3"
      },
      "version": "8.3"
    },
    {
      "category": "Languages & Build Tools",
      "description": "PHP runtime assembled from Wolfi packages.",
      "digest": "sha256:aecc09217abeb1436e79b2d2af1999e808612410c79a79ab16f8cb58fefa8c0c",
      "inputDigest": "sha256:e1f48b0db7009a7d499eb310ab58d892813b4244b6bf215fec075c0314ea2995",
      "name": "php",
      "reference": "ghcr.io/tektum/php@sha256:aecc09217abeb1436e79b2d2af1999e808612410c79a79ab16f8cb58fefa8c0c",
      "registry": "ghcr.io/tektum/php",
      "runId": "35528412251",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/35528412251",
      "scan": {
        "all": {
          "high": 2,
          "medium": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-php-8.4",
      "sourceCommit": "6add88731ef93957949577cd77b2cf3bf46f47f9",
      "tags": [
        "8.4",
        "8.4-20260920"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-20T18:16:42Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/php@sha256:aecc09217abeb1436e79b2d2af1999e808612410c79a79ab16f8cb58fefa8c0c --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:aecc09217abeb1436e79b2d2af1999e808612410c79a79ab16f8cb58fefa8c0c",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:aecc09217abeb1436e79b2d2af1999e808612410c79a79ab16f8cb58fefa8c0c"
      },
      "version": "8.4"
    },
    {
      "category": "Languages & Build Tools",
      "description": "PHP runtime assembled from Wolfi packages.",
      "digest": "sha256:0ea1338b021d4ef8800a69672ee00b0ef1436e1900d3e6c4e199d5f3f099c8ba",
      "inputDigest": "sha256:9b6706615466cf1866bc6536bc175ecdd83585fe3222c6234022b8507ba5c398",
      "name": "php",
      "reference": "ghcr.io/tektum/php@sha256:0ea1338b021d4ef8800a69672ee00b0ef1436e1900d3e6c4e199d5f3f099c8ba",
      "registry": "ghcr.io/tektum/php",
      "runId": "36457627126",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36457627126",
      "scan": {
        "all": {
          "medium": 8
        },
        "fixable": 0
      },
      "scanArtifact": "scan-php-8.5",
      "sourceCommit": "d6be364162d5958ff3727af34c74b0f2e4b510db",
      "tags": [
        "8.5",
        "8.5-20260928",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-28T17:27:46Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/php@sha256:0ea1338b021d4ef8800a69672ee00b0ef1436e1900d3e6c4e199d5f3f099c8ba --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:0ea1338b021d4ef8800a69672ee00b0ef1436e1900d3e6c4e199d5f3f099c8ba",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/php@sha256:0ea1338b021d4ef8800a69672ee00b0ef1436e1900d3e6c4e199d5f3f099c8ba"
      },
      "version": "8.5"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL Trixie patched with Copacetic.",
      "digest": "sha256:4c14ae13ab7d18597e2e0c8a87ff1be0370651c35181875a7905e6af27b759c7",
      "inputDigest": "sha256:7da29a74dcb4d55a8c1f1acc05e2026aaee6dc53e21f6b35c78de88f3aca557a",
      "name": "postgres-15-trixie",
      "reference": "ghcr.io/tektum/postgres-15-trixie@sha256:4c14ae13ab7d18597e2e0c8a87ff1be0370651c35181875a7905e6af27b759c7",
      "registry": "ghcr.io/tektum/postgres-15-trixie",
      "runId": "36848401396",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36848401396",
      "scan": {
        "delta": {
          "critical": -62,
          "high": -182,
          "low": -30,
          "medium": -100,
          "negligible": 0
        },
        "final": {
          "critical": 2,
          "high": 152,
          "low": 52,
          "medium": 172,
          "negligible": 194
        },
        "fixable": 0,
        "upstream": {
          "critical": 64,
          "high": 334,
          "low": 82,
          "medium": 272,
          "negligible": 194
        }
      },
      "scanArtifact": "scan-postgres-15-trixie-15",
      "sourceCommit": "8a2a11a7e53b0caac06ac8f8cb5cdb7cf0e238e5",
      "tags": [
        "15",
        "15-20261001",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-10-01T10:25:50Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/postgres-15-trixie@sha256:4c14ae13ab7d18597e2e0c8a87ff1be0370651c35181875a7905e6af27b759c7 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-15-trixie@sha256:4c14ae13ab7d18597e2e0c8a87ff1be0370651c35181875a7905e6af27b759c7",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-15-trixie@sha256:4c14ae13ab7d18597e2e0c8a87ff1be0370651c35181875a7905e6af27b759c7"
      },
      "version": "15"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL Trixie patched with Copacetic.",
      "digest": "sha256:ffad00b18abf2007dbf66465b4d0fe549de408094bfc76c72ccfae84257fc45b",
      "inputDigest": "sha256:efd792eee4629da7ff44e33a832fb59b93ee0e35cbc2ff3c84e8a72377e4b712",
      "name": "postgres-16-trixie",
      "reference": "ghcr.io/tektum/postgres-16-trixie@sha256:ffad00b18abf2007dbf66465b4d0fe549de408094bfc76c72ccfae84257fc45b",
      "registry": "ghcr.io/tektum/postgres-16-trixie",
      "runId": "36848404037",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36848404037",
      "scan": {
        "delta": {
          "critical": -62,
          "high": -182,
          "low": -30,
          "medium": -100,
          "negligible": 0
        },
        "final": {
          "critical": 2,
          "high": 152,
          "low": 52,
          "medium": 172,
          "negligible": 194
        },
        "fixable": 0,
        "upstream": {
          "critical": 64,
          "high": 334,
          "low": 82,
          "medium": 272,
          "negligible": 194
        }
      },
      "scanArtifact": "scan-postgres-16-trixie-16",
      "sourceCommit": "8a2a11a7e53b0caac06ac8f8cb5cdb7cf0e238e5",
      "tags": [
        "16",
        "16-20261001",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-10-01T10:25:53Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/postgres-16-trixie@sha256:ffad00b18abf2007dbf66465b4d0fe549de408094bfc76c72ccfae84257fc45b --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-16-trixie@sha256:ffad00b18abf2007dbf66465b4d0fe549de408094bfc76c72ccfae84257fc45b",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-16-trixie@sha256:ffad00b18abf2007dbf66465b4d0fe549de408094bfc76c72ccfae84257fc45b"
      },
      "version": "16"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL Trixie patched with Copacetic.",
      "digest": "sha256:35c3db715e1d9a0b26d8d93ef3743b1bc93964c1fd98c29bbb65683c8aee8c31",
      "inputDigest": "sha256:31a52ac32de5a08a774af00c77b1cbcc975bed4cade022824806895b975fbc9b",
      "name": "postgres-17-trixie",
      "reference": "ghcr.io/tektum/postgres-17-trixie@sha256:35c3db715e1d9a0b26d8d93ef3743b1bc93964c1fd98c29bbb65683c8aee8c31",
      "registry": "ghcr.io/tektum/postgres-17-trixie",
      "runId": "36848406905",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36848406905",
      "scan": {
        "delta": {
          "critical": -62,
          "high": -182,
          "low": -30,
          "medium": -100,
          "negligible": 0
        },
        "final": {
          "critical": 2,
          "high": 152,
          "low": 52,
          "medium": 172,
          "negligible": 194
        },
        "fixable": 0,
        "upstream": {
          "critical": 64,
          "high": 334,
          "low": 82,
          "medium": 272,
          "negligible": 194
        }
      },
      "scanArtifact": "scan-postgres-17-trixie-17",
      "sourceCommit": "8a2a11a7e53b0caac06ac8f8cb5cdb7cf0e238e5",
      "tags": [
        "17",
        "17-20261001",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-10-01T10:25:59Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/postgres-17-trixie@sha256:35c3db715e1d9a0b26d8d93ef3743b1bc93964c1fd98c29bbb65683c8aee8c31 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-17-trixie@sha256:35c3db715e1d9a0b26d8d93ef3743b1bc93964c1fd98c29bbb65683c8aee8c31",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-17-trixie@sha256:35c3db715e1d9a0b26d8d93ef3743b1bc93964c1fd98c29bbb65683c8aee8c31"
      },
      "version": "17"
    },
    {
      "category": "Databases & Caching",
      "description": "PostgreSQL Trixie patched with Copacetic.",
      "digest": "sha256:e3acb308984d548930b6cbca857ada987fa682ff1ebe4966afd9f08c7dfe9fd4",
      "inputDigest": "sha256:e7b3b2bd1abd56652412352300fe14cc1a8297a6ec0599921a399651e549c463",
      "name": "postgres-18-trixie",
      "reference": "ghcr.io/tektum/postgres-18-trixie@sha256:e3acb308984d548930b6cbca857ada987fa682ff1ebe4966afd9f08c7dfe9fd4",
      "registry": "ghcr.io/tektum/postgres-18-trixie",
      "runId": "36848409587",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36848409587",
      "scan": {
        "delta": {
          "critical": -62,
          "high": -182,
          "low": -30,
          "medium": -100,
          "negligible": 0
        },
        "final": {
          "critical": 2,
          "high": 152,
          "low": 52,
          "medium": 172,
          "negligible": 194
        },
        "fixable": 0,
        "upstream": {
          "critical": 64,
          "high": 334,
          "low": 82,
          "medium": 272,
          "negligible": 194
        }
      },
      "scanArtifact": "scan-postgres-18-trixie-18",
      "sourceCommit": "8a2a11a7e53b0caac06ac8f8cb5cdb7cf0e238e5",
      "tags": [
        "18",
        "18-20261001",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-10-01T10:27:01Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/postgres-18-trixie@sha256:e3acb308984d548930b6cbca857ada987fa682ff1ebe4966afd9f08c7dfe9fd4 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-18-trixie@sha256:e3acb308984d548930b6cbca857ada987fa682ff1ebe4966afd9f08c7dfe9fd4",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/postgres-18-trixie@sha256:e3acb308984d548930b6cbca857ada987fa682ff1ebe4966afd9f08c7dfe9fd4"
      },
      "version": "18"
    },
    {
      "category": "Monitoring & Observability",
      "description": "Prometheus monitoring and time-series database built from pinned upstream source.",
      "digest": "sha256:239aba5e37f3b5e2fdfbc460d8efbe6cb6b47d947e96ddb4d9ecb41164e86c7a",
      "inputDigest": "sha256:621b117f03ed607fdc9dabbdefdaa64a92d30cb950aeecd13485dd0ac5c49a33",
      "name": "prometheus",
      "reference": "ghcr.io/tektum/prometheus@sha256:239aba5e37f3b5e2fdfbc460d8efbe6cb6b47d947e96ddb4d9ecb41164e86c7a",
      "registry": "ghcr.io/tektum/prometheus",
      "runId": "35523105851",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/35523105851",
      "scan": {
        "all": {
          "unknown": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-prometheus-3.11",
      "sourceCommit": "bae1847d4e560bd97c8cdd28b2b51b8ab6ed62c6",
      "tags": [
        "3.11",
        "3.11-20260920",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-20T17:30:52Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/prometheus@sha256:239aba5e37f3b5e2fdfbc460d8efbe6cb6b47d947e96ddb4d9ecb41164e86c7a --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/prometheus@sha256:239aba5e37f3b5e2fdfbc460d8efbe6cb6b47d947e96ddb4d9ecb41164e86c7a",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/prometheus@sha256:239aba5e37f3b5e2fdfbc460d8efbe6cb6b47d947e96ddb4d9ecb41164e86c7a"
      },
      "version": "3.11"
    },
    {
      "description": "Prometheus Operator built from pinned upstream source.",
      "digest": "sha256:3274952d1d950a41cf9a186f624b3effa75800499226db2fbcf0689617f3535e",
      "inputDigest": "sha256:6534ad440400a6a957bb318e5458d4ad3568422d1b7669213f88f8e588c246e0",
      "name": "prometheus-operator",
      "reference": "ghcr.io/tektum/prometheus-operator@sha256:3274952d1d950a41cf9a186f624b3effa75800499226db2fbcf0689617f3535e",
      "registry": "ghcr.io/tektum/prometheus-operator",
      "runId": "34589171171",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34589171171",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-prometheus-operator-0.94.0",
      "sourceCommit": "dfc8fc37e349920b63964f8c2e8fd75cd28c49be",
      "tags": [
        "0.94.0",
        "0.94.0-20260911",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-11T11:04:37Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/prometheus-operator@sha256:3274952d1d950a41cf9a186f624b3effa75800499226db2fbcf0689617f3535e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/prometheus-operator@sha256:3274952d1d950a41cf9a186f624b3effa75800499226db2fbcf0689617f3535e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/prometheus-operator@sha256:3274952d1d950a41cf9a186f624b3effa75800499226db2fbcf0689617f3535e"
      },
      "version": "0.94.0"
    },
    {
      "category": "Databases & Caching",
      "description": "High-performance MySQL proxy assembled from Wolfi packages.",
      "digest": "sha256:f297bb31ffefac63bfef22fce16127daac30f429ff309bd6e8885f9dd26abc05",
      "inputDigest": "sha256:fb162082524b5e3378d423eada1e9181b00cbf48ddad4cf9deb6bd13f8f85d06",
      "name": "proxysql",
      "reference": "ghcr.io/tektum/proxysql@sha256:f297bb31ffefac63bfef22fce16127daac30f429ff309bd6e8885f9dd26abc05",
      "registry": "ghcr.io/tektum/proxysql",
      "runId": "35345634920",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/35345634920",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-proxysql-3",
      "sourceCommit": "1e5ddadf09942e9b3bbf5c6951c505ca6c725043",
      "tags": [
        "3",
        "3-20260918",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-18T12:39:52Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/proxysql@sha256:f297bb31ffefac63bfef22fce16127daac30f429ff309bd6e8885f9dd26abc05 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/proxysql@sha256:f297bb31ffefac63bfef22fce16127daac30f429ff309bd6e8885f9dd26abc05",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/proxysql@sha256:f297bb31ffefac63bfef22fce16127daac30f429ff309bd6e8885f9dd26abc05"
      },
      "version": "3"
    },
    {
      "category": "Monitoring & Observability",
      "description": "Prometheus Pushgateway push acceptor for ephemeral and batch jobs, built from a pinned source commit.",
      "digest": "sha256:23212f9198500dff9aa3659294791f4e1ee48d492578467fa225bd520698f95e",
      "inputDigest": "sha256:069694e6d14d4a4c4bf281f0412712c9621b2d7d4c2752421d41bf1e65a8be06",
      "name": "pushgateway",
      "reference": "ghcr.io/tektum/pushgateway@sha256:23212f9198500dff9aa3659294791f4e1ee48d492578467fa225bd520698f95e",
      "registry": "ghcr.io/tektum/pushgateway",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-pushgateway-1.11",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "1.11",
        "1.11-20260907",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-07T16:36:58Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/pushgateway@sha256:23212f9198500dff9aa3659294791f4e1ee48d492578467fa225bd520698f95e --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pushgateway@sha256:23212f9198500dff9aa3659294791f4e1ee48d492578467fa225bd520698f95e",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/pushgateway@sha256:23212f9198500dff9aa3659294791f4e1ee48d492578467fa225bd520698f95e"
      },
      "version": "1.11"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Python runtime assembled from Wolfi packages.",
      "digest": "sha256:68352b5e0d08575c2ea8d3e274d50d2a7194c8baa31ef6a8550667af29b64246",
      "inputDigest": "sha256:7a1a7031936e113d8eb7f24d2f96633a55dea0fe21bb0a4b6c3e2ea60ce6eb32",
      "name": "python",
      "reference": "ghcr.io/tektum/python@sha256:68352b5e0d08575c2ea8d3e274d50d2a7194c8baa31ef6a8550667af29b64246",
      "registry": "ghcr.io/tektum/python",
      "runId": "36457627126",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36457627126",
      "scan": {
        "all": {
          "high": 4,
          "low": 2,
          "medium": 22,
          "negligible": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-python-3.10",
      "sourceCommit": "d6be364162d5958ff3727af34c74b0f2e4b510db",
      "tags": [
        "3.10",
        "3.10-20260928"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-28T17:27:53Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/python@sha256:68352b5e0d08575c2ea8d3e274d50d2a7194c8baa31ef6a8550667af29b64246 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:68352b5e0d08575c2ea8d3e274d50d2a7194c8baa31ef6a8550667af29b64246",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:68352b5e0d08575c2ea8d3e274d50d2a7194c8baa31ef6a8550667af29b64246"
      },
      "version": "3.10"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Python runtime assembled from Wolfi packages.",
      "digest": "sha256:1c389498f301e8da2c8914131d25dc97813d22a20de3ac9daa249e0eb2956c64",
      "inputDigest": "sha256:db4fa0ef5139cf22315206af51115fb2b3892b39ad53c3d549c035a09a8742de",
      "name": "python",
      "reference": "ghcr.io/tektum/python@sha256:1c389498f301e8da2c8914131d25dc97813d22a20de3ac9daa249e0eb2956c64",
      "registry": "ghcr.io/tektum/python",
      "runId": "38909808970",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38909808970",
      "scan": {
        "all": {
          "medium": 12,
          "negligible": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-python-3.11",
      "sourceCommit": "045712bc47788b5e6b5e8ac65ab694799b1b88b9",
      "tags": [
        "3.11",
        "3.11-20261016"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T13:45:44Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/python@sha256:1c389498f301e8da2c8914131d25dc97813d22a20de3ac9daa249e0eb2956c64 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:1c389498f301e8da2c8914131d25dc97813d22a20de3ac9daa249e0eb2956c64",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:1c389498f301e8da2c8914131d25dc97813d22a20de3ac9daa249e0eb2956c64"
      },
      "version": "3.11"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Python runtime assembled from Wolfi packages.",
      "digest": "sha256:4a58a70e06e6d2f5e81d9daa7fbf891b5d14fc1c0c3acc4a10e4c5c1255fe123",
      "inputDigest": "sha256:ae1f27877cc4eadc6050e5a9e4dbd60aeb3a4b922c70eb6b09737f931d3b8566",
      "name": "python",
      "reference": "ghcr.io/tektum/python@sha256:4a58a70e06e6d2f5e81d9daa7fbf891b5d14fc1c0c3acc4a10e4c5c1255fe123",
      "registry": "ghcr.io/tektum/python",
      "runId": "38909390993",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38909390993",
      "scan": {
        "all": {
          "medium": 12,
          "negligible": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-python-3.12",
      "sourceCommit": "c56e55b44a65b67f31a59367957395716873b97a",
      "tags": [
        "3.12",
        "3.12-20261016"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T13:41:44Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/python@sha256:4a58a70e06e6d2f5e81d9daa7fbf891b5d14fc1c0c3acc4a10e4c5c1255fe123 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:4a58a70e06e6d2f5e81d9daa7fbf891b5d14fc1c0c3acc4a10e4c5c1255fe123",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/python@sha256:4a58a70e06e6d2f5e81d9daa7fbf891b5d14fc1c0c3acc4a10e4c5c1255fe123"
      },
      "version": "3.12"
    },
    {
      "category": "Messaging & Streaming",
      "description": "RabbitMQ patched from the official image.",
      "digest": "sha256:216eb9955f8f93363f11f2ab8a9e5b4f74caaa235add046a4d6b3f87f7cff0dc",
      "inputDigest": "sha256:a0d1d4f322477454a8a49a71e19979769d54a9cb949998c0c79a5bc5fa2abef6",
      "name": "rabbitmq",
      "reference": "ghcr.io/tektum/rabbitmq@sha256:216eb9955f8f93363f11f2ab8a9e5b4f74caaa235add046a4d6b3f87f7cff0dc",
      "registry": "ghcr.io/tektum/rabbitmq",
      "runId": "35324116481",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/35324116481",
      "scan": {
        "delta": {
          "critical": -6,
          "high": -54,
          "low": -22,
          "medium": -198,
          "negligible": 0
        },
        "final": {
          "low": 12,
          "medium": 96,
          "negligible": 4
        },
        "fixable": 0,
        "upstream": {
          "critical": 6,
          "high": 54,
          "low": 34,
          "medium": 294,
          "negligible": 4
        }
      },
      "scanArtifact": "scan-rabbitmq-4.3",
      "sourceCommit": "b77d6b405d5fd6639438ae74591bcc9874a2a561",
      "tags": [
        "4",
        "4.3",
        "latest"
      ],
      "track": "patched",
      "validatedAt": "2026-09-18T08:40:46Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/rabbitmq@sha256:216eb9955f8f93363f11f2ab8a9e5b4f74caaa235add046a4d6b3f87f7cff0dc --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rabbitmq@sha256:216eb9955f8f93363f11f2ab8a9e5b4f74caaa235add046a4d6b3f87f7cff0dc",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rabbitmq@sha256:216eb9955f8f93363f11f2ab8a9e5b4f74caaa235add046a4d6b3f87f7cff0dc"
      },
      "version": "4.3"
    },
    {
      "category": "Messaging & Streaming",
      "description": "RabbitMQ Cluster Operator assembled from pinned source.",
      "digest": "sha256:89ea97cfae0359c00c997ca44ec1639951e07cae92b42609431e5120413313f7",
      "inputDigest": "sha256:7e2f101caffa67d57b2fb48f82e565db80807eb8158675cce7b456265c4890f9",
      "name": "rabbitmq-cluster-operator",
      "reference": "ghcr.io/tektum/rabbitmq-cluster-operator@sha256:89ea97cfae0359c00c997ca44ec1639951e07cae92b42609431e5120413313f7",
      "registry": "ghcr.io/tektum/rabbitmq-cluster-operator",
      "runId": "38750765388",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38750765388",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-rabbitmq-cluster-operator-2",
      "sourceCommit": "288b74fa4449ab7cda4171bfcd8a7f82430f9d4e",
      "tags": [
        "2",
        "2-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T14:39:34Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/rabbitmq-cluster-operator@sha256:89ea97cfae0359c00c997ca44ec1639951e07cae92b42609431e5120413313f7 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rabbitmq-cluster-operator@sha256:89ea97cfae0359c00c997ca44ec1639951e07cae92b42609431e5120413313f7",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rabbitmq-cluster-operator@sha256:89ea97cfae0359c00c997ca44ec1639951e07cae92b42609431e5120413313f7"
      },
      "version": "2"
    },
    {
      "description": "Restic backup and restore CLI built from pinned upstream source.",
      "digest": "sha256:559572173306828913d1b2042a4c1596afb56c0a6f7cb4a3695b7531403ba444",
      "inputDigest": "sha256:c253e0132cd60f7263f91ef20f983cfdd868d88cd98ae358b8bb240fbd54978e",
      "name": "restic",
      "reference": "ghcr.io/tektum/restic@sha256:559572173306828913d1b2042a4c1596afb56c0a6f7cb4a3695b7531403ba444",
      "registry": "ghcr.io/tektum/restic",
      "runId": "38706044226",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38706044226",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-restic-0.18",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "0.18",
        "0.18-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:59:12Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/restic@sha256:559572173306828913d1b2042a4c1596afb56c0a6f7cb4a3695b7531403ba444 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/restic@sha256:559572173306828913d1b2042a4c1596afb56c0a6f7cb4a3695b7531403ba444",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/restic@sha256:559572173306828913d1b2042a4c1596afb56c0a6f7cb4a3695b7531403ba444"
      },
      "version": "0.18"
    },
    {
      "category": "Databases & Caching",
      "description": "rqlite distributed SQLite built from pinned upstream source.",
      "digest": "sha256:b76c66d6b40303f67a1cf3ae4710967e05a6ff4f56e56cfebf47250d70a99ae0",
      "inputDigest": "sha256:34b31e7c68f248403d68bd9d24d6f1a6632c015d6de25c4a4fa4b92cdc81e931",
      "name": "rqlite",
      "reference": "ghcr.io/tektum/rqlite@sha256:b76c66d6b40303f67a1cf3ae4710967e05a6ff4f56e56cfebf47250d70a99ae0",
      "registry": "ghcr.io/tektum/rqlite",
      "runId": "38706047262",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38706047262",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-rqlite-8",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "8",
        "8-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T09:14:42Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/rqlite@sha256:b76c66d6b40303f67a1cf3ae4710967e05a6ff4f56e56cfebf47250d70a99ae0 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rqlite@sha256:b76c66d6b40303f67a1cf3ae4710967e05a6ff4f56e56cfebf47250d70a99ae0",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rqlite@sha256:b76c66d6b40303f67a1cf3ae4710967e05a6ff4f56e56cfebf47250d70a99ae0"
      },
      "version": "8"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:f24cac8a891872ecd6785a6decf9a2a359fc86e895b7792afd7ee38b5c123f48",
      "inputDigest": "sha256:12a371e348b345e2737da59abd0024eb8a5fdddfdb9274c2b09ad82cfc0d364e",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:f24cac8a891872ecd6785a6decf9a2a359fc86e895b7792afd7ee38b5c123f48",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "38910165777",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38910165777",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-3.3",
      "sourceCommit": "240fae3dc88270e5edad98e40e0b9079bc8563b6",
      "tags": [
        "3.3",
        "3.3-20261016"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T13:49:14Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:f24cac8a891872ecd6785a6decf9a2a359fc86e895b7792afd7ee38b5c123f48 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:f24cac8a891872ecd6785a6decf9a2a359fc86e895b7792afd7ee38b5c123f48",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:f24cac8a891872ecd6785a6decf9a2a359fc86e895b7792afd7ee38b5c123f48"
      },
      "version": "3.3"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:ea56afdb8b490e79bbff6b35b5bbb5b735ed1e1ce07074e281f1d1cfa6d0eb50",
      "inputDigest": "sha256:39276ebfad23d41a59c7157f16e658d49de929173eb2242662cd6e8bd19fe27d",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:ea56afdb8b490e79bbff6b35b5bbb5b735ed1e1ce07074e281f1d1cfa6d0eb50",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "38910165777",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38910165777",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-3.3-dev",
      "sourceCommit": "240fae3dc88270e5edad98e40e0b9079bc8563b6",
      "tags": [
        "3.3-dev",
        "3.3-20261016-dev"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T13:50:29Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:ea56afdb8b490e79bbff6b35b5bbb5b735ed1e1ce07074e281f1d1cfa6d0eb50 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:ea56afdb8b490e79bbff6b35b5bbb5b735ed1e1ce07074e281f1d1cfa6d0eb50",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:ea56afdb8b490e79bbff6b35b5bbb5b735ed1e1ce07074e281f1d1cfa6d0eb50"
      },
      "version": "3.3-dev"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:ff1026828be8638d26da29276ec016dde4a4032873d6a57c260c8e76f404c0dd",
      "inputDigest": "sha256:2671df0355b0d877d397ea36d929bed2acb353a36fec987b2883cf63a4988277",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:ff1026828be8638d26da29276ec016dde4a4032873d6a57c260c8e76f404c0dd",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "38910165777",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38910165777",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-3.3-fips",
      "sourceCommit": "240fae3dc88270e5edad98e40e0b9079bc8563b6",
      "tags": [
        "3.3-fips",
        "3.3-20261016-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T13:49:22Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:ff1026828be8638d26da29276ec016dde4a4032873d6a57c260c8e76f404c0dd --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:ff1026828be8638d26da29276ec016dde4a4032873d6a57c260c8e76f404c0dd",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:ff1026828be8638d26da29276ec016dde4a4032873d6a57c260c8e76f404c0dd"
      },
      "version": "3.3-fips"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:47095d37ace64907d713054e37cd71365b5b22cd0e0a64c2e2f70fb915d38a01",
      "inputDigest": "sha256:d23d4649794b617b0421f365aa9f81e8e410ebef2ab86598c019cf05a48bfb8b",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:47095d37ace64907d713054e37cd71365b5b22cd0e0a64c2e2f70fb915d38a01",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "38910165777",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38910165777",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-4.0",
      "sourceCommit": "240fae3dc88270e5edad98e40e0b9079bc8563b6",
      "tags": [
        "4.0",
        "4.0-20261016",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T13:49:22Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:47095d37ace64907d713054e37cd71365b5b22cd0e0a64c2e2f70fb915d38a01 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:47095d37ace64907d713054e37cd71365b5b22cd0e0a64c2e2f70fb915d38a01",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:47095d37ace64907d713054e37cd71365b5b22cd0e0a64c2e2f70fb915d38a01"
      },
      "version": "4.0"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:0df5dafe25d1e6ca2fa701dfb3f93f0632f1f9cdac590ef9a97095b9354ad8bc",
      "inputDigest": "sha256:614b82ae841ee664b4aece60f21a44272165203bb0d833def2e39a04fb3395fd",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:0df5dafe25d1e6ca2fa701dfb3f93f0632f1f9cdac590ef9a97095b9354ad8bc",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "38910165777",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38910165777",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-4.0-dev",
      "sourceCommit": "240fae3dc88270e5edad98e40e0b9079bc8563b6",
      "tags": [
        "4.0-dev",
        "4.0-20261016-dev",
        "latest-dev"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T13:50:47Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:0df5dafe25d1e6ca2fa701dfb3f93f0632f1f9cdac590ef9a97095b9354ad8bc --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:0df5dafe25d1e6ca2fa701dfb3f93f0632f1f9cdac590ef9a97095b9354ad8bc",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:0df5dafe25d1e6ca2fa701dfb3f93f0632f1f9cdac590ef9a97095b9354ad8bc"
      },
      "version": "4.0-dev"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Ruby runtime with plain, dev, and OpenSSL provider-backed FIPS flavors.",
      "digest": "sha256:b0cb7dd9290b1cd01b5cb3c457c2ae62ab2face30d4416a1c61627e1b6a8914b",
      "inputDigest": "sha256:2a33c20c34965aed9b44f8c485d5cc8d6355cba33bb4358f14cf73471dc65e7a",
      "name": "ruby",
      "reference": "ghcr.io/tektum/ruby@sha256:b0cb7dd9290b1cd01b5cb3c457c2ae62ab2face30d4416a1c61627e1b6a8914b",
      "registry": "ghcr.io/tektum/ruby",
      "runId": "38910165777",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38910165777",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-ruby-4.0-fips",
      "sourceCommit": "240fae3dc88270e5edad98e40e0b9079bc8563b6",
      "tags": [
        "4.0-fips",
        "4.0-20261016-fips",
        "latest-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T13:49:25Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/ruby@sha256:b0cb7dd9290b1cd01b5cb3c457c2ae62ab2face30d4416a1c61627e1b6a8914b --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:b0cb7dd9290b1cd01b5cb3c457c2ae62ab2face30d4416a1c61627e1b6a8914b",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/ruby@sha256:b0cb7dd9290b1cd01b5cb3c457c2ae62ab2face30d4416a1c61627e1b6a8914b"
      },
      "version": "4.0-fips"
    },
    {
      "category": "Languages & Build Tools",
      "description": "Rust toolchain assembled from Wolfi packages.",
      "digest": "sha256:c648714497798a6ac38c23039c5658644d30fe48f5d6c28191781dcd088aca40",
      "inputDigest": "sha256:cc562dacfb2357a936685e0e39a2ac5d71ec31e4aa1e1c657ea852f33567f976",
      "name": "rust",
      "reference": "ghcr.io/tektum/rust@sha256:c648714497798a6ac38c23039c5658644d30fe48f5d6c28191781dcd088aca40",
      "registry": "ghcr.io/tektum/rust",
      "runId": "36457254843",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/36457254843",
      "scan": {
        "all": {
          "medium": 8
        },
        "fixable": 0
      },
      "scanArtifact": "scan-rust-1",
      "sourceCommit": "5247946ca467da2ab2c5d9c8769b5ec7a4ecc62a",
      "tags": [
        "1",
        "1-20260928",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-28T17:24:07Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/rust@sha256:c648714497798a6ac38c23039c5658644d30fe48f5d6c28191781dcd088aca40 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rust@sha256:c648714497798a6ac38c23039c5658644d30fe48f5d6c28191781dcd088aca40",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/rust@sha256:c648714497798a6ac38c23039c5658644d30fe48f5d6c28191781dcd088aca40"
      },
      "version": "1"
    },
    {
      "category": "Security & Identity",
      "description": "Sealed Secrets controller and kubeseal CLI built from pinned upstream source.",
      "digest": "sha256:bfa3025b00ad07f950e459cb89f906e0cb26066badc34238ee5944bafaade022",
      "inputDigest": "sha256:4d5cb940c84861ac3df07fcda31f4db0cb4c100f6c0543ff273d93616ab63729",
      "name": "sealed-secrets",
      "reference": "ghcr.io/tektum/sealed-secrets@sha256:bfa3025b00ad07f950e459cb89f906e0cb26066badc34238ee5944bafaade022",
      "registry": "ghcr.io/tektum/sealed-secrets",
      "runId": "38706056323",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38706056323",
      "scan": {
        "all": {
          "unknown": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-sealed-secrets-0.39.1",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "0.39.1",
        "0.39.1-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:56:05Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/sealed-secrets@sha256:bfa3025b00ad07f950e459cb89f906e0cb26066badc34238ee5944bafaade022 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/sealed-secrets@sha256:bfa3025b00ad07f950e459cb89f906e0cb26066badc34238ee5944bafaade022",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/sealed-secrets@sha256:bfa3025b00ad07f950e459cb89f906e0cb26066badc34238ee5944bafaade022"
      },
      "version": "0.39.1"
    },
    {
      "description": "Flux source-controller built from a pinned upstream source commit.",
      "digest": "sha256:45dbf6413dacd95b203512e32628ecf4e58831e749077f92a2ff4e57708e3140",
      "inputDigest": "sha256:c61e50044d88d7ee971c18bb880099d844fa116bb7015eb3fb072aa5e6e8a28f",
      "name": "source-controller",
      "reference": "ghcr.io/tektum/source-controller@sha256:45dbf6413dacd95b203512e32628ecf4e58831e749077f92a2ff4e57708e3140",
      "registry": "ghcr.io/tektum/source-controller",
      "runId": "38706058871",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38706058871",
      "scan": {
        "all": {
          "unknown": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-source-controller-1.9",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.9",
        "1.9-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T09:05:24Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/source-controller@sha256:45dbf6413dacd95b203512e32628ecf4e58831e749077f92a2ff4e57708e3140 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/source-controller@sha256:45dbf6413dacd95b203512e32628ecf4e58831e749077f92a2ff4e57708e3140",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/source-controller@sha256:45dbf6413dacd95b203512e32628ecf4e58831e749077f92a2ff4e57708e3140"
      },
      "version": "1.9"
    },
    {
      "category": "Base & Utilities",
      "description": "Minimal root filesystem with CA certificates and timezone data.",
      "digest": "sha256:98f01c6d01564365cca9d4d77b3acf1fbef0efe0649e12aa3bf03a484031c653",
      "inputDigest": "sha256:39197f2de77fca4b0489f4245bccc1d798626d2f77e7f8681e6fae70f8e9be84",
      "name": "static",
      "reference": "ghcr.io/tektum/static@sha256:98f01c6d01564365cca9d4d77b3acf1fbef0efe0649e12aa3bf03a484031c653",
      "registry": "ghcr.io/tektum/static",
      "runId": "38729722510",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38729722510",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-static-wolfi",
      "sourceCommit": "8125181b61b94c3a2624c4012b3795de4dc9d0a1",
      "tags": [
        "wolfi",
        "wolfi-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T11:49:09Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/static@sha256:98f01c6d01564365cca9d4d77b3acf1fbef0efe0649e12aa3bf03a484031c653 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/static@sha256:98f01c6d01564365cca9d4d77b3acf1fbef0efe0649e12aa3bf03a484031c653",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/static@sha256:98f01c6d01564365cca9d4d77b3acf1fbef0efe0649e12aa3bf03a484031c653"
      },
      "version": "wolfi"
    },
    {
      "description": "Tekton Pipelines Kubernetes controller built from a pinned upstream source commit.",
      "digest": "sha256:80be9f271b0544955482ce77ca0d841d0ee8435ba6e2ae271cfeca972011368f",
      "inputDigest": "sha256:01317fec9470a2a3cc88b93722a9145729c95f8ca2a7d4097e0749e4bbe29c55",
      "name": "tekton-controller",
      "reference": "ghcr.io/tektum/tekton-controller@sha256:80be9f271b0544955482ce77ca0d841d0ee8435ba6e2ae271cfeca972011368f",
      "registry": "ghcr.io/tektum/tekton-controller",
      "runId": "38706061347",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38706061347",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-tekton-controller-1.15",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.15",
        "1.15-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T09:09:20Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/tekton-controller@sha256:80be9f271b0544955482ce77ca0d841d0ee8435ba6e2ae271cfeca972011368f --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/tekton-controller@sha256:80be9f271b0544955482ce77ca0d841d0ee8435ba6e2ae271cfeca972011368f",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/tekton-controller@sha256:80be9f271b0544955482ce77ca0d841d0ee8435ba6e2ae271cfeca972011368f"
      },
      "version": "1.15"
    },
    {
      "category": "CI/CD & GitOps",
      "description": "OpenTofu Terraform-compatible IaC CLI published as terraform from pinned upstream source.",
      "digest": "sha256:a413b1d7e1342da5832a78fd4ba45df5971910e033f79e24e82cb3a61b1d8231",
      "inputDigest": "sha256:13f10af4e67f1a81fbca94690c99681890584f1b1f19687038a2a203c01967ab",
      "name": "terraform",
      "reference": "ghcr.io/tektum/terraform@sha256:a413b1d7e1342da5832a78fd4ba45df5971910e033f79e24e82cb3a61b1d8231",
      "registry": "ghcr.io/tektum/terraform",
      "runId": "38706063895",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38706063895",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-terraform-1.12",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "1.12",
        "1.12-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T09:13:17Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/terraform@sha256:a413b1d7e1342da5832a78fd4ba45df5971910e033f79e24e82cb3a61b1d8231 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/terraform@sha256:a413b1d7e1342da5832a78fd4ba45df5971910e033f79e24e82cb3a61b1d8231",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/terraform@sha256:a413b1d7e1342da5832a78fd4ba45df5971910e033f79e24e82cb3a61b1d8231"
      },
      "version": "1.12"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Traefik built from pinned source with plain and Go FIPS flavors.",
      "digest": "sha256:c3c11a4e9e45dfe2cb838b3c06579af7c5c8aad91351b785b1a5291220b9ea0c",
      "inputDigest": "sha256:9f0b474d2993743ae104312bb0e720757392873c6cdce93c4ad2b90a14e068e1",
      "name": "traefik",
      "reference": "ghcr.io/tektum/traefik@sha256:c3c11a4e9e45dfe2cb838b3c06579af7c5c8aad91351b785b1a5291220b9ea0c",
      "registry": "ghcr.io/tektum/traefik",
      "runId": "38706066564",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38706066564",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-traefik-3.7.13",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "3",
        "3.7.13",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T09:09:40Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/traefik@sha256:c3c11a4e9e45dfe2cb838b3c06579af7c5c8aad91351b785b1a5291220b9ea0c --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/traefik@sha256:c3c11a4e9e45dfe2cb838b3c06579af7c5c8aad91351b785b1a5291220b9ea0c",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/traefik@sha256:c3c11a4e9e45dfe2cb838b3c06579af7c5c8aad91351b785b1a5291220b9ea0c"
      },
      "version": "3.7.13"
    },
    {
      "category": "Web Servers & Proxies",
      "description": "Traefik built from pinned source with plain and Go FIPS flavors.",
      "digest": "sha256:5caa9b6b091ff236dfb8cc4d17b12f1d55382564755c324a3e8ba72d31cead8b",
      "inputDigest": "sha256:287fa38ec5112b23789522150784f7538849021ad491519399bc5dccd542de24",
      "name": "traefik",
      "reference": "ghcr.io/tektum/traefik@sha256:5caa9b6b091ff236dfb8cc4d17b12f1d55382564755c324a3e8ba72d31cead8b",
      "registry": "ghcr.io/tektum/traefik",
      "runId": "38706069085",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38706069085",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-traefik-3.7.13-fips",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "3-fips",
        "3.7.13-fips",
        "latest-fips"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T09:08:46Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/traefik@sha256:5caa9b6b091ff236dfb8cc4d17b12f1d55382564755c324a3e8ba72d31cead8b --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/traefik@sha256:5caa9b6b091ff236dfb8cc4d17b12f1d55382564755c324a3e8ba72d31cead8b",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/traefik@sha256:5caa9b6b091ff236dfb8cc4d17b12f1d55382564755c324a3e8ba72d31cead8b"
      },
      "version": "3.7.13-fips"
    },
    {
      "category": "Security & Identity",
      "description": "Vulnerability and misconfiguration scanner.",
      "digest": "sha256:280b75dc90604f7b54069f044ed7a4d111a9c80807549e3f97d39a91f64bd119",
      "inputDigest": "sha256:1f0216f74bb23ab2b47d40df3bb6c6453ae7490b621b8910a54e9285d628c0f9",
      "name": "trivy",
      "reference": "ghcr.io/tektum/trivy@sha256:280b75dc90604f7b54069f044ed7a4d111a9c80807549e3f97d39a91f64bd119",
      "registry": "ghcr.io/tektum/trivy",
      "runId": "38753781576",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38753781576",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-trivy-0.75.0",
      "sourceCommit": "385dc26c06340f59d162659e1e3be47201894a33",
      "tags": [
        "0.75.0",
        "0.75.0-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T15:32:59Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/trivy@sha256:280b75dc90604f7b54069f044ed7a4d111a9c80807549e3f97d39a91f64bd119 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/trivy@sha256:280b75dc90604f7b54069f044ed7a4d111a9c80807549e3f97d39a91f64bd119",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/trivy@sha256:280b75dc90604f7b54069f044ed7a4d111a9c80807549e3f97d39a91f64bd119"
      },
      "version": "0.75.0"
    },
    {
      "category": "Databases & Caching",
      "description": "Valkey built from pinned source with CLI and persistent data support.",
      "digest": "sha256:78f68df11627b627c149046c06de6170d25bf096c7c3956408978bb1a412a277",
      "inputDigest": "sha256:59ef747d7483579af7ae2fdce243fc73707c9e478055d6fc1042d1c21cb0551d",
      "name": "valkey",
      "reference": "ghcr.io/tektum/valkey@sha256:78f68df11627b627c149046c06de6170d25bf096c7c3956408978bb1a412a277",
      "registry": "ghcr.io/tektum/valkey",
      "runId": "38706071597",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38706071597",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-valkey-9.1",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "9.1",
        "9.1-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T08:53:00Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/valkey@sha256:78f68df11627b627c149046c06de6170d25bf096c7c3956408978bb1a412a277 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/valkey@sha256:78f68df11627b627c149046c06de6170d25bf096c7c3956408978bb1a412a277",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/valkey@sha256:78f68df11627b627c149046c06de6170d25bf096c7c3956408978bb1a412a277"
      },
      "version": "9.1"
    },
    {
      "description": "Minimal Vector stdin-to-console observability pipeline built from source on Wolfi.",
      "digest": "sha256:2724dcc2c025dde12f57643c99aed89efff7d091bb5ee4547d71f210360a32c4",
      "inputDigest": "sha256:28008066df37d73433290c42c6243e1d6da182f17dbff12681dc0ac7ef79d762",
      "name": "vector",
      "reference": "ghcr.io/tektum/vector@sha256:2724dcc2c025dde12f57643c99aed89efff7d091bb5ee4547d71f210360a32c4",
      "registry": "ghcr.io/tektum/vector",
      "runId": "38775113877",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38775113877",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-vector-0.59",
      "sourceCommit": "1a3a4dfd003d02c42d657a99ac148cb0aa841912",
      "tags": [
        "0.59",
        "0.59-20261015",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-15T19:08:39Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/vector@sha256:2724dcc2c025dde12f57643c99aed89efff7d091bb5ee4547d71f210360a32c4 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/vector@sha256:2724dcc2c025dde12f57643c99aed89efff7d091bb5ee4547d71f210360a32c4",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/vector@sha256:2724dcc2c025dde12f57643c99aed89efff7d091bb5ee4547d71f210360a32c4"
      },
      "version": "0.59"
    },
    {
      "category": "Kubernetes & Orchestration",
      "description": "Kubernetes backup and restore from pinned upstream source.",
      "digest": "sha256:63730241367974420192b075d632b72101faee4985453290c5f90ffc383399fa",
      "inputDigest": "sha256:49cab7e38a175db633b5b2099999c05f60997987c1c49ca50feca8e8ba6fc3de",
      "name": "velero",
      "reference": "ghcr.io/tektum/velero@sha256:63730241367974420192b075d632b72101faee4985453290c5f90ffc383399fa",
      "registry": "ghcr.io/tektum/velero",
      "runId": "34687635894",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34687635894",
      "scan": {
        "all": {
          "unknown": 4
        },
        "fixable": 0
      },
      "scanArtifact": "scan-velero-1.18.2",
      "sourceCommit": "b1b69f61e710bdeb5e5904c9d1ad09b69f6d39ee",
      "tags": [
        "1.18.2",
        "1.18.2-20260912",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-12T10:44:45Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/velero@sha256:63730241367974420192b075d632b72101faee4985453290c5f90ffc383399fa --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/velero@sha256:63730241367974420192b075d632b72101faee4985453290c5f90ffc383399fa",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/velero@sha256:63730241367974420192b075d632b72101faee4985453290c5f90ffc383399fa"
      },
      "version": "1.18.2"
    },
    {
      "category": "Base & Utilities",
      "description": "Small interactive Wolfi base with apk and BusyBox.",
      "digest": "sha256:94b65f172e0651f328ac025cb5b29f2135af09830c0594951cc7ecfb55a10512",
      "inputDigest": "sha256:399b56138b579a07a76b2ceb9deaf3f67596ad4fbb98ab47f8399ee20c64f149",
      "name": "wolfi-base",
      "reference": "ghcr.io/tektum/wolfi-base@sha256:94b65f172e0651f328ac025cb5b29f2135af09830c0594951cc7ecfb55a10512",
      "registry": "ghcr.io/tektum/wolfi-base",
      "runId": "38910165777",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38910165777",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-wolfi-base-wolfi",
      "sourceCommit": "240fae3dc88270e5edad98e40e0b9079bc8563b6",
      "tags": [
        "wolfi",
        "wolfi-20261016",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T13:48:58Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/wolfi-base@sha256:94b65f172e0651f328ac025cb5b29f2135af09830c0594951cc7ecfb55a10512 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/wolfi-base@sha256:94b65f172e0651f328ac025cb5b29f2135af09830c0594951cc7ecfb55a10512",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/wolfi-base@sha256:94b65f172e0651f328ac025cb5b29f2135af09830c0594951cc7ecfb55a10512"
      },
      "version": "wolfi"
    },
    {
      "category": "Base & Utilities",
      "description": "Minimal yq image assembled from Wolfi packages.",
      "digest": "sha256:5c38895851a8f35e475ca21ad6017d94d1c5af25cbb9e6ec481d54ca9f895e52",
      "inputDigest": "sha256:0f94bd7037ed0295584cd4da30850b1f5b3ebefa4f4149bb6efed269137f6e5c",
      "name": "yq",
      "reference": "ghcr.io/tektum/yq@sha256:5c38895851a8f35e475ca21ad6017d94d1c5af25cbb9e6ec481d54ca9f895e52",
      "registry": "ghcr.io/tektum/yq",
      "runId": "34138515888",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/34138515888",
      "scan": {
        "all": {},
        "fixable": 0
      },
      "scanArtifact": "scan-yq-4",
      "sourceCommit": "9cb87aee1cca31eb758a0b8cf69cb4cd6fa126bf",
      "tags": [
        "4",
        "4-20260907",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-09-07T16:34:44Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/yq@sha256:5c38895851a8f35e475ca21ad6017d94d1c5af25cbb9e6ec481d54ca9f895e52 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/yq@sha256:5c38895851a8f35e475ca21ad6017d94d1c5af25cbb9e6ec481d54ca9f895e52",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/yq@sha256:5c38895851a8f35e475ca21ad6017d94d1c5af25cbb9e6ec481d54ca9f895e52"
      },
      "version": "4"
    },
    {
      "description": "Apache ZooKeeper coordination service built from pinned source.",
      "digest": "sha256:5febb8383f8d49228764351e977967e171965f3c4d836265e2a6f571f75d43ce",
      "inputDigest": "sha256:d50e232d63a21cf93489bdbeb5fa2531b5a141886f19def61d6d6997d90985f6",
      "name": "zookeeper",
      "reference": "ghcr.io/tektum/zookeeper@sha256:5febb8383f8d49228764351e977967e171965f3c4d836265e2a6f571f75d43ce",
      "registry": "ghcr.io/tektum/zookeeper",
      "runId": "37765686585",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/37765686585",
      "scan": {
        "all": {
          "medium": 6
        },
        "fixable": 0
      },
      "scanArtifact": "scan-zookeeper-3.9",
      "sourceCommit": "2d767fcb364536f2dc78c31aa55ab57c47ec12f8",
      "tags": [
        "3.9",
        "3.9-20261008",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-08T11:04:58Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/zookeeper@sha256:5febb8383f8d49228764351e977967e171965f3c4d836265e2a6f571f75d43ce --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/zookeeper@sha256:5febb8383f8d49228764351e977967e171965f3c4d836265e2a6f571f75d43ce",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/zookeeper@sha256:5febb8383f8d49228764351e977967e171965f3c4d836265e2a6f571f75d43ce"
      },
      "version": "3.9"
    },
    {
      "description": "Zot OCI registry built from a pinned upstream source commit.",
      "digest": "sha256:d42d81c8cbc765d7e367ae46a878409d79883682c6d5f1e6dbc8db738efcd4e4",
      "inputDigest": "sha256:9d60b94210bd7676d946ab25df7af7f00fb9a16f35ac20a4f286c59f3ac8372a",
      "name": "zot",
      "reference": "ghcr.io/tektum/zot@sha256:d42d81c8cbc765d7e367ae46a878409d79883682c6d5f1e6dbc8db738efcd4e4",
      "registry": "ghcr.io/tektum/zot",
      "runId": "38873037684",
      "runUrl": "https://github.com/tektum/verity-images/actions/runs/38873037684",
      "scan": {
        "all": {
          "unknown": 2
        },
        "fixable": 0
      },
      "scanArtifact": "scan-zot-2.1.21",
      "sourceCommit": "a3480e0e3b34bafb8a36dcb6e99a605e81ba859f",
      "tags": [
        "2.1.21",
        "2.1.21-20261016",
        "latest"
      ],
      "track": "wolfi",
      "validatedAt": "2026-10-16T08:55:58Z",
      "verification": {
        "provenance": "gh attestation verify oci://ghcr.io/tektum/zot@sha256:d42d81c8cbc765d7e367ae46a878409d79883682c6d5f1e6dbc8db738efcd4e4 --repo tektum/verity-images",
        "sbom": "cosign verify-attestation --type spdxjson --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/zot@sha256:d42d81c8cbc765d7e367ae46a878409d79883682c6d5f1e6dbc8db738efcd4e4",
        "signature": "cosign verify --certificate-identity 'https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main' --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' ghcr.io/tektum/zot@sha256:d42d81c8cbc765d7e367ae46a878409d79883682c6d5f1e6dbc8db738efcd4e4"
      },
      "version": "2.1.21"
    }
  ],
  "policy": {
    "certificateIdentity": "https://github.com/tektum/verity-images/.github/workflows/build.yaml@refs/heads/main",
    "certificateIssuer": "https://token.actions.githubusercontent.com",
    "cosignMinimumVersion": "3.0.6",
    "fixableVulnerabilitiesAllowed": 0,
    "sbomFormat": "SPDX-JSON"
  },
  "publishedAt": "2026-10-16T17:18:12Z",
  "schemaVersion": 2,
  "source": {
    "commit": "8aa16b573913d02fb60230dfc559ed75c37df386",
    "consumedRuns": {
      "30447643212": 1,
      "30452761807": 1,
      "30454136180": 1,
      "30465630534": 1,
      "30468478054": 1,
      "30471007183": 1,
      "30473204948": 1,
      "30473235100": 1,
      "30515606170": 1,
      "30517833665": 1,
      "30536753910": 1,
      "30539474232": 1,
      "30542387245": 1,
      "30544091686": 1,
      "30560017220": 1,
      "30564609413": 1,
      "30575649013": 1,
      "30575713143": 1,
      "30605499708": 1,
      "30609474598": 1,
      "30641392663": 1,
      "30649379817": 1,
      "30658912703": 1,
      "30684162287": 1,
      "30690604558": 1,
      "30691564759": 1,
      "30695375618": 1,
      "30699475130": 1,
      "30699476932": 1,
      "30699478453": 1,
      "30710148991": 1,
      "30710479421": 1,
      "30711096544": 1,
      "30733832286": 1,
      "30735033930": 1,
      "30736454187": 1,
      "30738207100": 1,
      "30743321759": 1,
      "30747687404": 1,
      "30749416645": 1,
      "30752245841": 1,
      "30754926041": 1,
      "30757352932": 1,
      "30757968561": 1,
      "30760512678": 1,
      "30760530266": 1,
      "30784519228": 1,
      "30786271301": 1,
      "30787438474": 1,
      "30789362215": 2,
      "30796930285": 1,
      "30803901132": 1,
      "30810661078": 1,
      "30815996001": 1,
      "30816022451": 1,
      "30826668405": 1,
      "30828978972": 1,
      "30840255068": 1,
      "30848035558": 1,
      "30917519748": 1,
      "30998462006": 1,
      "30998539263": 1,
      "31001136245": 1,
      "31009616542": 1,
      "31030281286": 1,
      "31037024607": 1,
      "31040715839": 1,
      "31085763921": 1,
      "31089127150": 1,
      "31089499121": 1,
      "31089949484": 1,
      "31090204111": 1,
      "31090918418": 1,
      "31091195181": 1,
      "31093609325": 1,
      "31097205619": 1,
      "31097478616": 1,
      "31098211334": 1,
      "31098835511": 1,
      "31100538838": 1,
      "31101181699": 1,
      "31111604155": 1,
      "31112280540": 1,
      "31113722114": 1,
      "31131101253": 1,
      "31132798939": 1,
      "31133971441": 1,
      "31134527687": 1,
      "31135826530": 1,
      "31138761339": 1,
      "31138910393": 1,
      "31142580881": 1,
      "31145178635": 1,
      "31146145988": 1,
      "31146310193": 1,
      "31147542187": 1,
      "31149394038": 1,
      "31150804997": 1,
      "31153647744": 1,
      "31154300139": 1,
      "31157668542": 1,
      "31159132233": 1,
      "31160797396": 1,
      "31166465744": 1,
      "31168749512": 1,
      "31170906606": 1,
      "31173335739": 1,
      "31174062636": 1,
      "31177229001": 1,
      "31186258906": 1,
      "31186569482": 2,
      "31187053906": 1,
      "31191600372": 1,
      "31196383985": 2,
      "31197290735": 1,
      "31203310235": 1,
      "31203329012": 1,
      "31203404660": 1,
      "31209637120": 1,
      "31209703365": 1,
      "31240043522": 1,
      "31240588295": 1,
      "31240640414": 1,
      "31241938461": 1,
      "31245640332": 1,
      "31245937832": 1,
      "31246668685": 1,
      "31249432912": 1,
      "31252368964": 1,
      "31252730890": 1,
      "31253863764": 1,
      "31254802746": 1,
      "31255298949": 1,
      "31258180527": 1,
      "31260432107": 2,
      "31266420696": 1,
      "31271160499": 1,
      "31289263446": 1,
      "31311460215": 1,
      "31314930504": 1,
      "31316416752": 1,
      "31353618382": 1,
      "31355988659": 1,
      "31356186555": 1,
      "31356294900": 2,
      "31357375803": 1,
      "31357627286": 1,
      "31358544037": 1,
      "31368870430": 1,
      "31368954493": 1,
      "31371724140": 1,
      "31373994437": 1,
      "31377125593": 1,
      "31392419579": 1,
      "31393010296": 1,
      "31398950635": 1,
      "31428259721": 1,
      "31480506794": 1,
      "31482437528": 1,
      "31484032459": 1,
      "31490719614": 1,
      "31522624943": 1,
      "31522667768": 1,
      "31523806945": 1,
      "31523834684": 1,
      "31530536492": 1,
      "31531240244": 1,
      "31536626354": 1,
      "31573763035": 1,
      "31574635149": 1,
      "31574636164": 1,
      "31575364216": 1,
      "31579702996": 1,
      "31579830015": 1,
      "31585658501": 1,
      "31586501004": 1,
      "31586900992": 1,
      "31587822359": 1,
      "31596112519": 1,
      "31596196500": 3,
      "31684180420": 1,
      "31688175163": 1,
      "31689155592": 1,
      "31689538511": 1,
      "31696278875": 1,
      "31696521410": 1,
      "31704869839": 1,
      "31705144899": 1,
      "31725349783": 1,
      "31729651322": 1,
      "31731824167": 1,
      "31734727373": 1,
      "31736325656": 1,
      "31737962378": 1,
      "31738535795": 1,
      "31766113770": 1,
      "31782780596": 1,
      "31802451792": 1,
      "31808296923": 1,
      "31808360258": 1,
      "31808572337": 1,
      "31808811609": 1,
      "31809855392": 1,
      "31819074304": 1,
      "31819500286": 1,
      "31839766398": 1,
      "31868964386": 1,
      "31919402726": 1,
      "31927888990": 1,
      "31941664764": 1,
      "31949902878": 1,
      "31958819729": 1,
      "32093443410": 1,
      "32109132598": 1,
      "32226123551": 1,
      "32226431904": 1,
      "32227498240": 1,
      "32238973072": 1,
      "32262022488": 1,
      "32263253348": 1,
      "32351427502": 1,
      "32351845265": 1,
      "32352398154": 1,
      "32352654386": 1,
      "32352812466": 1,
      "32353173620": 1,
      "32355265584": 1,
      "32355401435": 1,
      "32356845317": 1,
      "32366150722": 1,
      "32366986272": 1,
      "32621640939": 1,
      "32741653098": 1,
      "32742884709": 1,
      "32743228308": 1,
      "32743365211": 1,
      "32743779753": 1,
      "32747821458": 1,
      "32748069879": 1,
      "32749253260": 1,
      "32896481222": 1,
      "32919609183": 1,
      "32942446380": 1,
      "32974527099": 1,
      "32975609746": 1,
      "33023275806": 1,
      "33031921898": 1,
      "33045045828": 1,
      "33045273752": 1,
      "33045568995": 1,
      "33075445380": 1,
      "33076270403": 1,
      "33081218248": 1,
      "33081344583": 1,
      "33081462176": 1,
      "33081537258": 1,
      "33081587699": 1,
      "33081624001": 1,
      "33081714909": 1,
      "33081766936": 1,
      "33081864813": 1,
      "33081983464": 1,
      "33082687468": 1,
      "33083665268": 1,
      "33086534185": 1,
      "33086770550": 1,
      "33086871053": 1,
      "33087020226": 1,
      "33087189673": 1,
      "33087213625": 1,
      "33087385290": 1,
      "33095525362": 1,
      "33097281023": 1,
      "33128107829": 1,
      "33128210934": 1,
      "33248954368": 1,
      "33255161183": 1,
      "33259241670": 1,
      "33262591473": 1,
      "33264187751": 1,
      "33268579530": 1,
      "33270772912": 1,
      "33272646316": 1,
      "33293145662": 1,
      "33308349263": 1,
      "33320529009": 1,
      "33330094977": 2,
      "33330877727": 2,
      "33381541536": 1,
      "33387880805": 1,
      "33388755318": 1,
      "33399583441": 1,
      "33402162866": 1,
      "33406840762": 1,
      "33410553565": 1,
      "33414908416": 1,
      "33419505427": 1,
      "33420834881": 1,
      "33424062074": 1,
      "33438196634": 1,
      "33441150178": 1,
      "33442823636": 1,
      "33446823808": 1,
      "33451501606": 1,
      "33457975665": 1,
      "33462937366": 1,
      "33465476529": 1,
      "33468535464": 1,
      "33471640413": 1,
      "33475516459": 1,
      "33476862163": 1,
      "33476936463": 2,
      "33476996289": 2,
      "33477038332": 2,
      "33477074278": 2,
      "33477210000": 1,
      "33479157916": 1,
      "33481012059": 1,
      "33515141913": 1,
      "33518175202": 1,
      "33522177951": 1,
      "33522185839": 2,
      "33522192115": 2,
      "33522199682": 2,
      "33522205635": 2,
      "33522214416": 1,
      "33522220485": 1,
      "33522228414": 2,
      "33522235050": 3,
      "33522242470": 2,
      "33522249026": 2,
      "33522254711": 3,
      "33522262930": 2,
      "33523158033": 1,
      "33524976067": 1,
      "33525208986": 1,
      "33528638576": 1,
      "33532708185": 1,
      "33533597845": 1,
      "33541720899": 1,
      "33543839850": 1,
      "33547230557": 1,
      "33549979741": 1,
      "33551861381": 2,
      "33558712401": 1,
      "33563257993": 1,
      "33563263181": 1,
      "33569844285": 2,
      "33579663363": 1,
      "33598431133": 2,
      "33608461381": 1,
      "33621393664": 1,
      "33624524559": 1,
      "33626610202": 1,
      "33633317138": 1,
      "33649518832": 1,
      "33649782764": 2,
      "33649792635": 1,
      "33651745620": 1,
      "33654760792": 1,
      "33657605214": 1,
      "33661171985": 1,
      "33664147458": 1,
      "33664935261": 1,
      "33667850644": 1,
      "33668853784": 1,
      "33672719195": 1,
      "33673422647": 1,
      "33674129403": 1,
      "33676545739": 1,
      "33686071196": 1,
      "33687399498": 1,
      "33694626514": 1,
      "33695249260": 1,
      "33699023246": 1,
      "33704013118": 1,
      "33711566583": 1,
      "33715520291": 1,
      "33716822171": 1,
      "33719328980": 1,
      "33724213919": 1,
      "33729571935": 1,
      "33745026510": 1,
      "33745559575": 1,
      "33745567058": 1,
      "33745574734": 1,
      "33745585104": 1,
      "33745587469": 1,
      "33745592978": 1,
      "33745598810": 1,
      "33746106692": 1,
      "33746115360": 1,
      "33746137969": 1,
      "33746143581": 1,
      "33746150652": 1,
      "33746155483": 1,
      "33749665840": 1,
      "33751380439": 1,
      "33753059374": 1,
      "33756595046": 1,
      "33764935258": 1,
      "33777122713": 1,
      "33793272681": 1,
      "33826145824": 1,
      "33846373074": 1,
      "33850597244": 1,
      "33861827233": 1,
      "33880390375": 1,
      "33882144621": 1,
      "33902830001": 1,
      "33942010088": 1,
      "33942176367": 1,
      "33942189626": 1,
      "33961112077": 1,
      "33962516394": 1,
      "33963645385": 1,
      "33985169390": 1,
      "33986002701": 1,
      "33986005020": 1,
      "33986007846": 1,
      "33986010392": 1,
      "33986013868": 1,
      "33986017469": 1,
      "33986021231": 1,
      "33986023606": 1,
      "33986029248": 1,
      "33986032821": 1,
      "33986036418": 1,
      "33986039950": 1,
      "33986043508": 1,
      "33986046780": 1,
      "33986050312": 1,
      "33986053593": 1,
      "33986056231": 1,
      "33988502114": 1,
      "33988505368": 1,
      "33988508868": 1,
      "33988511535": 1,
      "33988515566": 1,
      "33988519874": 1,
      "33988523252": 1,
      "33988527235": 1,
      "33988532129": 1,
      "33988536544": 1,
      "33988540265": 1,
      "33988545650": 1,
      "33988549424": 1,
      "33988552570": 1,
      "33988556052": 1,
      "33988559570": 1,
      "33988563918": 1,
      "33991985157": 1,
      "33994624835": 1,
      "33996766918": 1,
      "33997494769": 1,
      "33997541370": 1,
      "33997673911": 1,
      "33997739389": 1,
      "33998002568": 1,
      "33998005404": 1,
      "33998008655": 1,
      "33998010758": 1,
      "33998726078": 1,
      "33999132583": 1,
      "33999135497": 1,
      "34000293863": 1,
      "34000548749": 1,
      "34000605042": 1,
      "34000914396": 1,
      "34000958589": 1,
      "34007012480": 1,
      "34007592950": 1,
      "34009627038": 1,
      "34016486029": 1,
      "34019142584": 1,
      "34036928291": 1,
      "34037155758": 1,
      "34045120170": 1,
      "34055297558": 1,
      "34058814996": 1,
      "34058836898": 1,
      "34091221553": 1,
      "34093348178": 1,
      "34099700570": 1,
      "34099895349": 1,
      "34100152542": 2,
      "34101136915": 1,
      "34101536303": 1,
      "34102792544": 1,
      "34102799180": 1,
      "34109297607": 1,
      "34110797324": 1,
      "34119854270": 1,
      "34129704795": 1,
      "34137758614": 1,
      "34138515888": 1,
      "34146973705": 1,
      "34148844380": 1,
      "34157819830": 1,
      "34196931159": 1,
      "34205761257": 1,
      "34211263213": 1,
      "34212560139": 1,
      "34235966319": 1,
      "34239259536": 1,
      "34244591468": 1,
      "34244614863": 2,
      "34247587789": 1,
      "34248733216": 1,
      "34249001416": 1,
      "34265308095": 1,
      "34361969009": 1,
      "34376875399": 1,
      "34398690227": 1,
      "34454314497": 1,
      "34454316811": 1,
      "34454319239": 1,
      "34454321535": 1,
      "34454323989": 1,
      "34454326516": 1,
      "34454330984": 1,
      "34454333637": 1,
      "34454335443": 1,
      "34454337594": 1,
      "34454342245": 1,
      "34454346720": 1,
      "34454350366": 1,
      "34454352084": 1,
      "34454353650": 1,
      "34454355516": 1,
      "34454365127": 1,
      "34454366932": 1,
      "34454370599": 1,
      "34454372325": 1,
      "34454374409": 1,
      "34454376216": 1,
      "34454378263": 1,
      "34454380326": 1,
      "34454382175": 1,
      "34454386102": 1,
      "34454389942": 1,
      "34465918191": 1,
      "34477660037": 1,
      "34528111898": 1,
      "34529038071": 1,
      "34529532775": 1,
      "34530490535": 1,
      "34530500080": 1,
      "34530502877": 1,
      "34530511144": 1,
      "34566130443": 1,
      "34577988254": 1,
      "34582136825": 1,
      "34582756018": 1,
      "34585333849": 1,
      "34586205399": 1,
      "34589171171": 1,
      "34592266945": 1,
      "34612028472": 1,
      "34623364474": 1,
      "34625288309": 1,
      "34625288376": 1,
      "34625288501": 1,
      "34682301247": 1,
      "34682307051": 1,
      "34682308144": 1,
      "34682310167": 1,
      "34682313488": 1,
      "34682314531": 1,
      "34682315756": 1,
      "34682317996": 1,
      "34682319141": 1,
      "34682320178": 1,
      "34682321307": 1,
      "34682322387": 1,
      "34682323641": 1,
      "34682324572": 1,
      "34682325514": 1,
      "34682331613": 1,
      "34682340049": 1,
      "34682341005": 1,
      "34682341872": 1,
      "34682350477": 1,
      "34682351866": 1,
      "34682355083": 1,
      "34682358424": 1,
      "34682360936": 1,
      "34682362128": 1,
      "34687053618": 1,
      "34687227858": 1,
      "34687473989": 1,
      "34687635894": 1,
      "34689168163": 1,
      "34691454673": 1,
      "34695599863": 1,
      "34698289265": 1,
      "34717199876": 1,
      "34717494408": 1,
      "34717869795": 1,
      "34718315324": 1,
      "34718650273": 1,
      "34718974314": 1,
      "34719497856": 1,
      "34719903841": 1,
      "34720412109": 1,
      "34720781440": 1,
      "34721203059": 1,
      "34721539193": 1,
      "34721906592": 1,
      "34722423034": 1,
      "34722806955": 1,
      "34723177074": 1,
      "34723555216": 1,
      "34723990456": 1,
      "34724348471": 1,
      "34724741903": 1,
      "34725113272": 1,
      "34725479051": 1,
      "34725867181": 1,
      "34726191081": 1,
      "34726531059": 1,
      "34726845566": 1,
      "34727225304": 1,
      "34727565581": 1,
      "34747716283": 1,
      "34747744262": 1,
      "34747745064": 1,
      "34747746736": 1,
      "34747747553": 1,
      "34811853287": 1,
      "34816614775": 1,
      "34817294524": 1,
      "34817748129": 1,
      "34818335790": 1,
      "34819038218": 1,
      "34819672601": 1,
      "34822789039": 1,
      "34826128803": 1,
      "35017734828": 1,
      "35018089242": 1,
      "35102610705": 1,
      "35103100034": 1,
      "35103501035": 1,
      "35103886471": 1,
      "35104244338": 1,
      "35112225357": 1,
      "35199287469": 1,
      "35199289332": 1,
      "35199291050": 1,
      "35199292707": 1,
      "35199294444": 1,
      "35199296194": 1,
      "35199297854": 1,
      "35199299557": 1,
      "35199301050": 1,
      "35199302972": 1,
      "35199304591": 1,
      "35199306261": 1,
      "35199308109": 1,
      "35199309847": 1,
      "35199311612": 1,
      "35199315279": 1,
      "35199317056": 1,
      "35201451255": 1,
      "35201500929": 1,
      "35201596970": 1,
      "35201599014": 1,
      "35201601377": 1,
      "35201603677": 1,
      "35201606166": 1,
      "35201608500": 1,
      "35201610695": 1,
      "35201614963": 1,
      "35201617199": 1,
      "35201804090": 1,
      "35324112097": 1,
      "35324116481": 1,
      "35327373843": 1,
      "35327419032": 1,
      "35328023587": 1,
      "35328329406": 1,
      "35345634920": 1,
      "35345657938": 1,
      "35431401640": 1,
      "35436827014": 2,
      "35523088494": 1,
      "35523090204": 1,
      "35523091581": 1,
      "35523092915": 1,
      "35523094427": 1,
      "35523095813": 1,
      "35523099028": 1,
      "35523100654": 1,
      "35523102048": 1,
      "35523104867": 1,
      "35523105851": 1,
      "35523106740": 1,
      "35523107671": 1,
      "35523108533": 1,
      "35523109434": 1,
      "35523112309": 1,
      "35525831962": 1,
      "35526753266": 1,
      "35526776474": 1,
      "35526821761": 1,
      "35527187799": 1,
      "35527392875": 1,
      "35527649208": 1,
      "35527925485": 1,
      "35528180058": 1,
      "35528412251": 1,
      "35528719901": 1,
      "35529063558": 1,
      "35529193979": 1,
      "35529194991": 1,
      "35529196464": 1,
      "35529549753": 1,
      "35534221882": 1,
      "35537681707": 1,
      "35541782158": 1,
      "36455996630": 1,
      "36456474102": 1,
      "36457254843": 1,
      "36457627126": 1,
      "36458447285": 1,
      "36458897067": 1,
      "36465279345": 1,
      "36474873352": 1,
      "36474921108": 1,
      "36477655841": 1,
      "36552752821": 1,
      "36687146040": 1,
      "36848389026": 1,
      "36848391944": 1,
      "36848401396": 1,
      "36848404037": 1,
      "36848406905": 1,
      "36848409587": 1,
      "36868551834": 1,
      "36927586199": 1,
      "37029336036": 1,
      "37112621530": 1,
      "37193842341": 1,
      "37193843457": 1,
      "37297879205": 1,
      "37297882285": 1,
      "37450267775": 1,
      "37450270861": 1,
      "37607315468": 1,
      "37607318282": 1,
      "37765606707": 1,
      "37765609341": 1,
      "37765614826": 1,
      "37765617519": 1,
      "37765620258": 1,
      "37765623291": 1,
      "37765626132": 1,
      "37765628917": 1,
      "37765632091": 1,
      "37765635065": 1,
      "37765637924": 1,
      "37765640790": 1,
      "37765643521": 1,
      "37765646509": 1,
      "37765649535": 1,
      "37765652470": 1,
      "37765655362": 1,
      "37765658056": 1,
      "37765663231": 1,
      "37765668397": 1,
      "37765676693": 1,
      "37765679195": 1,
      "37765681799": 1,
      "37765684225": 1,
      "37765686585": 1,
      "37919547873": 1,
      "37919552989": 1,
      "37919555573": 1,
      "37919558116": 1,
      "37919560575": 1,
      "37919565599": 1,
      "37919568103": 1,
      "37919570438": 1,
      "37919572860": 1,
      "37919575302": 1,
      "37919579784": 1,
      "37919582609": 1,
      "37919584968": 1,
      "37919587348": 1,
      "37919589769": 1,
      "37919592064": 1,
      "37919594357": 1,
      "37919596555": 1,
      "37919599099": 1,
      "37919602102": 1,
      "37919604926": 1,
      "37919608019": 1,
      "37919610881": 1,
      "37919616927": 1,
      "37919620020": 1,
      "37919622938": 1,
      "37919626360": 1,
      "37919632428": 1,
      "37919635321": 1,
      "37919638798": 1,
      "37919644868": 1,
      "37919659621": 1,
      "37919665591": 1,
      "37919668633": 1,
      "37919671773": 1,
      "37919678100": 1,
      "37919681307": 1,
      "37919684351": 1,
      "37919687121": 1,
      "37919690240": 1,
      "37919692999": 1,
      "37919695738": 1,
      "37919698717": 1,
      "38043442124": 1,
      "38043445137": 1,
      "38043446713": 1,
      "38043448682": 1,
      "38043450212": 1,
      "38043453441": 1,
      "38043455104": 1,
      "38043456664": 1,
      "38043458107": 1,
      "38043459676": 1,
      "38043462454": 1,
      "38043463816": 1,
      "38043465085": 1,
      "38043466449": 1,
      "38043467830": 1,
      "38043469155": 1,
      "38043470564": 1,
      "38043471993": 1,
      "38043474913": 1,
      "38043476279": 1,
      "38043477596": 1,
      "38043479168": 1,
      "38043481984": 1,
      "38043483458": 1,
      "38043484913": 1,
      "38043486499": 1,
      "38043489421": 1,
      "38043491046": 1,
      "38043492428": 1,
      "38043495680": 1,
      "38043502851": 1,
      "38043505552": 1,
      "38043506909": 1,
      "38043508311": 1,
      "38043509632": 1,
      "38043510891": 1,
      "38043512078": 1,
      "38043513266": 1,
      "38043514480": 1,
      "38043515682": 1,
      "38043516818": 1,
      "38043517990": 1,
      "38043519142": 1,
      "38131073736": 1,
      "38131076701": 1,
      "38131078103": 1,
      "38131079541": 1,
      "38131080979": 1,
      "38131082581": 1,
      "38131085534": 1,
      "38131087077": 1,
      "38131088584": 1,
      "38131090108": 1,
      "38131091852": 1,
      "38131095239": 1,
      "38131096945": 1,
      "38131098582": 1,
      "38131100413": 1,
      "38131102224": 1,
      "38131104081": 1,
      "38131105828": 1,
      "38131107562": 1,
      "38131109347": 1,
      "38131111156": 1,
      "38131112907": 1,
      "38131114516": 1,
      "38131117777": 1,
      "38131119252": 1,
      "38131120730": 1,
      "38131122562": 1,
      "38131125446": 1,
      "38131126807": 1,
      "38131128045": 1,
      "38131130640": 1,
      "38131138379": 1,
      "38131139642": 1,
      "38131140991": 1,
      "38131142792": 1,
      "38131144071": 1,
      "38131145426": 1,
      "38131146734": 1,
      "38131148140": 1,
      "38131149525": 1,
      "38131151220": 1,
      "38131152613": 1,
      "38131154024": 1,
      "38240224509": 1,
      "38240231542": 1,
      "38240234851": 1,
      "38240239019": 1,
      "38240242090": 1,
      "38240245017": 1,
      "38240250819": 1,
      "38240253774": 1,
      "38240256721": 1,
      "38240260425": 1,
      "38240263903": 1,
      "38240270845": 1,
      "38240273734": 1,
      "38240276469": 1,
      "38240279509": 1,
      "38240282869": 1,
      "38240285704": 1,
      "38240288819": 1,
      "38240291962": 1,
      "38240298115": 1,
      "38240300730": 1,
      "38240303185": 1,
      "38240307755": 1,
      "38240310166": 1,
      "38240312522": 1,
      "38240314982": 1,
      "38240319546": 1,
      "38240321877": 1,
      "38240324134": 1,
      "38240328513": 1,
      "38240344660": 1,
      "38240348254": 1,
      "38240351805": 1,
      "38240354751": 1,
      "38240357584": 1,
      "38240360879": 1,
      "38240364232": 1,
      "38240367220": 1,
      "38240370569": 1,
      "38240374255": 1,
      "38240377580": 1,
      "38240381665": 1,
      "38538386070": 1,
      "38538393697": 1,
      "38538397839": 1,
      "38538401973": 1,
      "38538406152": 1,
      "38538409287": 1,
      "38538417244": 1,
      "38538421301": 1,
      "38538424729": 1,
      "38538428602": 1,
      "38538432770": 1,
      "38538440312": 1,
      "38538444168": 1,
      "38538447800": 1,
      "38538451632": 1,
      "38538455122": 1,
      "38538458284": 1,
      "38538462250": 1,
      "38538466286": 1,
      "38538470358": 1,
      "38538473931": 1,
      "38538478982": 1,
      "38538482635": 1,
      "38538494038": 1,
      "38538497709": 1,
      "38538501101": 1,
      "38538504474": 1,
      "38538512261": 1,
      "38538515932": 1,
      "38538519217": 1,
      "38538525515": 1,
      "38538546595": 1,
      "38538549733": 1,
      "38538552782": 1,
      "38538555912": 1,
      "38538558879": 1,
      "38538562268": 1,
      "38538565395": 1,
      "38538568425": 1,
      "38538571575": 1,
      "38538574605": 1,
      "38538578490": 1,
      "38538581681": 1,
      "38705900650": 1,
      "38705906962": 1,
      "38705910028": 1,
      "38705913419": 1,
      "38705916983": 1,
      "38705920295": 1,
      "38705927044": 1,
      "38705930163": 1,
      "38705933374": 1,
      "38705936741": 1,
      "38705942949": 1,
      "38705945810": 1,
      "38705949300": 1,
      "38705952736": 1,
      "38705955882": 1,
      "38705959220": 1,
      "38705962721": 1,
      "38705965940": 1,
      "38705969227": 1,
      "38705973119": 1,
      "38705976611": 1,
      "38705980096": 1,
      "38705984051": 1,
      "38705993533": 1,
      "38705997016": 1,
      "38706000411": 1,
      "38706003850": 1,
      "38706010753": 1,
      "38706014425": 1,
      "38706018076": 1,
      "38706025079": 1,
      "38706044226": 1,
      "38706047262": 1,
      "38706050204": 1,
      "38706053346": 1,
      "38706056323": 1,
      "38706058871": 1,
      "38706061347": 1,
      "38706063895": 1,
      "38706066564": 1,
      "38706069085": 1,
      "38706071597": 1,
      "38706073970": 1,
      "38729722510": 1,
      "38731142348": 1,
      "38732834759": 1,
      "38734295991": 1,
      "38736097140": 1,
      "38750765388": 1,
      "38753192696": 1,
      "38753781576": 1,
      "38762954074": 1,
      "38775113877": 1,
      "38785775415": 1,
      "38785795002": 1,
      "38873023897": 1,
      "38873037684": 1,
      "38907432951": 1,
      "38907967299": 1,
      "38908412864": 1,
      "38908939216": 1,
      "38909390993": 1,
      "38909808970": 1,
      "38910165777": 1,
      "38937796073": 1
    },
    "runId": "38937796073",
    "runUrl": "https://github.com/tektum/verity-images/actions/runs/38937796073"
  }
}