gcr.io/go-containerregistry/crane:v0.21.6

Base OS: wolfi 202302013 vulnerabilities fixed

Patched Image

ghcr.io/verity-org/go-containerregistry/crane:v0.21.6

Supply Chain

SignedSLSA L3SBOMRekor

Verify this artifact

Cosign signature

cosign verify \
  --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  ghcr.io/verity-org/go-containerregistry/crane:v0.21.6

Build provenance

gh attestation verify \
  oci://ghcr.io/verity-org/go-containerregistry/crane:v0.21.6 \
  --owner verity-org

Before patching

Found 3 vulnerabilities in the original image. 3 fixed by Copa.

1 HIGH2 MEDIUM

Original image reference

gcr.io/go-containerregistry/crane:v0.21.6