From 2026-10-17 07:25 UTC to 2026-10-19 07:41 UTC

How the images changed

0 images changed verdict and 6 images in both runs changed findings; 6 fixable high or critical findings were fixed and 0 were introduced, counted per image; and 9 images changed their package set. Rebased: a new digest from a rebase. Rebuilt: a new digest otherwise. Base moved: the same image, its base more or less current than before. A verdict or findings can change while the image stays the same, when the policy, the evidence, or the advisories do.

Who had findings, before and after

Per severity, the images that had findings in each run and, of the images in both, which have none now and which have some for the first time, each with how it changed. The fixable high and critical findings are named below; the history only counts the rest.

An image with no vulnerability data in a run is unknown there, not clean.

Fixable findings, by ID

Each fixable high or critical finding either run lists: which images had it, which have it, and where it was fixed or introduced, with how each image changed. A finding gone from an image was fixed, or a VEX statement now covers it.

Image by image

? means unknown: the run had no vulnerability data for that image. The history names an image's fixable high and critical findings and counts the rest, so only those are listed as fixed or new. It identifies the package set by a digest, so "changed" says the set differs, not which packages; the latest run's image pages list them. Packages are unknown for an image whose package set wasn't read in one of the runs.

Compare other runs