mirror.gcr.io/hashicorp/vault-k8s:1.7.3

Base OS: alpine 3.23.398 vulnerabilities fixed

Patched Image

ghcr.io/verity-org/hashicorp/vault-k8s:1.7.3

Supply Chain

SignedSLSA L3SBOMRekor

Verify this artifact

Cosign signature

cosign verify \
  --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  ghcr.io/verity-org/hashicorp/vault-k8s:1.7.3

Build provenance

gh attestation verify \
  oci://ghcr.io/verity-org/hashicorp/vault-k8s:1.7.3 \
  --owner verity-org

Before patching

Found 99 vulnerabilities in the original image. 98 fixed by Copa. 1 remaining after patching.

2 CRITICAL43 HIGH31 MEDIUM21 LOW2 UNKNOWN

Awaiting upstream fix

No fix is available yet for these vulnerabilities. They can be suppressed in your compliance tooling until an upstream fix is released.

GO-2026-5932UNKNOWN
Package
golang.org/x/crypto
Installed
v0.52.0
Fixed

ID	Package	Installed	Fixed	Severity
GO-2026-5932	golang.org/x/crypto	v0.52.0		UNKNOWN

Original image reference

mirror.gcr.io/hashicorp/vault-k8s:1.7.3