{ "apiVersion": "clearcutt.dev/v1", "kind": "EstateHistory", "name": "northcutted-images", "entries": [ { "generatedAt": "2026-10-10T16:51:46Z", "ref": "estate-report.json", "summary": { "images": 8, "verdicts": { "verified": 4, "failed": 2, "unverified": 2 }, "evidence": { "provenance": { "verified": 6, "present": 0, "failed": 0, "missing": 2, "unknown": 0, "notApplicable": 0 }, "rebase": { "verified": 0, "present": 0, "failed": 0, "missing": 0, "unknown": 0, "notApplicable": 8 }, "recipe": { "verified": 4, "present": 0, "failed": 0, "missing": 4, "unknown": 0, "notApplicable": 0 }, "sbom": { "verified": 6, "present": 0, "failed": 0, "missing": 2, "unknown": 0, "notApplicable": 0 }, "signature": { "verified": 6, "present": 0, "failed": 0, "missing": 2, "unknown": 0, "notApplicable": 0 }, "tests": { "verified": 0, "present": 4, "failed": 0, "missing": 4, "unknown": 0, "notApplicable": 0 }, "vulnerabilityScan": { "verified": 4, "present": 0, "failed": 0, "missing": 4, "unknown": 0, "notApplicable": 0 } }, "bases": { "proven": 4, "claimed": 0, "unresolved": 0, "roots": 4, "current": 4, "stale": 0 }, "vulnerabilities": { "counts": { "critical": 25, "high": 192, "medium": 66, "low": 13, "negligible": 97, "unknown": 31 }, "fixable": { "critical": 0, "high": 88, "medium": 4, "low": 0, "negligible": 0, "unknown": 25 }, "scanned": 4, "notScanned": 4 }, "packages": { "known": 6, "unknown": 2 }, "reproducibility": { "reproduced": 4, "notReproduced": 0, "notChecked": 0, "noRecipe": 4 } }, "images": [ { "id": "cgr-dev-chainguard-static", "digest": "sha256:fe55470f22d3259488d9d3739168d8f04da67755f0b69382bc26eda4a7d3d327", "verdict": "unverified", "packagesDigest": "sha256:ec9778eb1f3778faaf817f521908fa1b06ae034a6fc0a18a18ebf4ddf7562d71" }, { "id": "cgr-dev-chainguard-wolfi-base", "digest": "sha256:1c451d46a0d5c4e9f2b38e0e8d3e299564a1aa95c21973efcc1980a9d1d2e73e", "verdict": "unverified", "packagesDigest": "sha256:9ca191ab524adf8e0066d2fef72a495debfeecf6e906a46c45f64960a0c2c5cb" }, { "id": "docker-io-library-amazonlinux-2023", "digest": "sha256:8ed3c0a996841537f75607e7d1de2114d8150391f75792e8da9268738547e73f", "verdict": "failed" }, { "id": "docker-io-library-debian-trixie-slim", "digest": "sha256:a29215f6a35e51e22adffa17f89e9d2ef06214e64a2bad10d765c46aea49f11f", "verdict": "failed" }, { "id": "ghcr-io-northcutted-images-amazonlinux-tools", "digest": "sha256:d2f9195b3966d6beebc5ebbf83c22a92eb719399aca923473516ceed01f517f2", "verdict": "verified", "base": { "digest": "sha256:8ed3c0a996841537f75607e7d1de2114d8150391f75792e8da9268738547e73f", "drift": "current", "strength": "proof" }, "vulnerabilities": { "critical": 0, "high": 12, "medium": 0, "low": 1, "negligible": 0, "unknown": 4 }, "fixableFindings": [ "GO-2026-6603", "GO-2026-6605", "GO-2026-6607", "GO-2026-6608", "GO-2026-6609", "GO-2026-6610", "GO-2026-6611", "GO-2026-6613", "GO-2026-6629" ], "packagesDigest": "sha256:28061ddc7202e931d91b051aea4283f14b50d1e2e2211741c4f8fbf80a7d7453" }, { "id": "ghcr-io-northcutted-images-debian-tools", "digest": "sha256:867c6cbf7f445e6571356c30130010a4d1c60d3432000ce45cf394e59c03816c", "verdict": "verified", "base": { "digest": "sha256:a29215f6a35e51e22adffa17f89e9d2ef06214e64a2bad10d765c46aea49f11f", "drift": "current", "strength": "proof" }, "vulnerabilities": { "critical": 25, "high": 116, "medium": 62, "low": 11, "negligible": 97, "unknown": 6 }, "fixableFindings": [ "GO-2026-6603", "GO-2026-6605", "GO-2026-6607", "GO-2026-6608", "GO-2026-6609", "GO-2026-6610", "GO-2026-6611", "GO-2026-6613", "GO-2026-6629" ], "packagesDigest": "sha256:79a15a838bec2b0d1e2b2813a1f5fb44dedb9923e84c3a594795541fcc7514f9" }, { "id": "ghcr-io-northcutted-images-hello-app", "digest": "sha256:4350805faaa3691ff14c1e9edd5ff4cfb274c840f906bae0d05cf649ac18a0e5", "verdict": "verified", "base": { "digest": "sha256:fe55470f22d3259488d9d3739168d8f04da67755f0b69382bc26eda4a7d3d327", "drift": "current", "strength": "proof" }, "vulnerabilities": { "critical": 0, "high": 0, "medium": 0, "low": 0, "negligible": 0, "unknown": 0 }, "packagesDigest": "sha256:e494620031c6243bf104c3ec15c9a2d4497592dacc0daf05b11268cd174f6ebf" }, { "id": "ghcr-io-northcutted-images-platform-tools", "digest": "sha256:bf7990acf59ee88704a3a0b6fa280cb74ba771b86ccc1ce3a911e4122afc3591", "verdict": "verified", "base": { "digest": "sha256:1c451d46a0d5c4e9f2b38e0e8d3e299564a1aa95c21973efcc1980a9d1d2e73e", "drift": "current", "strength": "proof" }, "vulnerabilities": { "critical": 0, "high": 64, "medium": 4, "low": 1, "negligible": 0, "unknown": 21 }, "fixableFindings": [ "GHSA-2v4p-qf9q-27wj", "GHSA-hrxh-6v49-42gf", "GHSA-vp52-pcj8-j9qc", "GO-2026-4970", "GO-2026-5026", "GO-2026-5942", "GO-2026-5970", "GO-2026-5972", "GO-2026-6088", "GO-2026-6089", "GO-2026-6090", "GO-2026-6179", "GO-2026-6180", "GO-2026-6303", "GO-2026-6354", "GO-2026-6355", "GO-2026-6603", "GO-2026-6605", "GO-2026-6607", "GO-2026-6608", "GO-2026-6609", "GO-2026-6610", "GO-2026-6611", "GO-2026-6613", "GO-2026-6629" ], "packagesDigest": "sha256:06605045561d1eebdbd395a94e4f4995363b11e8c1c7b7abb8d700c4e9fe63a4" } ] }, { "generatedAt": "2026-10-06T23:30:46Z", "ref": "estate-report.json", "summary": { "images": 8, "verdicts": { "verified": 4, "failed": 2, "unverified": 2 }, "evidence": { "provenance": { "verified": 6, "present": 0, "failed": 0, "missing": 2, "unknown": 0, "notApplicable": 0 }, "rebase": { "verified": 0, "present": 0, "failed": 0, "missing": 0, "unknown": 0, "notApplicable": 8 }, "recipe": { "verified": 4, "present": 0, "failed": 0, "missing": 4, "unknown": 0, "notApplicable": 0 }, "sbom": { "verified": 6, "present": 0, "failed": 0, "missing": 2, "unknown": 0, "notApplicable": 0 }, "signature": { "verified": 6, "present": 0, "failed": 0, "missing": 2, "unknown": 0, "notApplicable": 0 }, "tests": { "verified": 0, "present": 0, "failed": 0, "missing": 8, "unknown": 0, "notApplicable": 0 }, "vulnerabilityScan": { "verified": 4, "present": 0, "failed": 0, "missing": 4, "unknown": 0, "notApplicable": 0 } }, "bases": { "proven": 4, "claimed": 0, "unresolved": 0, "roots": 4, "current": 2, "stale": 2 }, "vulnerabilities": { "counts": { "critical": 24, "high": 113, "medium": 69, "low": 15, "negligible": 97, "unknown": 5 }, "fixable": { "critical": 0, "high": 19, "medium": 4, "low": 0, "negligible": 0, "unknown": 1 }, "scanned": 4, "notScanned": 4 }, "packages": { "known": 6, "unknown": 2 }, "reproducibility": { "reproduced": 4, "notReproduced": 0, "notChecked": 0, "noRecipe": 4 } } }, { "generatedAt": "2026-10-06T23:14:41Z", "ref": "estate-report.json", "summary": { "images": 8, "verdicts": { "verified": 4, "failed": 2, "unverified": 2 }, "evidence": { "provenance": { "verified": 6, "present": 0, "failed": 0, "missing": 2, "unknown": 0, "notApplicable": 0 }, "rebase": { "verified": 0, "present": 0, "failed": 0, "missing": 0, "unknown": 0, "notApplicable": 8 }, "recipe": { "verified": 4, "present": 0, "failed": 0, "missing": 4, "unknown": 0, "notApplicable": 0 }, "sbom": { "verified": 6, "present": 0, "failed": 0, "missing": 2, "unknown": 0, "notApplicable": 0 }, "signature": { "verified": 6, "present": 0, "failed": 0, "missing": 2, "unknown": 0, "notApplicable": 0 }, "tests": { "verified": 0, "present": 0, "failed": 0, "missing": 8, "unknown": 0, "notApplicable": 0 }, "vulnerabilityScan": { "verified": 4, "present": 0, "failed": 0, "missing": 4, "unknown": 0, "notApplicable": 0 } }, "bases": { "proven": 4, "claimed": 0, "unresolved": 0, "roots": 4, "current": 2, "stale": 2 }, "vulnerabilities": { "counts": { "critical": 24, "high": 113, "medium": 69, "low": 15, "negligible": 97, "unknown": 5 }, "fixable": { "critical": 0, "high": 19, "medium": 4, "low": 0, "negligible": 0, "unknown": 1 }, "scanned": 4, "notScanned": 4 }, "packages": { "known": 6, "unknown": 2 }, "reproducibility": { "reproduced": 4, "notReproduced": 0, "notChecked": 0, "noRecipe": 4 } } } ] }