{ "schemaVersion": "clearcutt.catalog.evidence-manifest/v2", "generatedAt": "2026-08-04T07:10:37.361143486Z", "source": { "owner": "northcutted", "repo": "clearcutt", "repoUrl": "https://github.com/northcutted/clearcutt", "registryBase": "ghcr.io/northcutted/clearcutt" }, "summary": { "imageReleases": 384, "complete": 168, "missingEvidence": 216 }, "releases": [ { "imageId": "cc15-dev", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.14.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:9cb7abe9a81ae92c62cc4ecbe7b4f65e7e76847fc222bbdb5ef8a2c5adff7e77", "manifestDigest": "sha256:9cb7abe9a81ae92c62cc4ecbe7b4f65e7e76847fc222bbdb5ef8a2c5adff7e77", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-dev --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b22be1e08560f81ca4bd79772090e78ce5de18e3e19897af7962399350f33a0c", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:050fd7693478b4417bb3303c0f8faeaa47fc2a6a3393fac1d119f3932335dc6e", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/cc15-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/cc15-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/cc15-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/cc15-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/cc15-dev-arm64.test-results.json" } }, "catalogRecord": "images/cc15-dev.json" }, { "imageId": "cc15-distroless", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.14.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:eaf8d7b8f497b3d80798dc5cab07d97568af8bbcca72f8916548fe00ed1bcbb6", "manifestDigest": "sha256:eaf8d7b8f497b3d80798dc5cab07d97568af8bbcca72f8916548fe00ed1bcbb6", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-distroless --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:62fa629895d88d823cf8483d1285bca387fdecb3216a65663c8934ef9abf8111", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:44a12c6f1118fc9cd2e6c2c0c890c09a17be706acf182ec915a145eec188c0a4", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/cc15-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/cc15-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/cc15-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/cc15-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/cc15-distroless-arm64.test-results.json" } }, "catalogRecord": "images/cc15-distroless.json" }, { "imageId": "cc15-slim", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.14.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:2aa0db3e52f4e3f6f4861566bbe6fac755223e89fc0fe9170033c77a5acb0d1b", "manifestDigest": "sha256:2aa0db3e52f4e3f6f4861566bbe6fac755223e89fc0fe9170033c77a5acb0d1b", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-slim --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:41c10534ca2e0f9abe9fe30f5fa2fc3e578794907d82206635a05a45af89c671", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:208c8d3adf1e8ceaf621ec92111004998ffc5cb9fa671c7c1126a67a615b7bc1", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/cc15-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/cc15-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/cc15-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/cc15-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/cc15-slim-arm64.test-results.json" } }, "catalogRecord": "images/cc15-slim.json" }, { "imageId": "coreLTS-dev", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.14.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:1a2a6c95c0a1cb0b1e4bc7632524ba739fba0317c574689ab4080d2653ad893c", "manifestDigest": "sha256:1a2a6c95c0a1cb0b1e4bc7632524ba739fba0317c574689ab4080d2653ad893c", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-dev --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:2c33692b1362909ab1a0aa6f6996f5e49f3de26a648ee598dfaf8f0ede5201d1", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ab02aa6f77357e8ebbfbbd5cca353d22ff057fba95493d92cb57f28ca89ca325", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/coreLTS-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/coreLTS-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/coreLTS-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/coreLTS-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/coreLTS-dev-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-dev.json" }, { "imageId": "coreLTS-distroless", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.14.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:35cbd50837d84cc76461b18ab80a820e6294e65c7c4859412b5f1a1ea26a4a95", "manifestDigest": "sha256:35cbd50837d84cc76461b18ab80a820e6294e65c7c4859412b5f1a1ea26a4a95", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-distroless --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8483d70d0a15f2bbff1f050d0085b785a56db9d772c2cf12f1da8a6ef4b70f25", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:1ae6445f07f7a5c1ffe03849558300e871f53645f4b08a7513ca3d7e8cadf337", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/coreLTS-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/coreLTS-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/coreLTS-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/coreLTS-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/coreLTS-distroless-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-distroless.json" }, { "imageId": "coreLTS-slim", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.14.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:391b292a4058505fc5bd672926b57327611252263b3f8d9cde87575909e64b84", "manifestDigest": "sha256:391b292a4058505fc5bd672926b57327611252263b3f8d9cde87575909e64b84", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-slim --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5cb6d49b1eadef0ceee698757891729a916b872b9faf52342a055e4f1e636fe4", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:0159576e844555fd54f2c0be398b7fca46b3bf1c50a2341191a5ed9328cdcabf", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/coreLTS-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/coreLTS-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/coreLTS-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/coreLTS-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/coreLTS-slim-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-slim.json" }, { "imageId": "dotnet10-dev", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.14.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:c1f3243613704e3dbe351b14c706cb199b5645e4a0a8a4102a310504add1f7d5", "manifestDigest": "sha256:c1f3243613704e3dbe351b14c706cb199b5645e4a0a8a4102a310504add1f7d5", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-dev --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:7c696f61faf355f2b8f6ca4e97e01d1d7b94c3951ecaf9f986a3c12c6df7c2da", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:c55100a9f0584689bdfcd8e7bd54cdf8e6434204881087da6b4dbb11680bc50a", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet10-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet10-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet10-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet10-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet10-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-dev.json" }, { "imageId": "dotnet10-distroless", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.14.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:b8bfcf80eb3181975409618375ba503af23d3c4ff9720770c38f1d5a818d6434", "manifestDigest": "sha256:b8bfcf80eb3181975409618375ba503af23d3c4ff9720770c38f1d5a818d6434", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-distroless --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:45a97f933498b623123319b0ec300575ddb6230ec193e08670ee446e6847a085", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:02bb4e65b99ef224753e31e1fbf24959886e7d3af888bb2625cd7d2b119bb756", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet10-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet10-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet10-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet10-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet10-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-distroless.json" }, { "imageId": "dotnet10-slim", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.14.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:f7fab5132505849367ebd0cd5c20ca9d567370d9255970af38b174c0c016a5fe", "manifestDigest": "sha256:f7fab5132505849367ebd0cd5c20ca9d567370d9255970af38b174c0c016a5fe", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-slim --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:c39433cf6e9467fb41f90863e6647c63733f69a8c6fea830342b068c4364036a", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:616d404b7e42ee953172183e6061e7f5cf965c32faaa0b088ef96d98179d0e35", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "deced2df3f9937fe6a5dbd284ce38ab763be3df9" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet10-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet10-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet10-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet10-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet10-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-slim.json" }, { "imageId": "dotnet8-dev", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.14.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:2b163d3b6aa5e2d432f9a31dd3a624b78bf02c550ff3d08f561266d3eb4f77c7", "manifestDigest": "sha256:2b163d3b6aa5e2d432f9a31dd3a624b78bf02c550ff3d08f561266d3eb4f77c7", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-dev --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:082569ec61de2c16b724910dae833d1c1d879def1dfd39bfa648ff3dd8142644", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:d78f0d9ea7a321f412fe2d732c02a9c5a6e4b80103aa0b46c7dbd061c6945e27", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet8-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet8-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet8-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet8-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet8-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-dev.json" }, { "imageId": "dotnet8-distroless", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.14.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:53029022d2ba392527e3d4335e79d1e6b82c26a5928986ad97db606db8e6ed16", "manifestDigest": "sha256:53029022d2ba392527e3d4335e79d1e6b82c26a5928986ad97db606db8e6ed16", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-distroless --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d6cb695a6c45ff1e25bf97ccf895fa34efb61d95e719d391912c9efff529919a", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2f187c39852b7b108668215a85147a55d9c7b4e554f0cb04f01b8aeb6915330a", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "deced2df3f9937fe6a5dbd284ce38ab763be3df9" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet8-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet8-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet8-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet8-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet8-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-distroless.json" }, { "imageId": "dotnet8-slim", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.14.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:00d3b8c33c218d0c16fdae7f36b90591298f89aa66a5c656f78c08d650735fa1", "manifestDigest": "sha256:00d3b8c33c218d0c16fdae7f36b90591298f89aa66a5c656f78c08d650735fa1", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-slim --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:3e250a36661555a83af326aad52bb8a99faac29d07425be63e28b1f3c3ef441b", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:cd1c08fa675691f9106b3415b10612f11b676d80ec37868bc44196c179bad371", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet8-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet8-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet8-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet8-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/dotnet8-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-slim.json" }, { "imageId": "go1.25-dev", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.14.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:f5c550daf9e15f030413d3048f6c2f3807b77527b1c40409c38e3dd31e3e8813", "manifestDigest": "sha256:f5c550daf9e15f030413d3048f6c2f3807b77527b1c40409c38e3dd31e3e8813", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-dev --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8149648d993bad7d628f73a1d8d5294eb9564afdeba12148c8cb82e8febcb0d7", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:01cd17c3e9b158796c42f8b93162bbb4acfd617a529d0154d9760cdd06371c5f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "deced2df3f9937fe6a5dbd284ce38ab763be3df9" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.25-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-dev.json" }, { "imageId": "go1.25-distroless", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.14.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:2ef29bce3512131b18ebea7c8e9ae646274cc2c878c17c38dc945ae575b456ce", "manifestDigest": "sha256:2ef29bce3512131b18ebea7c8e9ae646274cc2c878c17c38dc945ae575b456ce", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-distroless --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:efac662c36dba47ef3ed6cbb6393986be33fb3fc755c85bd102d87cd5bd3226e", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ca00ce96f37f090d5c258af1a02ac439eb08a37453f15569403712611cfda097", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-distroless.json" }, { "imageId": "go1.25-slim", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.14.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:68a6d8bcd77ba991767d97add816ae81c4946ae9e79bf2d28fe3697ad6b45704", "manifestDigest": "sha256:68a6d8bcd77ba991767d97add816ae81c4946ae9e79bf2d28fe3697ad6b45704", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-slim --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d565f90475904c4463912160291e9187e7894b68bf16dab12e69deff357c7d25", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:c29648f24f7e90aeba1891d7b391fb254db889a27712bdfa3acb21a874cb1adb", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.25-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-slim.json" }, { "imageId": "go1.26-dev", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.14.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:4d64a934b4e50baad8f7bce0dfb5eed416f7d048c7ef9db7a2bab73cce7849ec", "manifestDigest": "sha256:4d64a934b4e50baad8f7bce0dfb5eed416f7d048c7ef9db7a2bab73cce7849ec", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-dev --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:7349cc7a47de15b265106bfa4211924a501a5abc9d7750f79c280a35266954b4", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:6f79d395c5f82ac37f209781d702d1ece88852929712acf0ded966b554536a50", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.26-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.26-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.26-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.26-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.26-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-dev.json" }, { "imageId": "go1.26-distroless", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.14.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:891782a227d1506358103016422659129d124ecc99adc0a62c14ddf017cc15ba", "manifestDigest": "sha256:891782a227d1506358103016422659129d124ecc99adc0a62c14ddf017cc15ba", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-distroless --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:c92bb583dd89f17cb6d8cdaf92bfbce2b2d6a035edc4ce85b469304436a8aca6", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:1a8b3b1258aa645169a6cd31503702413fcd973f01ccd78367affd36f6bb9569", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "deced2df3f9937fe6a5dbd284ce38ab763be3df9" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.26-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.26-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.26-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.26-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.26-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-distroless.json" }, { "imageId": "go1.26-slim", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.14.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:f075102aa2efaf56025a655f7d1ed69c9b2839eeec81978ace8b380897945406", "manifestDigest": "sha256:f075102aa2efaf56025a655f7d1ed69c9b2839eeec81978ace8b380897945406", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-slim --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:042694c6091296df3661e9a3fadbbedcd7d25a04c02b24e0013a9501ee0659c1", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:62eef5fd9e500b9af70ef2473adc1440171cea1ed05288f0b3f559d2317c3276", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "deced2df3f9937fe6a5dbd284ce38ab763be3df9" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.26-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.26-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.26-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.26-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/go1.26-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-slim.json" }, { "imageId": "java21-dev", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.14.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:9e7ac490808de645b84b73b3415f0a5f9a2e0ec4a716d298446d8c14e7d6ee9d", "manifestDigest": "sha256:9e7ac490808de645b84b73b3415f0a5f9a2e0ec4a716d298446d8c14e7d6ee9d", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-dev --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:849eef174ab009b17606ab964873120f584442e92676ccd08f411fdb6b4f726e", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9cd32670d2c219d54011d5057eb3c77b3a230e7689022c8eb47ccec607da2c91", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java21-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java21-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java21-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java21-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java21-dev-arm64.test-results.json" } }, "catalogRecord": "images/java21-dev.json" }, { "imageId": "java21-distroless", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.14.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:353c6b88621602d9c93558eb1634b4429e40ecc8e414d2373662339b6a2a0dba", "manifestDigest": "sha256:353c6b88621602d9c93558eb1634b4429e40ecc8e414d2373662339b6a2a0dba", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-distroless --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:6dd0c7e372bdcb47a7caed12e3211936b38da266724ec29e51e5964e63d28f08", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9cb95de1e00251874baff6573b9a9ed74015a9006de518429ef29b2b1f422ae4", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java21-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java21-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java21-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java21-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java21-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java21-distroless.json" }, { "imageId": "java21-slim", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.14.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:558cb5c5396a2dcb350cb0494abf54d718d36e08eb9adfa1af0e6efc889396e1", "manifestDigest": "sha256:558cb5c5396a2dcb350cb0494abf54d718d36e08eb9adfa1af0e6efc889396e1", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-slim --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:640f216558ea1d1961353613273c0d99ecef9b29520ae88eeefa6ae7f0f7bef3", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5ec7d8ecccff012bb402f8d0e2a3e94cd548af6544256755c92c7d8fbe8ba4aa", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java21-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java21-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java21-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java21-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java21-slim-arm64.test-results.json" } }, "catalogRecord": "images/java21-slim.json" }, { "imageId": "java25-dev", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.14.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:999787dc1e5cbc4521ed7f9caf636e5238d8adf1df8caa4bc1eb3cf10e4268cb", "manifestDigest": "sha256:999787dc1e5cbc4521ed7f9caf636e5238d8adf1df8caa4bc1eb3cf10e4268cb", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-dev --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:a7aae991b89173ecc0832503fa22b5baa17cdaed28855f27386438050b1995aa", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:b6e24da9772b69a9b34a213ba8aecead59e17996dfe6d5707c6b9a129268038f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "deced2df3f9937fe6a5dbd284ce38ab763be3df9" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java25-dev-arm64.test-results.json" } }, "catalogRecord": "images/java25-dev.json" }, { "imageId": "java25-distroless", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.14.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:7aa50310d78dce244b009318e4c3d1ffcdb74728a5621af7bd79a3fd950f89c1", "manifestDigest": "sha256:7aa50310d78dce244b009318e4c3d1ffcdb74728a5621af7bd79a3fd950f89c1", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-distroless --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:16ec533af5eac45b9f624cbc5cfa675679a0f14916c0c5e5f88de3deb757706f", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:98c95702f93a5c563c193147472c112ac18bedc7a067b346570469233c7138c5", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "deced2df3f9937fe6a5dbd284ce38ab763be3df9" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java25-distroless.json" }, { "imageId": "java25-slim", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.14.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:f81b919bb143b4a58c7457c201bc79e0ff7df0e7ced438905df461b1509e395e", "manifestDigest": "sha256:f81b919bb143b4a58c7457c201bc79e0ff7df0e7ced438905df461b1509e395e", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-slim --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:6e728ffbb4e23775405693869ab963a78f455bdc7afdf4e0e2de6b2e8d8178a0", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:f027c800dba4197f50243b483697484a1a60927c5c4b6fd97b251138421474e2", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "deced2df3f9937fe6a5dbd284ce38ab763be3df9" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/java25-slim-arm64.test-results.json" } }, "catalogRecord": "images/java25-slim.json" }, { "imageId": "node22-dev", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.14.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:5b986ca53292e219c5b7d29f9a84becbce3b49a49530acacf49ad966868bfad5", "manifestDigest": "sha256:5b986ca53292e219c5b7d29f9a84becbce3b49a49530acacf49ad966868bfad5", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-dev --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b1b7392380ec29813e72ab5f1972b02b17d6929c1adf1717ce94987acce25bee", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:03f9d484b627bb84cdc78634d57eacd2b59d147a296f77969b30ff2d2034d80f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "deced2df3f9937fe6a5dbd284ce38ab763be3df9" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node22-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node22-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node22-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node22-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node22-dev-arm64.test-results.json" } }, "catalogRecord": "images/node22-dev.json" }, { "imageId": "node22-distroless", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.14.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:46aafbfa1b47deccaebf6b173ad183791f14702dd099d287d2d70d49d751f3e8", "manifestDigest": "sha256:46aafbfa1b47deccaebf6b173ad183791f14702dd099d287d2d70d49d751f3e8", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-distroless --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:321d4918b9709819d9ab039bcecf62a103085cacb009c5d6d5fcb7046d16cff4", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:c4d0c605197b43a48a7576eac1f1c6fecd9d016c6c413e996ab6da7e4154b80f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node22-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node22-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node22-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node22-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node22-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node22-distroless.json" }, { "imageId": "node22-slim", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.14.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:d362855468f905ce680fe2a1849f370aa74342d4b0e8604a3840b83375fd8073", "manifestDigest": "sha256:d362855468f905ce680fe2a1849f370aa74342d4b0e8604a3840b83375fd8073", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-slim --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8b0dd0f75d719fbca2619201e0b1212afb6987aa2421c51c94c1ee537e092009", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:afde76ba0ccb28a69aa11a5d15a9c8dfad29f54c7ac6bed5b029e5d8664f7779", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "deced2df3f9937fe6a5dbd284ce38ab763be3df9" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node22-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node22-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node22-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node22-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node22-slim-arm64.test-results.json" } }, "catalogRecord": "images/node22-slim.json" }, { "imageId": "node24-dev", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.14.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:4ce8c74849fa5e5f556acfc7f8c9bac0ee2b8521729901f0e042e92fa477f812", "manifestDigest": "sha256:4ce8c74849fa5e5f556acfc7f8c9bac0ee2b8521729901f0e042e92fa477f812", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-dev --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:999e453f1567d4769068ee3d085a47276a53d6462eecb363b11467f5050492ce", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:22b42d30fde12ee6e366eeb0aae543c6ca9b4ce9ca6b9e7fb73081b13baed2a9", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "deced2df3f9937fe6a5dbd284ce38ab763be3df9" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node24-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node24-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node24-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node24-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node24-dev-arm64.test-results.json" } }, "catalogRecord": "images/node24-dev.json" }, { "imageId": "node24-distroless", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.14.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:725b4be5dc1defe526148475aa982ef3781fa36415121d4d4e59b456c5cc9bfb", "manifestDigest": "sha256:725b4be5dc1defe526148475aa982ef3781fa36415121d4d4e59b456c5cc9bfb", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-distroless --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d406ce610500e435cdf24857b4fa7cd6059a9c209be5c59424be8bd6054e22fa", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:034df6e4d7c9ace171e8fcae9718c37aa0f113a9dda2a78364294d153d9e5d30", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "deced2df3f9937fe6a5dbd284ce38ab763be3df9" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node24-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node24-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node24-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node24-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node24-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node24-distroless.json" }, { "imageId": "node24-slim", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.14.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:856e946bc0143d0a0239f0917163088112b2672d95587e99831f87a4d192d158", "manifestDigest": "sha256:856e946bc0143d0a0239f0917163088112b2672d95587e99831f87a4d192d158", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-slim --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b7d80a28c05774af4442df3e35670552dd2e48bccb168d760fc98536fd7b73da", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:d8a6f221e8965574f64b508c7fe7112f888ab89238cf76445e9b082a04bd8bbf", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node24-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node24-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node24-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node24-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/node24-slim-arm64.test-results.json" } }, "catalogRecord": "images/node24-slim.json" }, { "imageId": "oauth2-proxy7", "kind": "service", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7:v0.14.0", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7@sha256:368035026a824c7596eab27270f640e63a6d84e0c624856a3c04632e652fdfca", "manifestDigest": "sha256:368035026a824c7596eab27270f640e63a6d84e0c624856a3c04632e652fdfca", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex oauth2-proxy7 --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:39bfe95dcf38caf0dcf1f9badebfb7b3c3ca0d54ccb21727614a982aab28e4b2", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:acbeba15dc0046a8d16f2dd10344356a5066f3a5a9284ad0c59add8feb08aef1", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/oauth2-proxy7-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/oauth2-proxy7-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/oauth2-proxy7.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/oauth2-proxy7-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/oauth2-proxy7-arm64.test-results.json" } }, "catalogRecord": "images/oauth2-proxy7.json" }, { "imageId": "postgres16", "kind": "service", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16:v0.14.0", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16@sha256:5a358578029818448466d4e6584904f3c8c31542080c6bd3b1197304ce44b837", "manifestDigest": "sha256:5a358578029818448466d4e6584904f3c8c31542080c6bd3b1197304ce44b837", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex postgres16 --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5099df7b80049b59b1257ca60f872ab74b71d42c74d8aab8564be73c355bfb59", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:16426f7d0e3a18169175d5bbf810e9d94a7f6b4338676b5ebbcd48cebda29e8b", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/postgres16-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/postgres16-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/postgres16.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/postgres16-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/postgres16-arm64.test-results.json" } }, "catalogRecord": "images/postgres16.json" }, { "imageId": "python3.13-dev", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13:v0.14.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13@sha256:c7d921351b6336684c34870aa8526a646b79aeaafb03f148c7091f3dcba48a31", "manifestDigest": "sha256:c7d921351b6336684c34870aa8526a646b79aeaafb03f148c7091f3dcba48a31", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.13-dev --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8cb9826e42e08b88148dba25b95695dd610f2e18e2f7eacf715eef96c87e2229", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:73470d35f9b09b1fba886732f288be22961e4896e5712c97ac7c7415d15dfa79", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.13-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.13-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.13-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.13-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.13-dev-arm64.test-results.json" } }, "catalogRecord": "images/python3.13-dev.json" }, { "imageId": "python3.13-distroless", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13:v0.14.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13@sha256:010e3b2a669f0df11f6031c2e3a4867bc1ca617aae9034c44516593718621586", "manifestDigest": "sha256:010e3b2a669f0df11f6031c2e3a4867bc1ca617aae9034c44516593718621586", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.13-distroless --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:392bfce95140d0bd82e0d6cbab2b00044f303afef03952d78968132bdaca844f", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:08cccb62e4385cb428214ff1087bbf65146b9d14cac82a86b4420699a90db9cb", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.13-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.13-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.13-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.13-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.13-distroless-arm64.test-results.json" } }, "catalogRecord": "images/python3.13-distroless.json" }, { "imageId": "python3.13-slim", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13:v0.14.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13@sha256:8869c5ac5407b3bec41b141aa9a02decaa6148c3f653547ed4aa25a2253293a5", "manifestDigest": "sha256:8869c5ac5407b3bec41b141aa9a02decaa6148c3f653547ed4aa25a2253293a5", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.13-slim --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:86057dd4bf744a53b88b82ae8b9d6780f71efb578b3e6c29260fdea31ae3f3c1", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:a2a0047a97119865c6a8dce2d5168782690aaf2617f599af04dc211a4f24c6db", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "deced2df3f9937fe6a5dbd284ce38ab763be3df9" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.13-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.13-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.13-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.13-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.13-slim-arm64.test-results.json" } }, "catalogRecord": "images/python3.13-slim.json" }, { "imageId": "python3.14-dev", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14:v0.14.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14@sha256:6278c133c3196fa7cb03485aa3be542a5eb84fb1bb293c09c13dd173a41ee2e7", "manifestDigest": "sha256:6278c133c3196fa7cb03485aa3be542a5eb84fb1bb293c09c13dd173a41ee2e7", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.14-dev --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e4d49cd80d5ed55c079e5bb80486e1b8cae46d0b069430f50688d056b1442803", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:63bb455fdd20bdb2103e7e901451bdf048c4dde74c7ee1bf5a8b7b4790237b25", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.14-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.14-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.14-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.14-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.14-dev-arm64.test-results.json" } }, "catalogRecord": "images/python3.14-dev.json" }, { "imageId": "python3.14-distroless", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14:v0.14.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14@sha256:2010f60e97dbd44d7435455cc63c53be8cce2e3540a71eadb462ed265d191b37", "manifestDigest": "sha256:2010f60e97dbd44d7435455cc63c53be8cce2e3540a71eadb462ed265d191b37", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.14-distroless --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:bd7cf4a81dc45cdca7bf9d95605e51c6f0f54c40bc4bc266d0460d2ca08520b0", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ed4168f31f688e4b8d6411df87d077c337473735367699446427b6376bd0219f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.14-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.14-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.14-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.14-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.14-distroless-arm64.test-results.json" } }, "catalogRecord": "images/python3.14-distroless.json" }, { "imageId": "python3.14-slim", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14:v0.14.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14@sha256:9e80ee1205b337695e67dd7cae42920caebd223409bb7a696512a216fb3b3179", "manifestDigest": "sha256:9e80ee1205b337695e67dd7cae42920caebd223409bb7a696512a216fb3b3179", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.14-slim --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:fbd4daca1cade9b1bb39643f4c842634992c12cd8c13570b16935fcfcf39c44b", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ccc9e80dcb0633a2f522b7e29174f800d333be4e432e5d28373101c74f690a15", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.14-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.14-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.14-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.14-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/python3.14-slim-arm64.test-results.json" } }, "catalogRecord": "images/python3.14-slim.json" }, { "imageId": "rust1.95-dev", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.14.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:c8f4c0cbe42782676d82cb6b9830a55fd8c9c662470c47aeba126feecfd0f762", "manifestDigest": "sha256:c8f4c0cbe42782676d82cb6b9830a55fd8c9c662470c47aeba126feecfd0f762", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-dev --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:51198d640930e71bd1d2a1e7e41d4f756cbed0440455b04d6b5b396dddb2d381", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:69484b5aa58eca36feea1a2574d27c9e4d4afe831e6b68d8de042d1da419edb6", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/rust1.95-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/rust1.95-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/rust1.95-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/rust1.95-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/rust1.95-dev-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-dev.json" }, { "imageId": "rust1.95-distroless", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.14.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:abf9dbb0e8e1c5b4562e287fb6ff1dfa818d1e4691e0d008949d6e1b4e68d83f", "manifestDigest": "sha256:abf9dbb0e8e1c5b4562e287fb6ff1dfa818d1e4691e0d008949d6e1b4e68d83f", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-distroless --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:dd1a081ca80ca3c68b899fe611e1e9113876856b54bec5012935e51aaecf2660", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:108f74ceca350599575732e8cfecc9a81f8ccc6fd15b3a251542f5ececbc4da6", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "deced2df3f9937fe6a5dbd284ce38ab763be3df9" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/rust1.95-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/rust1.95-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/rust1.95-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/rust1.95-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/rust1.95-distroless-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-distroless.json" }, { "imageId": "rust1.95-slim", "kind": "runtime", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.14.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:86c7234984a91026fb77a9a1877ccda267aa5098154477781a3378ff12da1d96", "manifestDigest": "sha256:86c7234984a91026fb77a9a1877ccda267aa5098154477781a3378ff12da1d96", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-slim --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:f25865ac6fd911e583ecb01ccd1b2cdb5cbdc7cbbb361b85738ae9d88323870b", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5f83476b334699382262869986003ba467978bab23fec2b42516ce23dbfdf9f3", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/rust1.95-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/rust1.95-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/rust1.95-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/rust1.95-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/rust1.95-slim-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-slim.json" }, { "imageId": "valkey8", "kind": "service", "tag": "v0.14.0", "publishedAt": "2026-07-11T00:47:46Z", "isLatest": true, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8:v0.14.0", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8@sha256:0ead819ffc06e5b9be97baf6b3182c5436f1f81ccd8820638e5994cb5516b270", "manifestDigest": "sha256:0ead819ffc06e5b9be97baf6b3182c5436f1f81ccd8820638e5994cb5516b270", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex valkey8 --tag v0.14.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:a77605ad6ba60cf4da58cceaeafb7d23c598dd7d538b15066a39e05579665848", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:72f75ecb4daca1193529aa4e2c83cdb5794686aa732d32afe64ea160fff8f189", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "deced2df3f9937fe6a5dbd284ce38ab763be3df9" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/valkey8-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/valkey8-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/valkey8.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/valkey8-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.14.0/valkey8-arm64.test-results.json" } }, "catalogRecord": "images/valkey8.json" }, { "imageId": "cc15-dev", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.13.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:9cb7abe9a81ae92c62cc4ecbe7b4f65e7e76847fc222bbdb5ef8a2c5adff7e77", "manifestDigest": "sha256:9cb7abe9a81ae92c62cc4ecbe7b4f65e7e76847fc222bbdb5ef8a2c5adff7e77", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-dev --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b22be1e08560f81ca4bd79772090e78ce5de18e3e19897af7962399350f33a0c", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:050fd7693478b4417bb3303c0f8faeaa47fc2a6a3393fac1d119f3932335dc6e", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/cc15-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/cc15-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/cc15-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/cc15-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/cc15-dev-arm64.test-results.json" } }, "catalogRecord": "images/cc15-dev.json" }, { "imageId": "cc15-distroless", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.13.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:eaf8d7b8f497b3d80798dc5cab07d97568af8bbcca72f8916548fe00ed1bcbb6", "manifestDigest": "sha256:eaf8d7b8f497b3d80798dc5cab07d97568af8bbcca72f8916548fe00ed1bcbb6", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-distroless --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:62fa629895d88d823cf8483d1285bca387fdecb3216a65663c8934ef9abf8111", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:44a12c6f1118fc9cd2e6c2c0c890c09a17be706acf182ec915a145eec188c0a4", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/cc15-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/cc15-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/cc15-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/cc15-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/cc15-distroless-arm64.test-results.json" } }, "catalogRecord": "images/cc15-distroless.json" }, { "imageId": "cc15-slim", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.13.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:2aa0db3e52f4e3f6f4861566bbe6fac755223e89fc0fe9170033c77a5acb0d1b", "manifestDigest": "sha256:2aa0db3e52f4e3f6f4861566bbe6fac755223e89fc0fe9170033c77a5acb0d1b", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-slim --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:41c10534ca2e0f9abe9fe30f5fa2fc3e578794907d82206635a05a45af89c671", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:208c8d3adf1e8ceaf621ec92111004998ffc5cb9fa671c7c1126a67a615b7bc1", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/cc15-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/cc15-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/cc15-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/cc15-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/cc15-slim-arm64.test-results.json" } }, "catalogRecord": "images/cc15-slim.json" }, { "imageId": "coreLTS-dev", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.13.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:1a2a6c95c0a1cb0b1e4bc7632524ba739fba0317c574689ab4080d2653ad893c", "manifestDigest": "sha256:1a2a6c95c0a1cb0b1e4bc7632524ba739fba0317c574689ab4080d2653ad893c", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-dev --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:2c33692b1362909ab1a0aa6f6996f5e49f3de26a648ee598dfaf8f0ede5201d1", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ab02aa6f77357e8ebbfbbd5cca353d22ff057fba95493d92cb57f28ca89ca325", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/coreLTS-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/coreLTS-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/coreLTS-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/coreLTS-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/coreLTS-dev-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-dev.json" }, { "imageId": "coreLTS-distroless", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.13.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:35cbd50837d84cc76461b18ab80a820e6294e65c7c4859412b5f1a1ea26a4a95", "manifestDigest": "sha256:35cbd50837d84cc76461b18ab80a820e6294e65c7c4859412b5f1a1ea26a4a95", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-distroless --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8483d70d0a15f2bbff1f050d0085b785a56db9d772c2cf12f1da8a6ef4b70f25", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:1ae6445f07f7a5c1ffe03849558300e871f53645f4b08a7513ca3d7e8cadf337", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/coreLTS-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/coreLTS-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/coreLTS-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/coreLTS-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/coreLTS-distroless-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-distroless.json" }, { "imageId": "coreLTS-slim", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.13.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:391b292a4058505fc5bd672926b57327611252263b3f8d9cde87575909e64b84", "manifestDigest": "sha256:391b292a4058505fc5bd672926b57327611252263b3f8d9cde87575909e64b84", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-slim --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5cb6d49b1eadef0ceee698757891729a916b872b9faf52342a055e4f1e636fe4", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:0159576e844555fd54f2c0be398b7fca46b3bf1c50a2341191a5ed9328cdcabf", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/coreLTS-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/coreLTS-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/coreLTS-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/coreLTS-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/coreLTS-slim-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-slim.json" }, { "imageId": "dotnet10-dev", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.13.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:c1f3243613704e3dbe351b14c706cb199b5645e4a0a8a4102a310504add1f7d5", "manifestDigest": "sha256:c1f3243613704e3dbe351b14c706cb199b5645e4a0a8a4102a310504add1f7d5", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-dev --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:7c696f61faf355f2b8f6ca4e97e01d1d7b94c3951ecaf9f986a3c12c6df7c2da", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:c55100a9f0584689bdfcd8e7bd54cdf8e6434204881087da6b4dbb11680bc50a", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet10-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet10-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet10-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet10-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet10-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-dev.json" }, { "imageId": "dotnet10-distroless", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.13.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:b8bfcf80eb3181975409618375ba503af23d3c4ff9720770c38f1d5a818d6434", "manifestDigest": "sha256:b8bfcf80eb3181975409618375ba503af23d3c4ff9720770c38f1d5a818d6434", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-distroless --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:45a97f933498b623123319b0ec300575ddb6230ec193e08670ee446e6847a085", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:02bb4e65b99ef224753e31e1fbf24959886e7d3af888bb2625cd7d2b119bb756", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet10-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet10-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet10-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet10-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet10-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-distroless.json" }, { "imageId": "dotnet10-slim", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.13.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:f7fab5132505849367ebd0cd5c20ca9d567370d9255970af38b174c0c016a5fe", "manifestDigest": "sha256:f7fab5132505849367ebd0cd5c20ca9d567370d9255970af38b174c0c016a5fe", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-slim --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:c39433cf6e9467fb41f90863e6647c63733f69a8c6fea830342b068c4364036a", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:616d404b7e42ee953172183e6061e7f5cf965c32faaa0b088ef96d98179d0e35", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet10-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet10-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet10-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet10-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet10-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-slim.json" }, { "imageId": "dotnet8-dev", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.13.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:2b163d3b6aa5e2d432f9a31dd3a624b78bf02c550ff3d08f561266d3eb4f77c7", "manifestDigest": "sha256:2b163d3b6aa5e2d432f9a31dd3a624b78bf02c550ff3d08f561266d3eb4f77c7", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-dev --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:082569ec61de2c16b724910dae833d1c1d879def1dfd39bfa648ff3dd8142644", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:d78f0d9ea7a321f412fe2d732c02a9c5a6e4b80103aa0b46c7dbd061c6945e27", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet8-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet8-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet8-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet8-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet8-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-dev.json" }, { "imageId": "dotnet8-distroless", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.13.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:53029022d2ba392527e3d4335e79d1e6b82c26a5928986ad97db606db8e6ed16", "manifestDigest": "sha256:53029022d2ba392527e3d4335e79d1e6b82c26a5928986ad97db606db8e6ed16", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-distroless --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d6cb695a6c45ff1e25bf97ccf895fa34efb61d95e719d391912c9efff529919a", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2f187c39852b7b108668215a85147a55d9c7b4e554f0cb04f01b8aeb6915330a", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet8-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet8-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet8-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet8-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet8-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-distroless.json" }, { "imageId": "dotnet8-slim", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.13.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:00d3b8c33c218d0c16fdae7f36b90591298f89aa66a5c656f78c08d650735fa1", "manifestDigest": "sha256:00d3b8c33c218d0c16fdae7f36b90591298f89aa66a5c656f78c08d650735fa1", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-slim --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:3e250a36661555a83af326aad52bb8a99faac29d07425be63e28b1f3c3ef441b", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:cd1c08fa675691f9106b3415b10612f11b676d80ec37868bc44196c179bad371", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet8-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet8-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet8-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet8-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/dotnet8-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-slim.json" }, { "imageId": "go1.25-dev", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.13.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:f5c550daf9e15f030413d3048f6c2f3807b77527b1c40409c38e3dd31e3e8813", "manifestDigest": "sha256:f5c550daf9e15f030413d3048f6c2f3807b77527b1c40409c38e3dd31e3e8813", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-dev --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8149648d993bad7d628f73a1d8d5294eb9564afdeba12148c8cb82e8febcb0d7", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:01cd17c3e9b158796c42f8b93162bbb4acfd617a529d0154d9760cdd06371c5f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.25-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-dev.json" }, { "imageId": "go1.25-distroless", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.13.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:2ef29bce3512131b18ebea7c8e9ae646274cc2c878c17c38dc945ae575b456ce", "manifestDigest": "sha256:2ef29bce3512131b18ebea7c8e9ae646274cc2c878c17c38dc945ae575b456ce", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-distroless --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:efac662c36dba47ef3ed6cbb6393986be33fb3fc755c85bd102d87cd5bd3226e", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ca00ce96f37f090d5c258af1a02ac439eb08a37453f15569403712611cfda097", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-distroless.json" }, { "imageId": "go1.25-slim", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.13.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:68a6d8bcd77ba991767d97add816ae81c4946ae9e79bf2d28fe3697ad6b45704", "manifestDigest": "sha256:68a6d8bcd77ba991767d97add816ae81c4946ae9e79bf2d28fe3697ad6b45704", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-slim --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d565f90475904c4463912160291e9187e7894b68bf16dab12e69deff357c7d25", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:c29648f24f7e90aeba1891d7b391fb254db889a27712bdfa3acb21a874cb1adb", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.25-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-slim.json" }, { "imageId": "go1.26-dev", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.13.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:4d64a934b4e50baad8f7bce0dfb5eed416f7d048c7ef9db7a2bab73cce7849ec", "manifestDigest": "sha256:4d64a934b4e50baad8f7bce0dfb5eed416f7d048c7ef9db7a2bab73cce7849ec", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-dev --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:7349cc7a47de15b265106bfa4211924a501a5abc9d7750f79c280a35266954b4", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:6f79d395c5f82ac37f209781d702d1ece88852929712acf0ded966b554536a50", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.26-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.26-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.26-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.26-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.26-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-dev.json" }, { "imageId": "go1.26-distroless", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.13.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:891782a227d1506358103016422659129d124ecc99adc0a62c14ddf017cc15ba", "manifestDigest": "sha256:891782a227d1506358103016422659129d124ecc99adc0a62c14ddf017cc15ba", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-distroless --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:c92bb583dd89f17cb6d8cdaf92bfbce2b2d6a035edc4ce85b469304436a8aca6", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:1a8b3b1258aa645169a6cd31503702413fcd973f01ccd78367affd36f6bb9569", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.26-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.26-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.26-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.26-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.26-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-distroless.json" }, { "imageId": "go1.26-slim", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.13.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:f075102aa2efaf56025a655f7d1ed69c9b2839eeec81978ace8b380897945406", "manifestDigest": "sha256:f075102aa2efaf56025a655f7d1ed69c9b2839eeec81978ace8b380897945406", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-slim --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:042694c6091296df3661e9a3fadbbedcd7d25a04c02b24e0013a9501ee0659c1", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:62eef5fd9e500b9af70ef2473adc1440171cea1ed05288f0b3f559d2317c3276", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.26-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.26-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.26-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.26-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/go1.26-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-slim.json" }, { "imageId": "java21-dev", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.13.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:9e7ac490808de645b84b73b3415f0a5f9a2e0ec4a716d298446d8c14e7d6ee9d", "manifestDigest": "sha256:9e7ac490808de645b84b73b3415f0a5f9a2e0ec4a716d298446d8c14e7d6ee9d", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-dev --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:849eef174ab009b17606ab964873120f584442e92676ccd08f411fdb6b4f726e", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9cd32670d2c219d54011d5057eb3c77b3a230e7689022c8eb47ccec607da2c91", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java21-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java21-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java21-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java21-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java21-dev-arm64.test-results.json" } }, "catalogRecord": "images/java21-dev.json" }, { "imageId": "java21-distroless", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.13.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:353c6b88621602d9c93558eb1634b4429e40ecc8e414d2373662339b6a2a0dba", "manifestDigest": "sha256:353c6b88621602d9c93558eb1634b4429e40ecc8e414d2373662339b6a2a0dba", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-distroless --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:6dd0c7e372bdcb47a7caed12e3211936b38da266724ec29e51e5964e63d28f08", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9cb95de1e00251874baff6573b9a9ed74015a9006de518429ef29b2b1f422ae4", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java21-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java21-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java21-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java21-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java21-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java21-distroless.json" }, { "imageId": "java21-slim", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.13.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:558cb5c5396a2dcb350cb0494abf54d718d36e08eb9adfa1af0e6efc889396e1", "manifestDigest": "sha256:558cb5c5396a2dcb350cb0494abf54d718d36e08eb9adfa1af0e6efc889396e1", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-slim --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:640f216558ea1d1961353613273c0d99ecef9b29520ae88eeefa6ae7f0f7bef3", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5ec7d8ecccff012bb402f8d0e2a3e94cd548af6544256755c92c7d8fbe8ba4aa", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java21-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java21-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java21-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java21-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java21-slim-arm64.test-results.json" } }, "catalogRecord": "images/java21-slim.json" }, { "imageId": "java25-dev", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.13.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:999787dc1e5cbc4521ed7f9caf636e5238d8adf1df8caa4bc1eb3cf10e4268cb", "manifestDigest": "sha256:999787dc1e5cbc4521ed7f9caf636e5238d8adf1df8caa4bc1eb3cf10e4268cb", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-dev --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:a7aae991b89173ecc0832503fa22b5baa17cdaed28855f27386438050b1995aa", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:b6e24da9772b69a9b34a213ba8aecead59e17996dfe6d5707c6b9a129268038f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java25-dev-arm64.test-results.json" } }, "catalogRecord": "images/java25-dev.json" }, { "imageId": "java25-distroless", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.13.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:7aa50310d78dce244b009318e4c3d1ffcdb74728a5621af7bd79a3fd950f89c1", "manifestDigest": "sha256:7aa50310d78dce244b009318e4c3d1ffcdb74728a5621af7bd79a3fd950f89c1", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-distroless --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:16ec533af5eac45b9f624cbc5cfa675679a0f14916c0c5e5f88de3deb757706f", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:98c95702f93a5c563c193147472c112ac18bedc7a067b346570469233c7138c5", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java25-distroless.json" }, { "imageId": "java25-slim", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.13.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:f81b919bb143b4a58c7457c201bc79e0ff7df0e7ced438905df461b1509e395e", "manifestDigest": "sha256:f81b919bb143b4a58c7457c201bc79e0ff7df0e7ced438905df461b1509e395e", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-slim --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:6e728ffbb4e23775405693869ab963a78f455bdc7afdf4e0e2de6b2e8d8178a0", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:f027c800dba4197f50243b483697484a1a60927c5c4b6fd97b251138421474e2", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/java25-slim-arm64.test-results.json" } }, "catalogRecord": "images/java25-slim.json" }, { "imageId": "node22-dev", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.13.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:5b986ca53292e219c5b7d29f9a84becbce3b49a49530acacf49ad966868bfad5", "manifestDigest": "sha256:5b986ca53292e219c5b7d29f9a84becbce3b49a49530acacf49ad966868bfad5", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-dev --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b1b7392380ec29813e72ab5f1972b02b17d6929c1adf1717ce94987acce25bee", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:03f9d484b627bb84cdc78634d57eacd2b59d147a296f77969b30ff2d2034d80f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node22-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node22-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node22-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node22-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node22-dev-arm64.test-results.json" } }, "catalogRecord": "images/node22-dev.json" }, { "imageId": "node22-distroless", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.13.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:46aafbfa1b47deccaebf6b173ad183791f14702dd099d287d2d70d49d751f3e8", "manifestDigest": "sha256:46aafbfa1b47deccaebf6b173ad183791f14702dd099d287d2d70d49d751f3e8", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-distroless --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:321d4918b9709819d9ab039bcecf62a103085cacb009c5d6d5fcb7046d16cff4", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:c4d0c605197b43a48a7576eac1f1c6fecd9d016c6c413e996ab6da7e4154b80f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node22-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node22-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node22-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node22-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node22-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node22-distroless.json" }, { "imageId": "node22-slim", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.13.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:d362855468f905ce680fe2a1849f370aa74342d4b0e8604a3840b83375fd8073", "manifestDigest": "sha256:d362855468f905ce680fe2a1849f370aa74342d4b0e8604a3840b83375fd8073", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-slim --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8b0dd0f75d719fbca2619201e0b1212afb6987aa2421c51c94c1ee537e092009", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:afde76ba0ccb28a69aa11a5d15a9c8dfad29f54c7ac6bed5b029e5d8664f7779", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node22-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node22-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node22-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node22-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node22-slim-arm64.test-results.json" } }, "catalogRecord": "images/node22-slim.json" }, { "imageId": "node24-dev", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.13.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:4ce8c74849fa5e5f556acfc7f8c9bac0ee2b8521729901f0e042e92fa477f812", "manifestDigest": "sha256:4ce8c74849fa5e5f556acfc7f8c9bac0ee2b8521729901f0e042e92fa477f812", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-dev --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:999e453f1567d4769068ee3d085a47276a53d6462eecb363b11467f5050492ce", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:22b42d30fde12ee6e366eeb0aae543c6ca9b4ce9ca6b9e7fb73081b13baed2a9", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node24-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node24-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node24-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node24-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node24-dev-arm64.test-results.json" } }, "catalogRecord": "images/node24-dev.json" }, { "imageId": "node24-distroless", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.13.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:725b4be5dc1defe526148475aa982ef3781fa36415121d4d4e59b456c5cc9bfb", "manifestDigest": "sha256:725b4be5dc1defe526148475aa982ef3781fa36415121d4d4e59b456c5cc9bfb", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-distroless --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d406ce610500e435cdf24857b4fa7cd6059a9c209be5c59424be8bd6054e22fa", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:034df6e4d7c9ace171e8fcae9718c37aa0f113a9dda2a78364294d153d9e5d30", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node24-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node24-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node24-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node24-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node24-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node24-distroless.json" }, { "imageId": "node24-slim", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.13.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:856e946bc0143d0a0239f0917163088112b2672d95587e99831f87a4d192d158", "manifestDigest": "sha256:856e946bc0143d0a0239f0917163088112b2672d95587e99831f87a4d192d158", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-slim --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b7d80a28c05774af4442df3e35670552dd2e48bccb168d760fc98536fd7b73da", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:d8a6f221e8965574f64b508c7fe7112f888ab89238cf76445e9b082a04bd8bbf", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node24-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node24-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node24-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node24-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/node24-slim-arm64.test-results.json" } }, "catalogRecord": "images/node24-slim.json" }, { "imageId": "oauth2-proxy7", "kind": "service", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7:v0.13.0", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7@sha256:368035026a824c7596eab27270f640e63a6d84e0c624856a3c04632e652fdfca", "manifestDigest": "sha256:368035026a824c7596eab27270f640e63a6d84e0c624856a3c04632e652fdfca", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex oauth2-proxy7 --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:39bfe95dcf38caf0dcf1f9badebfb7b3c3ca0d54ccb21727614a982aab28e4b2", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:acbeba15dc0046a8d16f2dd10344356a5066f3a5a9284ad0c59add8feb08aef1", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/oauth2-proxy7-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/oauth2-proxy7-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/oauth2-proxy7.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/oauth2-proxy7-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/oauth2-proxy7-arm64.test-results.json" } }, "catalogRecord": "images/oauth2-proxy7.json" }, { "imageId": "postgres16", "kind": "service", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16:v0.13.0", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16@sha256:5a358578029818448466d4e6584904f3c8c31542080c6bd3b1197304ce44b837", "manifestDigest": "sha256:5a358578029818448466d4e6584904f3c8c31542080c6bd3b1197304ce44b837", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex postgres16 --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5099df7b80049b59b1257ca60f872ab74b71d42c74d8aab8564be73c355bfb59", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:16426f7d0e3a18169175d5bbf810e9d94a7f6b4338676b5ebbcd48cebda29e8b", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/postgres16-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/postgres16-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/postgres16.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/postgres16-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/postgres16-arm64.test-results.json" } }, "catalogRecord": "images/postgres16.json" }, { "imageId": "python3.13-dev", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13:v0.13.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13@sha256:c7d921351b6336684c34870aa8526a646b79aeaafb03f148c7091f3dcba48a31", "manifestDigest": "sha256:c7d921351b6336684c34870aa8526a646b79aeaafb03f148c7091f3dcba48a31", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.13-dev --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8cb9826e42e08b88148dba25b95695dd610f2e18e2f7eacf715eef96c87e2229", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:73470d35f9b09b1fba886732f288be22961e4896e5712c97ac7c7415d15dfa79", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.13-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.13-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.13-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.13-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.13-dev-arm64.test-results.json" } }, "catalogRecord": "images/python3.13-dev.json" }, { "imageId": "python3.13-distroless", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13:v0.13.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13@sha256:010e3b2a669f0df11f6031c2e3a4867bc1ca617aae9034c44516593718621586", "manifestDigest": "sha256:010e3b2a669f0df11f6031c2e3a4867bc1ca617aae9034c44516593718621586", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.13-distroless --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:392bfce95140d0bd82e0d6cbab2b00044f303afef03952d78968132bdaca844f", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:08cccb62e4385cb428214ff1087bbf65146b9d14cac82a86b4420699a90db9cb", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.13-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.13-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.13-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.13-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.13-distroless-arm64.test-results.json" } }, "catalogRecord": "images/python3.13-distroless.json" }, { "imageId": "python3.13-slim", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13:v0.13.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13@sha256:8869c5ac5407b3bec41b141aa9a02decaa6148c3f653547ed4aa25a2253293a5", "manifestDigest": "sha256:8869c5ac5407b3bec41b141aa9a02decaa6148c3f653547ed4aa25a2253293a5", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.13-slim --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:86057dd4bf744a53b88b82ae8b9d6780f71efb578b3e6c29260fdea31ae3f3c1", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:a2a0047a97119865c6a8dce2d5168782690aaf2617f599af04dc211a4f24c6db", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.13-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.13-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.13-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.13-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.13-slim-arm64.test-results.json" } }, "catalogRecord": "images/python3.13-slim.json" }, { "imageId": "python3.14-dev", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14:v0.13.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14@sha256:6278c133c3196fa7cb03485aa3be542a5eb84fb1bb293c09c13dd173a41ee2e7", "manifestDigest": "sha256:6278c133c3196fa7cb03485aa3be542a5eb84fb1bb293c09c13dd173a41ee2e7", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.14-dev --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e4d49cd80d5ed55c079e5bb80486e1b8cae46d0b069430f50688d056b1442803", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:63bb455fdd20bdb2103e7e901451bdf048c4dde74c7ee1bf5a8b7b4790237b25", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.14-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.14-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.14-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.14-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.14-dev-arm64.test-results.json" } }, "catalogRecord": "images/python3.14-dev.json" }, { "imageId": "python3.14-distroless", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14:v0.13.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14@sha256:2010f60e97dbd44d7435455cc63c53be8cce2e3540a71eadb462ed265d191b37", "manifestDigest": "sha256:2010f60e97dbd44d7435455cc63c53be8cce2e3540a71eadb462ed265d191b37", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.14-distroless --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:bd7cf4a81dc45cdca7bf9d95605e51c6f0f54c40bc4bc266d0460d2ca08520b0", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ed4168f31f688e4b8d6411df87d077c337473735367699446427b6376bd0219f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.14-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.14-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.14-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.14-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.14-distroless-arm64.test-results.json" } }, "catalogRecord": "images/python3.14-distroless.json" }, { "imageId": "python3.14-slim", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14:v0.13.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14@sha256:9e80ee1205b337695e67dd7cae42920caebd223409bb7a696512a216fb3b3179", "manifestDigest": "sha256:9e80ee1205b337695e67dd7cae42920caebd223409bb7a696512a216fb3b3179", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.14-slim --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:fbd4daca1cade9b1bb39643f4c842634992c12cd8c13570b16935fcfcf39c44b", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ccc9e80dcb0633a2f522b7e29174f800d333be4e432e5d28373101c74f690a15", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.14-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.14-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.14-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.14-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/python3.14-slim-arm64.test-results.json" } }, "catalogRecord": "images/python3.14-slim.json" }, { "imageId": "rust1.95-dev", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.13.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:c8f4c0cbe42782676d82cb6b9830a55fd8c9c662470c47aeba126feecfd0f762", "manifestDigest": "sha256:c8f4c0cbe42782676d82cb6b9830a55fd8c9c662470c47aeba126feecfd0f762", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-dev --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:51198d640930e71bd1d2a1e7e41d4f756cbed0440455b04d6b5b396dddb2d381", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:69484b5aa58eca36feea1a2574d27c9e4d4afe831e6b68d8de042d1da419edb6", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/rust1.95-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/rust1.95-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/rust1.95-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/rust1.95-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/rust1.95-dev-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-dev.json" }, { "imageId": "rust1.95-distroless", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.13.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:abf9dbb0e8e1c5b4562e287fb6ff1dfa818d1e4691e0d008949d6e1b4e68d83f", "manifestDigest": "sha256:abf9dbb0e8e1c5b4562e287fb6ff1dfa818d1e4691e0d008949d6e1b4e68d83f", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-distroless --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:dd1a081ca80ca3c68b899fe611e1e9113876856b54bec5012935e51aaecf2660", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:108f74ceca350599575732e8cfecc9a81f8ccc6fd15b3a251542f5ececbc4da6", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/rust1.95-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/rust1.95-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/rust1.95-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/rust1.95-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/rust1.95-distroless-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-distroless.json" }, { "imageId": "rust1.95-slim", "kind": "runtime", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.13.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:86c7234984a91026fb77a9a1877ccda267aa5098154477781a3378ff12da1d96", "manifestDigest": "sha256:86c7234984a91026fb77a9a1877ccda267aa5098154477781a3378ff12da1d96", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-slim --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:f25865ac6fd911e583ecb01ccd1b2cdb5cbdc7cbbb361b85738ae9d88323870b", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5f83476b334699382262869986003ba467978bab23fec2b42516ce23dbfdf9f3", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/rust1.95-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/rust1.95-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/rust1.95-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/rust1.95-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/rust1.95-slim-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-slim.json" }, { "imageId": "valkey8", "kind": "service", "tag": "v0.13.0", "publishedAt": "2026-07-10T00:21:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8:v0.13.0", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8@sha256:0ead819ffc06e5b9be97baf6b3182c5436f1f81ccd8820638e5994cb5516b270", "manifestDigest": "sha256:0ead819ffc06e5b9be97baf6b3182c5436f1f81ccd8820638e5994cb5516b270", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex valkey8 --tag v0.13.0" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:a77605ad6ba60cf4da58cceaeafb7d23c598dd7d538b15066a39e05579665848", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:72f75ecb4daca1193529aa4e2c83cdb5794686aa732d32afe64ea160fff8f189", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "49e254521fb6ac654a109925af4e0346809846d1" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/valkey8-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/valkey8-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/valkey8.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/valkey8-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.13.0/valkey8-arm64.test-results.json" } }, "catalogRecord": "images/valkey8.json" }, { "imageId": "cc15-dev", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.12.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:9cb7abe9a81ae92c62cc4ecbe7b4f65e7e76847fc222bbdb5ef8a2c5adff7e77", "manifestDigest": "sha256:9cb7abe9a81ae92c62cc4ecbe7b4f65e7e76847fc222bbdb5ef8a2c5adff7e77", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-dev --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b22be1e08560f81ca4bd79772090e78ce5de18e3e19897af7962399350f33a0c", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:050fd7693478b4417bb3303c0f8faeaa47fc2a6a3393fac1d119f3932335dc6e", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/cc15-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/cc15-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/cc15-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/cc15-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/cc15-dev-arm64.test-results.json" } }, "catalogRecord": "images/cc15-dev.json" }, { "imageId": "cc15-distroless", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.12.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:eaf8d7b8f497b3d80798dc5cab07d97568af8bbcca72f8916548fe00ed1bcbb6", "manifestDigest": "sha256:eaf8d7b8f497b3d80798dc5cab07d97568af8bbcca72f8916548fe00ed1bcbb6", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-distroless --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:62fa629895d88d823cf8483d1285bca387fdecb3216a65663c8934ef9abf8111", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:44a12c6f1118fc9cd2e6c2c0c890c09a17be706acf182ec915a145eec188c0a4", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/cc15-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/cc15-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/cc15-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/cc15-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/cc15-distroless-arm64.test-results.json" } }, "catalogRecord": "images/cc15-distroless.json" }, { "imageId": "cc15-slim", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.12.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:2aa0db3e52f4e3f6f4861566bbe6fac755223e89fc0fe9170033c77a5acb0d1b", "manifestDigest": "sha256:2aa0db3e52f4e3f6f4861566bbe6fac755223e89fc0fe9170033c77a5acb0d1b", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-slim --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:41c10534ca2e0f9abe9fe30f5fa2fc3e578794907d82206635a05a45af89c671", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:208c8d3adf1e8ceaf621ec92111004998ffc5cb9fa671c7c1126a67a615b7bc1", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/cc15-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/cc15-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/cc15-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/cc15-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/cc15-slim-arm64.test-results.json" } }, "catalogRecord": "images/cc15-slim.json" }, { "imageId": "coreLTS-dev", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.12.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:1a2a6c95c0a1cb0b1e4bc7632524ba739fba0317c574689ab4080d2653ad893c", "manifestDigest": "sha256:1a2a6c95c0a1cb0b1e4bc7632524ba739fba0317c574689ab4080d2653ad893c", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-dev --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:2c33692b1362909ab1a0aa6f6996f5e49f3de26a648ee598dfaf8f0ede5201d1", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ab02aa6f77357e8ebbfbbd5cca353d22ff057fba95493d92cb57f28ca89ca325", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/coreLTS-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/coreLTS-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/coreLTS-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/coreLTS-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/coreLTS-dev-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-dev.json" }, { "imageId": "coreLTS-distroless", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.12.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:35cbd50837d84cc76461b18ab80a820e6294e65c7c4859412b5f1a1ea26a4a95", "manifestDigest": "sha256:35cbd50837d84cc76461b18ab80a820e6294e65c7c4859412b5f1a1ea26a4a95", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-distroless --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8483d70d0a15f2bbff1f050d0085b785a56db9d772c2cf12f1da8a6ef4b70f25", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:1ae6445f07f7a5c1ffe03849558300e871f53645f4b08a7513ca3d7e8cadf337", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/coreLTS-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/coreLTS-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/coreLTS-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/coreLTS-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/coreLTS-distroless-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-distroless.json" }, { "imageId": "coreLTS-slim", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.12.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:391b292a4058505fc5bd672926b57327611252263b3f8d9cde87575909e64b84", "manifestDigest": "sha256:391b292a4058505fc5bd672926b57327611252263b3f8d9cde87575909e64b84", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-slim --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5cb6d49b1eadef0ceee698757891729a916b872b9faf52342a055e4f1e636fe4", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:0159576e844555fd54f2c0be398b7fca46b3bf1c50a2341191a5ed9328cdcabf", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/coreLTS-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/coreLTS-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/coreLTS-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/coreLTS-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/coreLTS-slim-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-slim.json" }, { "imageId": "dotnet10-dev", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.12.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:c1f3243613704e3dbe351b14c706cb199b5645e4a0a8a4102a310504add1f7d5", "manifestDigest": "sha256:c1f3243613704e3dbe351b14c706cb199b5645e4a0a8a4102a310504add1f7d5", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-dev --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:7c696f61faf355f2b8f6ca4e97e01d1d7b94c3951ecaf9f986a3c12c6df7c2da", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:c55100a9f0584689bdfcd8e7bd54cdf8e6434204881087da6b4dbb11680bc50a", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet10-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet10-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet10-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet10-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet10-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-dev.json" }, { "imageId": "dotnet10-distroless", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.12.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:b8bfcf80eb3181975409618375ba503af23d3c4ff9720770c38f1d5a818d6434", "manifestDigest": "sha256:b8bfcf80eb3181975409618375ba503af23d3c4ff9720770c38f1d5a818d6434", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-distroless --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:45a97f933498b623123319b0ec300575ddb6230ec193e08670ee446e6847a085", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:02bb4e65b99ef224753e31e1fbf24959886e7d3af888bb2625cd7d2b119bb756", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet10-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet10-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet10-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet10-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet10-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-distroless.json" }, { "imageId": "dotnet10-slim", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.12.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:f7fab5132505849367ebd0cd5c20ca9d567370d9255970af38b174c0c016a5fe", "manifestDigest": "sha256:f7fab5132505849367ebd0cd5c20ca9d567370d9255970af38b174c0c016a5fe", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-slim --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:c39433cf6e9467fb41f90863e6647c63733f69a8c6fea830342b068c4364036a", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:616d404b7e42ee953172183e6061e7f5cf965c32faaa0b088ef96d98179d0e35", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet10-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet10-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet10-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet10-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet10-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-slim.json" }, { "imageId": "dotnet8-dev", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.12.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:2b163d3b6aa5e2d432f9a31dd3a624b78bf02c550ff3d08f561266d3eb4f77c7", "manifestDigest": "sha256:2b163d3b6aa5e2d432f9a31dd3a624b78bf02c550ff3d08f561266d3eb4f77c7", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-dev --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:082569ec61de2c16b724910dae833d1c1d879def1dfd39bfa648ff3dd8142644", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:d78f0d9ea7a321f412fe2d732c02a9c5a6e4b80103aa0b46c7dbd061c6945e27", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet8-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet8-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet8-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet8-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet8-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-dev.json" }, { "imageId": "dotnet8-distroless", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.12.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:53029022d2ba392527e3d4335e79d1e6b82c26a5928986ad97db606db8e6ed16", "manifestDigest": "sha256:53029022d2ba392527e3d4335e79d1e6b82c26a5928986ad97db606db8e6ed16", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-distroless --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d6cb695a6c45ff1e25bf97ccf895fa34efb61d95e719d391912c9efff529919a", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2f187c39852b7b108668215a85147a55d9c7b4e554f0cb04f01b8aeb6915330a", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet8-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet8-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet8-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet8-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet8-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-distroless.json" }, { "imageId": "dotnet8-slim", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.12.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:00d3b8c33c218d0c16fdae7f36b90591298f89aa66a5c656f78c08d650735fa1", "manifestDigest": "sha256:00d3b8c33c218d0c16fdae7f36b90591298f89aa66a5c656f78c08d650735fa1", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-slim --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:3e250a36661555a83af326aad52bb8a99faac29d07425be63e28b1f3c3ef441b", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:cd1c08fa675691f9106b3415b10612f11b676d80ec37868bc44196c179bad371", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet8-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet8-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet8-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet8-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/dotnet8-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-slim.json" }, { "imageId": "go1.25-dev", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.12.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:f5c550daf9e15f030413d3048f6c2f3807b77527b1c40409c38e3dd31e3e8813", "manifestDigest": "sha256:f5c550daf9e15f030413d3048f6c2f3807b77527b1c40409c38e3dd31e3e8813", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-dev --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8149648d993bad7d628f73a1d8d5294eb9564afdeba12148c8cb82e8febcb0d7", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:01cd17c3e9b158796c42f8b93162bbb4acfd617a529d0154d9760cdd06371c5f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.25-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-dev.json" }, { "imageId": "go1.25-distroless", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.12.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:2ef29bce3512131b18ebea7c8e9ae646274cc2c878c17c38dc945ae575b456ce", "manifestDigest": "sha256:2ef29bce3512131b18ebea7c8e9ae646274cc2c878c17c38dc945ae575b456ce", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-distroless --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:efac662c36dba47ef3ed6cbb6393986be33fb3fc755c85bd102d87cd5bd3226e", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ca00ce96f37f090d5c258af1a02ac439eb08a37453f15569403712611cfda097", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-distroless.json" }, { "imageId": "go1.25-slim", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.12.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:68a6d8bcd77ba991767d97add816ae81c4946ae9e79bf2d28fe3697ad6b45704", "manifestDigest": "sha256:68a6d8bcd77ba991767d97add816ae81c4946ae9e79bf2d28fe3697ad6b45704", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-slim --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d565f90475904c4463912160291e9187e7894b68bf16dab12e69deff357c7d25", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:c29648f24f7e90aeba1891d7b391fb254db889a27712bdfa3acb21a874cb1adb", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.25-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-slim.json" }, { "imageId": "go1.26-dev", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.12.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:4d64a934b4e50baad8f7bce0dfb5eed416f7d048c7ef9db7a2bab73cce7849ec", "manifestDigest": "sha256:4d64a934b4e50baad8f7bce0dfb5eed416f7d048c7ef9db7a2bab73cce7849ec", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-dev --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:7349cc7a47de15b265106bfa4211924a501a5abc9d7750f79c280a35266954b4", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:6f79d395c5f82ac37f209781d702d1ece88852929712acf0ded966b554536a50", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.26-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.26-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.26-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.26-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.26-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-dev.json" }, { "imageId": "go1.26-distroless", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.12.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:891782a227d1506358103016422659129d124ecc99adc0a62c14ddf017cc15ba", "manifestDigest": "sha256:891782a227d1506358103016422659129d124ecc99adc0a62c14ddf017cc15ba", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-distroless --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:c92bb583dd89f17cb6d8cdaf92bfbce2b2d6a035edc4ce85b469304436a8aca6", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:1a8b3b1258aa645169a6cd31503702413fcd973f01ccd78367affd36f6bb9569", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.26-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.26-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.26-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.26-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.26-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-distroless.json" }, { "imageId": "go1.26-slim", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.12.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:f075102aa2efaf56025a655f7d1ed69c9b2839eeec81978ace8b380897945406", "manifestDigest": "sha256:f075102aa2efaf56025a655f7d1ed69c9b2839eeec81978ace8b380897945406", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-slim --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:042694c6091296df3661e9a3fadbbedcd7d25a04c02b24e0013a9501ee0659c1", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:62eef5fd9e500b9af70ef2473adc1440171cea1ed05288f0b3f559d2317c3276", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.26-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.26-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.26-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.26-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/go1.26-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-slim.json" }, { "imageId": "java21-dev", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.12.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:9e7ac490808de645b84b73b3415f0a5f9a2e0ec4a716d298446d8c14e7d6ee9d", "manifestDigest": "sha256:9e7ac490808de645b84b73b3415f0a5f9a2e0ec4a716d298446d8c14e7d6ee9d", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-dev --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:849eef174ab009b17606ab964873120f584442e92676ccd08f411fdb6b4f726e", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9cd32670d2c219d54011d5057eb3c77b3a230e7689022c8eb47ccec607da2c91", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java21-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java21-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java21-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java21-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java21-dev-arm64.test-results.json" } }, "catalogRecord": "images/java21-dev.json" }, { "imageId": "java21-distroless", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.12.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:353c6b88621602d9c93558eb1634b4429e40ecc8e414d2373662339b6a2a0dba", "manifestDigest": "sha256:353c6b88621602d9c93558eb1634b4429e40ecc8e414d2373662339b6a2a0dba", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-distroless --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:6dd0c7e372bdcb47a7caed12e3211936b38da266724ec29e51e5964e63d28f08", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9cb95de1e00251874baff6573b9a9ed74015a9006de518429ef29b2b1f422ae4", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java21-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java21-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java21-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java21-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java21-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java21-distroless.json" }, { "imageId": "java21-slim", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.12.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:558cb5c5396a2dcb350cb0494abf54d718d36e08eb9adfa1af0e6efc889396e1", "manifestDigest": "sha256:558cb5c5396a2dcb350cb0494abf54d718d36e08eb9adfa1af0e6efc889396e1", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-slim --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:640f216558ea1d1961353613273c0d99ecef9b29520ae88eeefa6ae7f0f7bef3", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5ec7d8ecccff012bb402f8d0e2a3e94cd548af6544256755c92c7d8fbe8ba4aa", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java21-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java21-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java21-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java21-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java21-slim-arm64.test-results.json" } }, "catalogRecord": "images/java21-slim.json" }, { "imageId": "java25-dev", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.12.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:999787dc1e5cbc4521ed7f9caf636e5238d8adf1df8caa4bc1eb3cf10e4268cb", "manifestDigest": "sha256:999787dc1e5cbc4521ed7f9caf636e5238d8adf1df8caa4bc1eb3cf10e4268cb", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-dev --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:a7aae991b89173ecc0832503fa22b5baa17cdaed28855f27386438050b1995aa", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:b6e24da9772b69a9b34a213ba8aecead59e17996dfe6d5707c6b9a129268038f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java25-dev-arm64.test-results.json" } }, "catalogRecord": "images/java25-dev.json" }, { "imageId": "java25-distroless", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.12.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:7aa50310d78dce244b009318e4c3d1ffcdb74728a5621af7bd79a3fd950f89c1", "manifestDigest": "sha256:7aa50310d78dce244b009318e4c3d1ffcdb74728a5621af7bd79a3fd950f89c1", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-distroless --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:16ec533af5eac45b9f624cbc5cfa675679a0f14916c0c5e5f88de3deb757706f", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:98c95702f93a5c563c193147472c112ac18bedc7a067b346570469233c7138c5", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java25-distroless.json" }, { "imageId": "java25-slim", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.12.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:f81b919bb143b4a58c7457c201bc79e0ff7df0e7ced438905df461b1509e395e", "manifestDigest": "sha256:f81b919bb143b4a58c7457c201bc79e0ff7df0e7ced438905df461b1509e395e", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-slim --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:6e728ffbb4e23775405693869ab963a78f455bdc7afdf4e0e2de6b2e8d8178a0", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:f027c800dba4197f50243b483697484a1a60927c5c4b6fd97b251138421474e2", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/java25-slim-arm64.test-results.json" } }, "catalogRecord": "images/java25-slim.json" }, { "imageId": "node22-dev", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.12.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:5b986ca53292e219c5b7d29f9a84becbce3b49a49530acacf49ad966868bfad5", "manifestDigest": "sha256:5b986ca53292e219c5b7d29f9a84becbce3b49a49530acacf49ad966868bfad5", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-dev --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b1b7392380ec29813e72ab5f1972b02b17d6929c1adf1717ce94987acce25bee", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:03f9d484b627bb84cdc78634d57eacd2b59d147a296f77969b30ff2d2034d80f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node22-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node22-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node22-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node22-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node22-dev-arm64.test-results.json" } }, "catalogRecord": "images/node22-dev.json" }, { "imageId": "node22-distroless", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.12.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:46aafbfa1b47deccaebf6b173ad183791f14702dd099d287d2d70d49d751f3e8", "manifestDigest": "sha256:46aafbfa1b47deccaebf6b173ad183791f14702dd099d287d2d70d49d751f3e8", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-distroless --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:321d4918b9709819d9ab039bcecf62a103085cacb009c5d6d5fcb7046d16cff4", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:c4d0c605197b43a48a7576eac1f1c6fecd9d016c6c413e996ab6da7e4154b80f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node22-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node22-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node22-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node22-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node22-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node22-distroless.json" }, { "imageId": "node22-slim", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.12.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:d362855468f905ce680fe2a1849f370aa74342d4b0e8604a3840b83375fd8073", "manifestDigest": "sha256:d362855468f905ce680fe2a1849f370aa74342d4b0e8604a3840b83375fd8073", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-slim --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8b0dd0f75d719fbca2619201e0b1212afb6987aa2421c51c94c1ee537e092009", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:afde76ba0ccb28a69aa11a5d15a9c8dfad29f54c7ac6bed5b029e5d8664f7779", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node22-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node22-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node22-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node22-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node22-slim-arm64.test-results.json" } }, "catalogRecord": "images/node22-slim.json" }, { "imageId": "node24-dev", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.12.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:4ce8c74849fa5e5f556acfc7f8c9bac0ee2b8521729901f0e042e92fa477f812", "manifestDigest": "sha256:4ce8c74849fa5e5f556acfc7f8c9bac0ee2b8521729901f0e042e92fa477f812", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-dev --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:999e453f1567d4769068ee3d085a47276a53d6462eecb363b11467f5050492ce", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:22b42d30fde12ee6e366eeb0aae543c6ca9b4ce9ca6b9e7fb73081b13baed2a9", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node24-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node24-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node24-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node24-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node24-dev-arm64.test-results.json" } }, "catalogRecord": "images/node24-dev.json" }, { "imageId": "node24-distroless", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.12.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:725b4be5dc1defe526148475aa982ef3781fa36415121d4d4e59b456c5cc9bfb", "manifestDigest": "sha256:725b4be5dc1defe526148475aa982ef3781fa36415121d4d4e59b456c5cc9bfb", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-distroless --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d406ce610500e435cdf24857b4fa7cd6059a9c209be5c59424be8bd6054e22fa", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:034df6e4d7c9ace171e8fcae9718c37aa0f113a9dda2a78364294d153d9e5d30", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node24-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node24-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node24-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node24-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node24-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node24-distroless.json" }, { "imageId": "node24-slim", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.12.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:856e946bc0143d0a0239f0917163088112b2672d95587e99831f87a4d192d158", "manifestDigest": "sha256:856e946bc0143d0a0239f0917163088112b2672d95587e99831f87a4d192d158", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-slim --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b7d80a28c05774af4442df3e35670552dd2e48bccb168d760fc98536fd7b73da", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:d8a6f221e8965574f64b508c7fe7112f888ab89238cf76445e9b082a04bd8bbf", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node24-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node24-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node24-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node24-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/node24-slim-arm64.test-results.json" } }, "catalogRecord": "images/node24-slim.json" }, { "imageId": "oauth2-proxy7", "kind": "service", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7:v0.12.2", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7@sha256:368035026a824c7596eab27270f640e63a6d84e0c624856a3c04632e652fdfca", "manifestDigest": "sha256:368035026a824c7596eab27270f640e63a6d84e0c624856a3c04632e652fdfca", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex oauth2-proxy7 --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:39bfe95dcf38caf0dcf1f9badebfb7b3c3ca0d54ccb21727614a982aab28e4b2", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:acbeba15dc0046a8d16f2dd10344356a5066f3a5a9284ad0c59add8feb08aef1", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/oauth2-proxy7-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/oauth2-proxy7-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/oauth2-proxy7.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/oauth2-proxy7-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/oauth2-proxy7-arm64.test-results.json" } }, "catalogRecord": "images/oauth2-proxy7.json" }, { "imageId": "postgres16", "kind": "service", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16:v0.12.2", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16@sha256:5a358578029818448466d4e6584904f3c8c31542080c6bd3b1197304ce44b837", "manifestDigest": "sha256:5a358578029818448466d4e6584904f3c8c31542080c6bd3b1197304ce44b837", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex postgres16 --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5099df7b80049b59b1257ca60f872ab74b71d42c74d8aab8564be73c355bfb59", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:16426f7d0e3a18169175d5bbf810e9d94a7f6b4338676b5ebbcd48cebda29e8b", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/postgres16-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/postgres16-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/postgres16.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/postgres16-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/postgres16-arm64.test-results.json" } }, "catalogRecord": "images/postgres16.json" }, { "imageId": "python3.13-dev", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13:v0.12.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13@sha256:c7d921351b6336684c34870aa8526a646b79aeaafb03f148c7091f3dcba48a31", "manifestDigest": "sha256:c7d921351b6336684c34870aa8526a646b79aeaafb03f148c7091f3dcba48a31", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.13-dev --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8cb9826e42e08b88148dba25b95695dd610f2e18e2f7eacf715eef96c87e2229", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:73470d35f9b09b1fba886732f288be22961e4896e5712c97ac7c7415d15dfa79", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.13-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.13-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.13-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.13-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.13-dev-arm64.test-results.json" } }, "catalogRecord": "images/python3.13-dev.json" }, { "imageId": "python3.13-distroless", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13:v0.12.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13@sha256:010e3b2a669f0df11f6031c2e3a4867bc1ca617aae9034c44516593718621586", "manifestDigest": "sha256:010e3b2a669f0df11f6031c2e3a4867bc1ca617aae9034c44516593718621586", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.13-distroless --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:392bfce95140d0bd82e0d6cbab2b00044f303afef03952d78968132bdaca844f", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:08cccb62e4385cb428214ff1087bbf65146b9d14cac82a86b4420699a90db9cb", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.13-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.13-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.13-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.13-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.13-distroless-arm64.test-results.json" } }, "catalogRecord": "images/python3.13-distroless.json" }, { "imageId": "python3.13-slim", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13:v0.12.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13@sha256:8869c5ac5407b3bec41b141aa9a02decaa6148c3f653547ed4aa25a2253293a5", "manifestDigest": "sha256:8869c5ac5407b3bec41b141aa9a02decaa6148c3f653547ed4aa25a2253293a5", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.13-slim --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:86057dd4bf744a53b88b82ae8b9d6780f71efb578b3e6c29260fdea31ae3f3c1", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:a2a0047a97119865c6a8dce2d5168782690aaf2617f599af04dc211a4f24c6db", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.13-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.13-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.13-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.13-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.13-slim-arm64.test-results.json" } }, "catalogRecord": "images/python3.13-slim.json" }, { "imageId": "python3.14-dev", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14:v0.12.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14@sha256:6278c133c3196fa7cb03485aa3be542a5eb84fb1bb293c09c13dd173a41ee2e7", "manifestDigest": "sha256:6278c133c3196fa7cb03485aa3be542a5eb84fb1bb293c09c13dd173a41ee2e7", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.14-dev --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e4d49cd80d5ed55c079e5bb80486e1b8cae46d0b069430f50688d056b1442803", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:63bb455fdd20bdb2103e7e901451bdf048c4dde74c7ee1bf5a8b7b4790237b25", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.14-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.14-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.14-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.14-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.14-dev-arm64.test-results.json" } }, "catalogRecord": "images/python3.14-dev.json" }, { "imageId": "python3.14-distroless", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14:v0.12.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14@sha256:2010f60e97dbd44d7435455cc63c53be8cce2e3540a71eadb462ed265d191b37", "manifestDigest": "sha256:2010f60e97dbd44d7435455cc63c53be8cce2e3540a71eadb462ed265d191b37", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.14-distroless --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:bd7cf4a81dc45cdca7bf9d95605e51c6f0f54c40bc4bc266d0460d2ca08520b0", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ed4168f31f688e4b8d6411df87d077c337473735367699446427b6376bd0219f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.14-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.14-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.14-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.14-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.14-distroless-arm64.test-results.json" } }, "catalogRecord": "images/python3.14-distroless.json" }, { "imageId": "python3.14-slim", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14:v0.12.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14@sha256:9e80ee1205b337695e67dd7cae42920caebd223409bb7a696512a216fb3b3179", "manifestDigest": "sha256:9e80ee1205b337695e67dd7cae42920caebd223409bb7a696512a216fb3b3179", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.14-slim --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:fbd4daca1cade9b1bb39643f4c842634992c12cd8c13570b16935fcfcf39c44b", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ccc9e80dcb0633a2f522b7e29174f800d333be4e432e5d28373101c74f690a15", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.14-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.14-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.14-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.14-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/python3.14-slim-arm64.test-results.json" } }, "catalogRecord": "images/python3.14-slim.json" }, { "imageId": "rust1.95-dev", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.12.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:c8f4c0cbe42782676d82cb6b9830a55fd8c9c662470c47aeba126feecfd0f762", "manifestDigest": "sha256:c8f4c0cbe42782676d82cb6b9830a55fd8c9c662470c47aeba126feecfd0f762", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-dev --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:51198d640930e71bd1d2a1e7e41d4f756cbed0440455b04d6b5b396dddb2d381", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:69484b5aa58eca36feea1a2574d27c9e4d4afe831e6b68d8de042d1da419edb6", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/rust1.95-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/rust1.95-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/rust1.95-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/rust1.95-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/rust1.95-dev-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-dev.json" }, { "imageId": "rust1.95-distroless", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.12.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:abf9dbb0e8e1c5b4562e287fb6ff1dfa818d1e4691e0d008949d6e1b4e68d83f", "manifestDigest": "sha256:abf9dbb0e8e1c5b4562e287fb6ff1dfa818d1e4691e0d008949d6e1b4e68d83f", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-distroless --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:dd1a081ca80ca3c68b899fe611e1e9113876856b54bec5012935e51aaecf2660", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:108f74ceca350599575732e8cfecc9a81f8ccc6fd15b3a251542f5ececbc4da6", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/rust1.95-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/rust1.95-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/rust1.95-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/rust1.95-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/rust1.95-distroless-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-distroless.json" }, { "imageId": "rust1.95-slim", "kind": "runtime", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.12.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:86c7234984a91026fb77a9a1877ccda267aa5098154477781a3378ff12da1d96", "manifestDigest": "sha256:86c7234984a91026fb77a9a1877ccda267aa5098154477781a3378ff12da1d96", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-slim --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:f25865ac6fd911e583ecb01ccd1b2cdb5cbdc7cbbb361b85738ae9d88323870b", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5f83476b334699382262869986003ba467978bab23fec2b42516ce23dbfdf9f3", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/rust1.95-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/rust1.95-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/rust1.95-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/rust1.95-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/rust1.95-slim-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-slim.json" }, { "imageId": "valkey8", "kind": "service", "tag": "v0.12.2", "publishedAt": "2026-07-04T17:29:57Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8:v0.12.2", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8@sha256:0ead819ffc06e5b9be97baf6b3182c5436f1f81ccd8820638e5994cb5516b270", "manifestDigest": "sha256:0ead819ffc06e5b9be97baf6b3182c5436f1f81ccd8820638e5994cb5516b270", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex valkey8 --tag v0.12.2" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:a77605ad6ba60cf4da58cceaeafb7d23c598dd7d538b15066a39e05579665848", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:72f75ecb4daca1193529aa4e2c83cdb5794686aa732d32afe64ea160fff8f189", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/valkey8-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/valkey8-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/valkey8.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/valkey8-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.2/valkey8-arm64.test-results.json" } }, "catalogRecord": "images/valkey8.json" }, { "imageId": "cc15-dev", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.12.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:9cb7abe9a81ae92c62cc4ecbe7b4f65e7e76847fc222bbdb5ef8a2c5adff7e77", "manifestDigest": "sha256:9cb7abe9a81ae92c62cc4ecbe7b4f65e7e76847fc222bbdb5ef8a2c5adff7e77", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-dev --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b22be1e08560f81ca4bd79772090e78ce5de18e3e19897af7962399350f33a0c", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:050fd7693478b4417bb3303c0f8faeaa47fc2a6a3393fac1d119f3932335dc6e", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/cc15-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/cc15-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/cc15-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/cc15-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/cc15-dev-arm64.test-results.json" } }, "catalogRecord": "images/cc15-dev.json" }, { "imageId": "cc15-distroless", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.12.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:eaf8d7b8f497b3d80798dc5cab07d97568af8bbcca72f8916548fe00ed1bcbb6", "manifestDigest": "sha256:eaf8d7b8f497b3d80798dc5cab07d97568af8bbcca72f8916548fe00ed1bcbb6", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-distroless --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:62fa629895d88d823cf8483d1285bca387fdecb3216a65663c8934ef9abf8111", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:44a12c6f1118fc9cd2e6c2c0c890c09a17be706acf182ec915a145eec188c0a4", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/cc15-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/cc15-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/cc15-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/cc15-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/cc15-distroless-arm64.test-results.json" } }, "catalogRecord": "images/cc15-distroless.json" }, { "imageId": "cc15-slim", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.12.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:2aa0db3e52f4e3f6f4861566bbe6fac755223e89fc0fe9170033c77a5acb0d1b", "manifestDigest": "sha256:2aa0db3e52f4e3f6f4861566bbe6fac755223e89fc0fe9170033c77a5acb0d1b", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-slim --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:41c10534ca2e0f9abe9fe30f5fa2fc3e578794907d82206635a05a45af89c671", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:208c8d3adf1e8ceaf621ec92111004998ffc5cb9fa671c7c1126a67a615b7bc1", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/cc15-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/cc15-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/cc15-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/cc15-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/cc15-slim-arm64.test-results.json" } }, "catalogRecord": "images/cc15-slim.json" }, { "imageId": "coreLTS-dev", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.12.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:1a2a6c95c0a1cb0b1e4bc7632524ba739fba0317c574689ab4080d2653ad893c", "manifestDigest": "sha256:1a2a6c95c0a1cb0b1e4bc7632524ba739fba0317c574689ab4080d2653ad893c", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-dev --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:2c33692b1362909ab1a0aa6f6996f5e49f3de26a648ee598dfaf8f0ede5201d1", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ab02aa6f77357e8ebbfbbd5cca353d22ff057fba95493d92cb57f28ca89ca325", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/coreLTS-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/coreLTS-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/coreLTS-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/coreLTS-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/coreLTS-dev-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-dev.json" }, { "imageId": "coreLTS-distroless", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.12.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:35cbd50837d84cc76461b18ab80a820e6294e65c7c4859412b5f1a1ea26a4a95", "manifestDigest": "sha256:35cbd50837d84cc76461b18ab80a820e6294e65c7c4859412b5f1a1ea26a4a95", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-distroless --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8483d70d0a15f2bbff1f050d0085b785a56db9d772c2cf12f1da8a6ef4b70f25", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:1ae6445f07f7a5c1ffe03849558300e871f53645f4b08a7513ca3d7e8cadf337", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/coreLTS-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/coreLTS-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/coreLTS-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/coreLTS-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/coreLTS-distroless-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-distroless.json" }, { "imageId": "coreLTS-slim", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.12.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:391b292a4058505fc5bd672926b57327611252263b3f8d9cde87575909e64b84", "manifestDigest": "sha256:391b292a4058505fc5bd672926b57327611252263b3f8d9cde87575909e64b84", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-slim --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5cb6d49b1eadef0ceee698757891729a916b872b9faf52342a055e4f1e636fe4", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:0159576e844555fd54f2c0be398b7fca46b3bf1c50a2341191a5ed9328cdcabf", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/coreLTS-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/coreLTS-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/coreLTS-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/coreLTS-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/coreLTS-slim-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-slim.json" }, { "imageId": "dotnet10-dev", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.12.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:c1f3243613704e3dbe351b14c706cb199b5645e4a0a8a4102a310504add1f7d5", "manifestDigest": "sha256:c1f3243613704e3dbe351b14c706cb199b5645e4a0a8a4102a310504add1f7d5", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-dev --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:7c696f61faf355f2b8f6ca4e97e01d1d7b94c3951ecaf9f986a3c12c6df7c2da", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:c55100a9f0584689bdfcd8e7bd54cdf8e6434204881087da6b4dbb11680bc50a", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet10-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet10-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet10-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet10-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet10-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-dev.json" }, { "imageId": "dotnet10-distroless", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.12.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:b8bfcf80eb3181975409618375ba503af23d3c4ff9720770c38f1d5a818d6434", "manifestDigest": "sha256:b8bfcf80eb3181975409618375ba503af23d3c4ff9720770c38f1d5a818d6434", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-distroless --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:45a97f933498b623123319b0ec300575ddb6230ec193e08670ee446e6847a085", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:02bb4e65b99ef224753e31e1fbf24959886e7d3af888bb2625cd7d2b119bb756", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet10-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet10-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet10-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet10-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet10-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-distroless.json" }, { "imageId": "dotnet10-slim", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.12.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:f7fab5132505849367ebd0cd5c20ca9d567370d9255970af38b174c0c016a5fe", "manifestDigest": "sha256:f7fab5132505849367ebd0cd5c20ca9d567370d9255970af38b174c0c016a5fe", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-slim --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:c39433cf6e9467fb41f90863e6647c63733f69a8c6fea830342b068c4364036a", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:616d404b7e42ee953172183e6061e7f5cf965c32faaa0b088ef96d98179d0e35", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet10-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet10-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet10-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet10-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet10-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-slim.json" }, { "imageId": "dotnet8-dev", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.12.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:2b163d3b6aa5e2d432f9a31dd3a624b78bf02c550ff3d08f561266d3eb4f77c7", "manifestDigest": "sha256:2b163d3b6aa5e2d432f9a31dd3a624b78bf02c550ff3d08f561266d3eb4f77c7", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-dev --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:082569ec61de2c16b724910dae833d1c1d879def1dfd39bfa648ff3dd8142644", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:d78f0d9ea7a321f412fe2d732c02a9c5a6e4b80103aa0b46c7dbd061c6945e27", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet8-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet8-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet8-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet8-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet8-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-dev.json" }, { "imageId": "dotnet8-distroless", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.12.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:53029022d2ba392527e3d4335e79d1e6b82c26a5928986ad97db606db8e6ed16", "manifestDigest": "sha256:53029022d2ba392527e3d4335e79d1e6b82c26a5928986ad97db606db8e6ed16", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-distroless --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d6cb695a6c45ff1e25bf97ccf895fa34efb61d95e719d391912c9efff529919a", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2f187c39852b7b108668215a85147a55d9c7b4e554f0cb04f01b8aeb6915330a", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet8-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet8-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet8-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet8-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet8-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-distroless.json" }, { "imageId": "dotnet8-slim", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.12.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:00d3b8c33c218d0c16fdae7f36b90591298f89aa66a5c656f78c08d650735fa1", "manifestDigest": "sha256:00d3b8c33c218d0c16fdae7f36b90591298f89aa66a5c656f78c08d650735fa1", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-slim --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:3e250a36661555a83af326aad52bb8a99faac29d07425be63e28b1f3c3ef441b", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:cd1c08fa675691f9106b3415b10612f11b676d80ec37868bc44196c179bad371", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet8-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet8-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet8-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet8-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/dotnet8-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-slim.json" }, { "imageId": "go1.25-dev", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.12.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:f5c550daf9e15f030413d3048f6c2f3807b77527b1c40409c38e3dd31e3e8813", "manifestDigest": "sha256:f5c550daf9e15f030413d3048f6c2f3807b77527b1c40409c38e3dd31e3e8813", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-dev --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8149648d993bad7d628f73a1d8d5294eb9564afdeba12148c8cb82e8febcb0d7", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:01cd17c3e9b158796c42f8b93162bbb4acfd617a529d0154d9760cdd06371c5f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.25-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-dev.json" }, { "imageId": "go1.25-distroless", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.12.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:2ef29bce3512131b18ebea7c8e9ae646274cc2c878c17c38dc945ae575b456ce", "manifestDigest": "sha256:2ef29bce3512131b18ebea7c8e9ae646274cc2c878c17c38dc945ae575b456ce", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-distroless --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:efac662c36dba47ef3ed6cbb6393986be33fb3fc755c85bd102d87cd5bd3226e", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ca00ce96f37f090d5c258af1a02ac439eb08a37453f15569403712611cfda097", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-distroless.json" }, { "imageId": "go1.25-slim", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.12.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:68a6d8bcd77ba991767d97add816ae81c4946ae9e79bf2d28fe3697ad6b45704", "manifestDigest": "sha256:68a6d8bcd77ba991767d97add816ae81c4946ae9e79bf2d28fe3697ad6b45704", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-slim --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d565f90475904c4463912160291e9187e7894b68bf16dab12e69deff357c7d25", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:c29648f24f7e90aeba1891d7b391fb254db889a27712bdfa3acb21a874cb1adb", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.25-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-slim.json" }, { "imageId": "go1.26-dev", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.12.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:4d64a934b4e50baad8f7bce0dfb5eed416f7d048c7ef9db7a2bab73cce7849ec", "manifestDigest": "sha256:4d64a934b4e50baad8f7bce0dfb5eed416f7d048c7ef9db7a2bab73cce7849ec", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-dev --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:7349cc7a47de15b265106bfa4211924a501a5abc9d7750f79c280a35266954b4", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:6f79d395c5f82ac37f209781d702d1ece88852929712acf0ded966b554536a50", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.26-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.26-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.26-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.26-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.26-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-dev.json" }, { "imageId": "go1.26-distroless", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.12.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:891782a227d1506358103016422659129d124ecc99adc0a62c14ddf017cc15ba", "manifestDigest": "sha256:891782a227d1506358103016422659129d124ecc99adc0a62c14ddf017cc15ba", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-distroless --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:c92bb583dd89f17cb6d8cdaf92bfbce2b2d6a035edc4ce85b469304436a8aca6", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:1a8b3b1258aa645169a6cd31503702413fcd973f01ccd78367affd36f6bb9569", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.26-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.26-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.26-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.26-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.26-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-distroless.json" }, { "imageId": "go1.26-slim", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.12.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:f075102aa2efaf56025a655f7d1ed69c9b2839eeec81978ace8b380897945406", "manifestDigest": "sha256:f075102aa2efaf56025a655f7d1ed69c9b2839eeec81978ace8b380897945406", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-slim --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:042694c6091296df3661e9a3fadbbedcd7d25a04c02b24e0013a9501ee0659c1", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:62eef5fd9e500b9af70ef2473adc1440171cea1ed05288f0b3f559d2317c3276", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.26-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.26-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.26-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.26-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/go1.26-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-slim.json" }, { "imageId": "java21-dev", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.12.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:9e7ac490808de645b84b73b3415f0a5f9a2e0ec4a716d298446d8c14e7d6ee9d", "manifestDigest": "sha256:9e7ac490808de645b84b73b3415f0a5f9a2e0ec4a716d298446d8c14e7d6ee9d", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-dev --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:849eef174ab009b17606ab964873120f584442e92676ccd08f411fdb6b4f726e", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9cd32670d2c219d54011d5057eb3c77b3a230e7689022c8eb47ccec607da2c91", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java21-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java21-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java21-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java21-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java21-dev-arm64.test-results.json" } }, "catalogRecord": "images/java21-dev.json" }, { "imageId": "java21-distroless", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.12.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:353c6b88621602d9c93558eb1634b4429e40ecc8e414d2373662339b6a2a0dba", "manifestDigest": "sha256:353c6b88621602d9c93558eb1634b4429e40ecc8e414d2373662339b6a2a0dba", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-distroless --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:6dd0c7e372bdcb47a7caed12e3211936b38da266724ec29e51e5964e63d28f08", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9cb95de1e00251874baff6573b9a9ed74015a9006de518429ef29b2b1f422ae4", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java21-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java21-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java21-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java21-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java21-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java21-distroless.json" }, { "imageId": "java21-slim", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.12.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:558cb5c5396a2dcb350cb0494abf54d718d36e08eb9adfa1af0e6efc889396e1", "manifestDigest": "sha256:558cb5c5396a2dcb350cb0494abf54d718d36e08eb9adfa1af0e6efc889396e1", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-slim --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:640f216558ea1d1961353613273c0d99ecef9b29520ae88eeefa6ae7f0f7bef3", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5ec7d8ecccff012bb402f8d0e2a3e94cd548af6544256755c92c7d8fbe8ba4aa", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java21-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java21-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java21-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java21-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java21-slim-arm64.test-results.json" } }, "catalogRecord": "images/java21-slim.json" }, { "imageId": "java25-dev", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.12.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:999787dc1e5cbc4521ed7f9caf636e5238d8adf1df8caa4bc1eb3cf10e4268cb", "manifestDigest": "sha256:999787dc1e5cbc4521ed7f9caf636e5238d8adf1df8caa4bc1eb3cf10e4268cb", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-dev --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:a7aae991b89173ecc0832503fa22b5baa17cdaed28855f27386438050b1995aa", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:b6e24da9772b69a9b34a213ba8aecead59e17996dfe6d5707c6b9a129268038f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java25-dev-arm64.test-results.json" } }, "catalogRecord": "images/java25-dev.json" }, { "imageId": "java25-distroless", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.12.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:7aa50310d78dce244b009318e4c3d1ffcdb74728a5621af7bd79a3fd950f89c1", "manifestDigest": "sha256:7aa50310d78dce244b009318e4c3d1ffcdb74728a5621af7bd79a3fd950f89c1", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-distroless --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:16ec533af5eac45b9f624cbc5cfa675679a0f14916c0c5e5f88de3deb757706f", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:98c95702f93a5c563c193147472c112ac18bedc7a067b346570469233c7138c5", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java25-distroless.json" }, { "imageId": "java25-slim", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.12.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:f81b919bb143b4a58c7457c201bc79e0ff7df0e7ced438905df461b1509e395e", "manifestDigest": "sha256:f81b919bb143b4a58c7457c201bc79e0ff7df0e7ced438905df461b1509e395e", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-slim --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:6e728ffbb4e23775405693869ab963a78f455bdc7afdf4e0e2de6b2e8d8178a0", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:f027c800dba4197f50243b483697484a1a60927c5c4b6fd97b251138421474e2", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/java25-slim-arm64.test-results.json" } }, "catalogRecord": "images/java25-slim.json" }, { "imageId": "node22-dev", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.12.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:5b986ca53292e219c5b7d29f9a84becbce3b49a49530acacf49ad966868bfad5", "manifestDigest": "sha256:5b986ca53292e219c5b7d29f9a84becbce3b49a49530acacf49ad966868bfad5", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-dev --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b1b7392380ec29813e72ab5f1972b02b17d6929c1adf1717ce94987acce25bee", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:03f9d484b627bb84cdc78634d57eacd2b59d147a296f77969b30ff2d2034d80f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node22-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node22-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node22-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node22-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node22-dev-arm64.test-results.json" } }, "catalogRecord": "images/node22-dev.json" }, { "imageId": "node22-distroless", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.12.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:46aafbfa1b47deccaebf6b173ad183791f14702dd099d287d2d70d49d751f3e8", "manifestDigest": "sha256:46aafbfa1b47deccaebf6b173ad183791f14702dd099d287d2d70d49d751f3e8", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-distroless --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:321d4918b9709819d9ab039bcecf62a103085cacb009c5d6d5fcb7046d16cff4", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:c4d0c605197b43a48a7576eac1f1c6fecd9d016c6c413e996ab6da7e4154b80f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node22-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node22-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node22-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node22-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node22-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node22-distroless.json" }, { "imageId": "node22-slim", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.12.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:d362855468f905ce680fe2a1849f370aa74342d4b0e8604a3840b83375fd8073", "manifestDigest": "sha256:d362855468f905ce680fe2a1849f370aa74342d4b0e8604a3840b83375fd8073", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-slim --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8b0dd0f75d719fbca2619201e0b1212afb6987aa2421c51c94c1ee537e092009", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:afde76ba0ccb28a69aa11a5d15a9c8dfad29f54c7ac6bed5b029e5d8664f7779", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node22-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node22-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node22-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node22-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node22-slim-arm64.test-results.json" } }, "catalogRecord": "images/node22-slim.json" }, { "imageId": "node24-dev", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.12.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:4ce8c74849fa5e5f556acfc7f8c9bac0ee2b8521729901f0e042e92fa477f812", "manifestDigest": "sha256:4ce8c74849fa5e5f556acfc7f8c9bac0ee2b8521729901f0e042e92fa477f812", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-dev --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:999e453f1567d4769068ee3d085a47276a53d6462eecb363b11467f5050492ce", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:22b42d30fde12ee6e366eeb0aae543c6ca9b4ce9ca6b9e7fb73081b13baed2a9", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node24-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node24-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node24-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node24-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node24-dev-arm64.test-results.json" } }, "catalogRecord": "images/node24-dev.json" }, { "imageId": "node24-distroless", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.12.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:725b4be5dc1defe526148475aa982ef3781fa36415121d4d4e59b456c5cc9bfb", "manifestDigest": "sha256:725b4be5dc1defe526148475aa982ef3781fa36415121d4d4e59b456c5cc9bfb", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-distroless --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d406ce610500e435cdf24857b4fa7cd6059a9c209be5c59424be8bd6054e22fa", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:034df6e4d7c9ace171e8fcae9718c37aa0f113a9dda2a78364294d153d9e5d30", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node24-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node24-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node24-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node24-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node24-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node24-distroless.json" }, { "imageId": "node24-slim", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.12.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:856e946bc0143d0a0239f0917163088112b2672d95587e99831f87a4d192d158", "manifestDigest": "sha256:856e946bc0143d0a0239f0917163088112b2672d95587e99831f87a4d192d158", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-slim --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b7d80a28c05774af4442df3e35670552dd2e48bccb168d760fc98536fd7b73da", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:d8a6f221e8965574f64b508c7fe7112f888ab89238cf76445e9b082a04bd8bbf", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node24-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node24-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node24-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node24-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/node24-slim-arm64.test-results.json" } }, "catalogRecord": "images/node24-slim.json" }, { "imageId": "oauth2-proxy7", "kind": "service", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7:v0.12.1", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7@sha256:368035026a824c7596eab27270f640e63a6d84e0c624856a3c04632e652fdfca", "manifestDigest": "sha256:368035026a824c7596eab27270f640e63a6d84e0c624856a3c04632e652fdfca", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex oauth2-proxy7 --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:39bfe95dcf38caf0dcf1f9badebfb7b3c3ca0d54ccb21727614a982aab28e4b2", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:acbeba15dc0046a8d16f2dd10344356a5066f3a5a9284ad0c59add8feb08aef1", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/oauth2-proxy7-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/oauth2-proxy7-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/oauth2-proxy7.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/oauth2-proxy7-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/oauth2-proxy7-arm64.test-results.json" } }, "catalogRecord": "images/oauth2-proxy7.json" }, { "imageId": "postgres16", "kind": "service", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16:v0.12.1", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16@sha256:5a358578029818448466d4e6584904f3c8c31542080c6bd3b1197304ce44b837", "manifestDigest": "sha256:5a358578029818448466d4e6584904f3c8c31542080c6bd3b1197304ce44b837", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex postgres16 --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5099df7b80049b59b1257ca60f872ab74b71d42c74d8aab8564be73c355bfb59", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:16426f7d0e3a18169175d5bbf810e9d94a7f6b4338676b5ebbcd48cebda29e8b", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/postgres16-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/postgres16-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/postgres16.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/postgres16-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/postgres16-arm64.test-results.json" } }, "catalogRecord": "images/postgres16.json" }, { "imageId": "python3.13-dev", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13:v0.12.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13@sha256:c7d921351b6336684c34870aa8526a646b79aeaafb03f148c7091f3dcba48a31", "manifestDigest": "sha256:c7d921351b6336684c34870aa8526a646b79aeaafb03f148c7091f3dcba48a31", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.13-dev --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8cb9826e42e08b88148dba25b95695dd610f2e18e2f7eacf715eef96c87e2229", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:73470d35f9b09b1fba886732f288be22961e4896e5712c97ac7c7415d15dfa79", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.13-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.13-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.13-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.13-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.13-dev-arm64.test-results.json" } }, "catalogRecord": "images/python3.13-dev.json" }, { "imageId": "python3.13-distroless", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13:v0.12.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13@sha256:010e3b2a669f0df11f6031c2e3a4867bc1ca617aae9034c44516593718621586", "manifestDigest": "sha256:010e3b2a669f0df11f6031c2e3a4867bc1ca617aae9034c44516593718621586", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.13-distroless --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:392bfce95140d0bd82e0d6cbab2b00044f303afef03952d78968132bdaca844f", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:08cccb62e4385cb428214ff1087bbf65146b9d14cac82a86b4420699a90db9cb", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.13-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.13-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.13-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.13-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.13-distroless-arm64.test-results.json" } }, "catalogRecord": "images/python3.13-distroless.json" }, { "imageId": "python3.13-slim", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13:v0.12.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.13@sha256:8869c5ac5407b3bec41b141aa9a02decaa6148c3f653547ed4aa25a2253293a5", "manifestDigest": "sha256:8869c5ac5407b3bec41b141aa9a02decaa6148c3f653547ed4aa25a2253293a5", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.13-slim --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:86057dd4bf744a53b88b82ae8b9d6780f71efb578b3e6c29260fdea31ae3f3c1", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:a2a0047a97119865c6a8dce2d5168782690aaf2617f599af04dc211a4f24c6db", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.13-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.13-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.13-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.13-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.13-slim-arm64.test-results.json" } }, "catalogRecord": "images/python3.13-slim.json" }, { "imageId": "python3.14-dev", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14:v0.12.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14@sha256:6278c133c3196fa7cb03485aa3be542a5eb84fb1bb293c09c13dd173a41ee2e7", "manifestDigest": "sha256:6278c133c3196fa7cb03485aa3be542a5eb84fb1bb293c09c13dd173a41ee2e7", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.14-dev --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e4d49cd80d5ed55c079e5bb80486e1b8cae46d0b069430f50688d056b1442803", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:63bb455fdd20bdb2103e7e901451bdf048c4dde74c7ee1bf5a8b7b4790237b25", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.14-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.14-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.14-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.14-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.14-dev-arm64.test-results.json" } }, "catalogRecord": "images/python3.14-dev.json" }, { "imageId": "python3.14-distroless", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14:v0.12.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14@sha256:2010f60e97dbd44d7435455cc63c53be8cce2e3540a71eadb462ed265d191b37", "manifestDigest": "sha256:2010f60e97dbd44d7435455cc63c53be8cce2e3540a71eadb462ed265d191b37", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.14-distroless --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:bd7cf4a81dc45cdca7bf9d95605e51c6f0f54c40bc4bc266d0460d2ca08520b0", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ed4168f31f688e4b8d6411df87d077c337473735367699446427b6376bd0219f", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.14-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.14-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.14-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.14-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.14-distroless-arm64.test-results.json" } }, "catalogRecord": "images/python3.14-distroless.json" }, { "imageId": "python3.14-slim", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14:v0.12.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-python3.14@sha256:9e80ee1205b337695e67dd7cae42920caebd223409bb7a696512a216fb3b3179", "manifestDigest": "sha256:9e80ee1205b337695e67dd7cae42920caebd223409bb7a696512a216fb3b3179", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex python3.14-slim --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:fbd4daca1cade9b1bb39643f4c842634992c12cd8c13570b16935fcfcf39c44b", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ccc9e80dcb0633a2f522b7e29174f800d333be4e432e5d28373101c74f690a15", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.14-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.14-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.14-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.14-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/python3.14-slim-arm64.test-results.json" } }, "catalogRecord": "images/python3.14-slim.json" }, { "imageId": "rust1.95-dev", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.12.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:c8f4c0cbe42782676d82cb6b9830a55fd8c9c662470c47aeba126feecfd0f762", "manifestDigest": "sha256:c8f4c0cbe42782676d82cb6b9830a55fd8c9c662470c47aeba126feecfd0f762", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-dev --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:51198d640930e71bd1d2a1e7e41d4f756cbed0440455b04d6b5b396dddb2d381", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:69484b5aa58eca36feea1a2574d27c9e4d4afe831e6b68d8de042d1da419edb6", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/rust1.95-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/rust1.95-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/rust1.95-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/rust1.95-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/rust1.95-dev-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-dev.json" }, { "imageId": "rust1.95-distroless", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.12.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:abf9dbb0e8e1c5b4562e287fb6ff1dfa818d1e4691e0d008949d6e1b4e68d83f", "manifestDigest": "sha256:abf9dbb0e8e1c5b4562e287fb6ff1dfa818d1e4691e0d008949d6e1b4e68d83f", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-distroless --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:dd1a081ca80ca3c68b899fe611e1e9113876856b54bec5012935e51aaecf2660", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:108f74ceca350599575732e8cfecc9a81f8ccc6fd15b3a251542f5ececbc4da6", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/rust1.95-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/rust1.95-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/rust1.95-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/rust1.95-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/rust1.95-distroless-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-distroless.json" }, { "imageId": "rust1.95-slim", "kind": "runtime", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.12.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:86c7234984a91026fb77a9a1877ccda267aa5098154477781a3378ff12da1d96", "manifestDigest": "sha256:86c7234984a91026fb77a9a1877ccda267aa5098154477781a3378ff12da1d96", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-slim --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:f25865ac6fd911e583ecb01ccd1b2cdb5cbdc7cbbb361b85738ae9d88323870b", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5f83476b334699382262869986003ba467978bab23fec2b42516ce23dbfdf9f3", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/rust1.95-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/rust1.95-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/rust1.95-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/rust1.95-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/rust1.95-slim-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-slim.json" }, { "imageId": "valkey8", "kind": "service", "tag": "v0.12.1", "publishedAt": "2026-07-04T13:08:58Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8:v0.12.1", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8@sha256:0ead819ffc06e5b9be97baf6b3182c5436f1f81ccd8820638e5994cb5516b270", "manifestDigest": "sha256:0ead819ffc06e5b9be97baf6b3182c5436f1f81ccd8820638e5994cb5516b270", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": true, "status": "observed", "source": "vulnerability-scan", "detail": "2/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex valkey8 --tag v0.12.1" } }, "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:a77605ad6ba60cf4da58cceaeafb7d23c598dd7d538b15066a39e05579665848", "sbom": true, "tests": true, "vulnerabilities": true }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:72f75ecb4daca1193529aa4e2c83cdb5794686aa732d32afe64ea160fff8f189", "sbom": true, "tests": true, "vulnerabilities": true } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "7211d7e03274c9fafb8c938942bb506671fc3448" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/valkey8-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/valkey8-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/valkey8.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/valkey8-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.12.1/valkey8-arm64.test-results.json" } }, "catalogRecord": "images/valkey8.json" }, { "imageId": "cc15-dev", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.11.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:296ad1a46cc0ffc3bf412b96948478e45219cca60e7cb65aa4b63a86014b451f", "manifestDigest": "sha256:296ad1a46cc0ffc3bf412b96948478e45219cca60e7cb65aa4b63a86014b451f", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-dev --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:4b6644530ee79d3e6adeeb20b787d9ccafb3a622a5c28b45fb5b7f60d3624f94", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:a2e96dbf38d8ceb7d88df082ac32a0a80c88a73f259ad9e948049243bf7eba29", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/cc15-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/cc15-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/cc15-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/cc15-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/cc15-dev-arm64.test-results.json" } }, "catalogRecord": "images/cc15-dev.json" }, { "imageId": "cc15-distroless", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.11.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:fdb70c268456e0e70e810cb6eebb497e3de7452275f12a5ab0094a4e030e53b4", "manifestDigest": "sha256:fdb70c268456e0e70e810cb6eebb497e3de7452275f12a5ab0094a4e030e53b4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-distroless --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:36ac030556d305a727a441cd71a383402864391154cc6afa6324a1a5607eb16a", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:a70f365093c12fa6590aea5ebc76469071dfd70620042d69f1ab4c61f327eb62", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/cc15-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/cc15-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/cc15-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/cc15-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/cc15-distroless-arm64.test-results.json" } }, "catalogRecord": "images/cc15-distroless.json" }, { "imageId": "cc15-slim", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.11.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:2443545ac80ed06b64510e375f8a0a1049caa2b82d077b644bc94d52a901fb59", "manifestDigest": "sha256:2443545ac80ed06b64510e375f8a0a1049caa2b82d077b644bc94d52a901fb59", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-slim --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e840b5fff165e34faeb6e72079f8a6861565fcd205bc7b3fe10d25cffefc53af", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ef8430c9b319270bc0bdcfd467264dfef668045a4f94eaf64e6ebeb29d20da1c", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/cc15-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/cc15-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/cc15-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/cc15-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/cc15-slim-arm64.test-results.json" } }, "catalogRecord": "images/cc15-slim.json" }, { "imageId": "coreLTS-dev", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.11.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:d1518af4c41e67ea42ebddf112df5a3e11af6c74a26a85dd2d503c506feab967", "manifestDigest": "sha256:d1518af4c41e67ea42ebddf112df5a3e11af6c74a26a85dd2d503c506feab967", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-dev --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e4f308acdc51749f4214d522bddf0da4ae12b653c575db67d28a2e22193fd76e", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5900f1d6f502dfb968006f9e249b719331731c38be038a7e8b1a728a40fe6b5e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/coreLTS-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/coreLTS-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/coreLTS-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/coreLTS-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/coreLTS-dev-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-dev.json" }, { "imageId": "coreLTS-distroless", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.11.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:4c168f1d69577db58690e4b98c91e7324ddf0348a630589f16bbb3770d98bb56", "manifestDigest": "sha256:4c168f1d69577db58690e4b98c91e7324ddf0348a630589f16bbb3770d98bb56", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-distroless --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:c430b0eb17a133c9a2b4a6e2bf374e665bae4d237ecf952d7ebd69841b291c8e", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:94ecdb7a894768cae00f80854bc3b478d31f3c4d58a463d796ba9c4b33e1c483", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/coreLTS-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/coreLTS-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/coreLTS-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/coreLTS-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/coreLTS-distroless-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-distroless.json" }, { "imageId": "coreLTS-slim", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.11.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:eae0f1c5c868f91349022e879b25c51d81bec9c48c9be07687384fc6f6fd42a4", "manifestDigest": "sha256:eae0f1c5c868f91349022e879b25c51d81bec9c48c9be07687384fc6f6fd42a4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-slim --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:6b7e8814f853dfe1d81e3e573a74327be77f7583de54a23d35676cb73b205b22", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:871917fa75107ad235936cffc9f654d57c71afcd6ab942b3d025b332f75fa39f", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/coreLTS-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/coreLTS-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/coreLTS-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/coreLTS-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/coreLTS-slim-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-slim.json" }, { "imageId": "dotnet10-dev", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.11.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:9deeef9837e14445a83cabcbf9c0f36e7125a8f5ab49b98ec667ece3dd256d1c", "manifestDigest": "sha256:9deeef9837e14445a83cabcbf9c0f36e7125a8f5ab49b98ec667ece3dd256d1c", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-dev --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:436403aaae172f2650f36a9048a54b6d03e1475aebd174343d8e5f7e387e5ae7", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:70e6514ef7955a3a5b2613fc9fbf56179583c6b1967f9824dca8947e336c1cfc", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet10-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet10-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet10-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet10-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet10-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-dev.json" }, { "imageId": "dotnet10-distroless", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.11.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:7e137992f601503efbb4afed61d5de1b7895d442b66214307002eea7e63d85a7", "manifestDigest": "sha256:7e137992f601503efbb4afed61d5de1b7895d442b66214307002eea7e63d85a7", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-distroless --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:fd17057d232f970ce6e2f320f2575917c0f59d89a4badcb04663bbb919896dea", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:034a9e281fcbd8d05468109acfc2d274878231d5952aa0042282640318178ac3", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet10-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet10-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet10-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet10-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet10-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-distroless.json" }, { "imageId": "dotnet10-slim", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.11.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:d57ec0d3c18b26b7fbb33660a579d3adb9addb16e182f0ff48933ed1c4960117", "manifestDigest": "sha256:d57ec0d3c18b26b7fbb33660a579d3adb9addb16e182f0ff48933ed1c4960117", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-slim --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:78b85c438a1bdc1be82d709d1bc9f9eb49ef6baee32ce0914963e5586be3c67a", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:006e12f96f381b9fcfff8492baf6608a510fd9e67060e5185a4232caa16f7d10", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet10-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet10-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet10-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet10-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet10-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-slim.json" }, { "imageId": "dotnet8-dev", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.11.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:274982751d65f8bcaf161bac80d2ee2eb112e29beb144443d10de45ab0b1f225", "manifestDigest": "sha256:274982751d65f8bcaf161bac80d2ee2eb112e29beb144443d10de45ab0b1f225", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-dev --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b3a794ff0585b81c703da1d3d6a0427e4fcc45d367b64dae9f0d84c49e8630a5", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e6188e1f86079c12892dcbe3a1f59ad38d12a0d049b4d5335cce8c45d602b711", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet8-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet8-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet8-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet8-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet8-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-dev.json" }, { "imageId": "dotnet8-distroless", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.11.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:98a2e44cecf305e63260865ba4e470c9a0214de67c4d16a41a117fc0f3529f91", "manifestDigest": "sha256:98a2e44cecf305e63260865ba4e470c9a0214de67c4d16a41a117fc0f3529f91", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-distroless --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8eba388bb6cc4ea9fcc0cc0c5e7375d180af9a3922dc8bf5ea153507e92cb7f8", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:49f496f666b0be5deb7a40dc2cd02839f0a5f28728148da3c8ad0ecee95656fe", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet8-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet8-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet8-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet8-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet8-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-distroless.json" }, { "imageId": "dotnet8-slim", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.11.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:65664c1e7ace52ba1e2164b167d76e7cf36d7c38affa348650b8a759b5119a1d", "manifestDigest": "sha256:65664c1e7ace52ba1e2164b167d76e7cf36d7c38affa348650b8a759b5119a1d", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-slim --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:31035adcbb1c5d5e89b9fc32bbebf708944601c94c958a042651efa7652197bd", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:b372dba5cd64be20f39fcdef980406bc18e9be7ed657a52f63ccae722b992ef3", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet8-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet8-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet8-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet8-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/dotnet8-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-slim.json" }, { "imageId": "go1.25-dev", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.11.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:4880379b55f9c9677add9ac7bb4203c3ffff3a3f805bd299e74229cb8346d5dd", "manifestDigest": "sha256:4880379b55f9c9677add9ac7bb4203c3ffff3a3f805bd299e74229cb8346d5dd", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-dev --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:bb27dbadb92d912f9aa21249cd6db3544d569dba2ae279440058b2c397c5396a", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:55b74da025d9b33477fd4f8696500cdf9a2668a450f43be6bfa01533b10df271", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.25-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-dev.json" }, { "imageId": "go1.25-distroless", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.11.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:bacfd48d982a4944ea23afbc4ed3ff594d4af6958d41027be59738d78a25f4c4", "manifestDigest": "sha256:bacfd48d982a4944ea23afbc4ed3ff594d4af6958d41027be59738d78a25f4c4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-distroless --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:749f70bf7925a1a37a678b58396ad64449b103e53637e873d04a657c33766b35", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:91d06b3e58a74843988d5f55082f16458cc66427687195a079af823cc5481924", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-distroless.json" }, { "imageId": "go1.25-slim", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.11.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:4d9b0aab70a78f97313b5218b3530035dbea1229814001cb6e56d01f4f011d50", "manifestDigest": "sha256:4d9b0aab70a78f97313b5218b3530035dbea1229814001cb6e56d01f4f011d50", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-slim --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:a7c4a482593e866901ef583c18bea2d9a3f95882a8d0c246747a81b92e99a94e", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:d9176320cb1efc2ce25364ee997f4b3c1f74f342556e92a24d9bc522d090373a", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.25-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-slim.json" }, { "imageId": "go1.26-dev", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.11.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:c05c9220ae774a448b9a8ab3586f3f26ecb965dc58978d6211a9d89062632ed3", "manifestDigest": "sha256:c05c9220ae774a448b9a8ab3586f3f26ecb965dc58978d6211a9d89062632ed3", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-dev --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:339aa634631dd2b07bc4c52f378c036ff5bff7a5bdf18ad7ec55e5df0d563d7e", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:15350c36131bd71721539beb2691318230de56b5e45a3d028b07629f49c3c665", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.26-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.26-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.26-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.26-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.26-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-dev.json" }, { "imageId": "go1.26-distroless", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.11.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:9eb76fdabd60c6f736c6a5a8b9e5cb9822d8d6d9a9ffaa2d8b5c6f387402095f", "manifestDigest": "sha256:9eb76fdabd60c6f736c6a5a8b9e5cb9822d8d6d9a9ffaa2d8b5c6f387402095f", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-distroless --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:0cf4b11be0836f3bc4e63469ccb39b96aa03ba7a376fd3c63fe5904f6fba4e1d", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9104929151e1db1691697579f5a6f51e3d257dfcdb804b0250bb4b1d36adb677", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.26-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.26-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.26-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.26-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.26-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-distroless.json" }, { "imageId": "go1.26-slim", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.11.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:948cee70bcbf6eb6f619cd79160ecab615f85240e89673ded32c981aabecfa50", "manifestDigest": "sha256:948cee70bcbf6eb6f619cd79160ecab615f85240e89673ded32c981aabecfa50", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-slim --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:74dfbb1ba3099e439094c0b4b91fe867d2eb2a4688c12e88098337d7cc018e74", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:17cb1a63946bb85b3bbbcddfdcaa1ca762e4898cf5589bb6f9c54c71bc0b3d05", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.26-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.26-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.26-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.26-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/go1.26-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-slim.json" }, { "imageId": "java21-dev", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.11.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:67ef33155eaea7bc4d0c7ff3496ddf064614ecbe6515217799e2f212914b310d", "manifestDigest": "sha256:67ef33155eaea7bc4d0c7ff3496ddf064614ecbe6515217799e2f212914b310d", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-dev --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:05472314a1e96d51ffb5014f76382e58cb89e49f44a9f1b8fda277efcac4f735", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:a108888baa2a5cf2bfa046ff69e511fb2d574b1a4b8c15a9a452000359dacf22", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java21-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java21-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java21-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java21-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java21-dev-arm64.test-results.json" } }, "catalogRecord": "images/java21-dev.json" }, { "imageId": "java21-distroless", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.11.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:9454df256ac23319ecacdd260f25632dbafbe36527a8a7350b4a25d0fefa48aa", "manifestDigest": "sha256:9454df256ac23319ecacdd260f25632dbafbe36527a8a7350b4a25d0fefa48aa", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-distroless --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d8ee026ccfb5a26386d64103d6a448bc61ae2edb1f688a24d9433ca7acf8a886", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:579a4944d1d5132be7694759498dfbdcfe22f809cbdc420941636e373b34face", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java21-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java21-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java21-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java21-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java21-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java21-distroless.json" }, { "imageId": "java21-slim", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.11.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:6332e6288e3fcd050d586c3b0a1eb842b5d2504ef23c776fb5d0fac1a372e481", "manifestDigest": "sha256:6332e6288e3fcd050d586c3b0a1eb842b5d2504ef23c776fb5d0fac1a372e481", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-slim --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:01a6fa715babbd8542e13d0a6aa17a1e103190822185fa42741547f5bd710dc7", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:a67228b985c74a0165bb1f3299a14bbd449636b6537d7e57e073fea75171a97a", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java21-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java21-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java21-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java21-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java21-slim-arm64.test-results.json" } }, "catalogRecord": "images/java21-slim.json" }, { "imageId": "java25-dev", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.11.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:9c299b45b471a97c909957dc4f79f21b2d3565c947c8586f489cb2dfd0ebfc7f", "manifestDigest": "sha256:9c299b45b471a97c909957dc4f79f21b2d3565c947c8586f489cb2dfd0ebfc7f", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-dev --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:98629f6f57d0fcc469c64ffcc1b6276960b3ed323f941226b6422a3fa0e5b90a", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:d1244ec2f5365481bbda5c0261d3dd3bb843d6b667689b4c8aca69c1f5face67", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java25-dev-arm64.test-results.json" } }, "catalogRecord": "images/java25-dev.json" }, { "imageId": "java25-distroless", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.11.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:45b0cab11afe7b58f1e8aa70326d4eb8aeeba0e478216296ce3a59182e433dfd", "manifestDigest": "sha256:45b0cab11afe7b58f1e8aa70326d4eb8aeeba0e478216296ce3a59182e433dfd", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-distroless --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8c14d4ce8eb1b21ee574d9d0cf077a564917d0298e3a428fc4a7c9202ac22765", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9a4b26387a07f4f6da713399d2fe1879d8bfbb59d2b12db1fa55f5aa329a3e2c", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java25-distroless.json" }, { "imageId": "java25-slim", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.11.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:e3cba0708f2898c004e9e750197b821fa3b719b9fcd724413283b037c2fe3eba", "manifestDigest": "sha256:e3cba0708f2898c004e9e750197b821fa3b719b9fcd724413283b037c2fe3eba", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-slim --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:fe413ec29a94cad351e5f87eca5cdb0d8cbc8ad3a64ae9f8e4509f1e742d25e3", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:32ce8a7b9f07092bd94feda3d69823818081fdd5ae223798d7e90f2af7331bcf", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/java25-slim-arm64.test-results.json" } }, "catalogRecord": "images/java25-slim.json" }, { "imageId": "node22-dev", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.11.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:14cb54e6ff39f0af91dbc338585b33b24af0d53d4837cd8dbb6eb331645f5556", "manifestDigest": "sha256:14cb54e6ff39f0af91dbc338585b33b24af0d53d4837cd8dbb6eb331645f5556", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-dev --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:dff328a6fe97a9d6b72c99c88796a336f1572d74adbb8c33ef8ca8c7453a2aca", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5b802676c5787a8270274e41115ba27d7e15ffd7bc2d7e92fa1071a5ea188fec", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node22-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node22-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node22-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node22-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node22-dev-arm64.test-results.json" } }, "catalogRecord": "images/node22-dev.json" }, { "imageId": "node22-distroless", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.11.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:d81c2307747fab490436297f527e29a787979d3f7ebb7f21a263f08c59062531", "manifestDigest": "sha256:d81c2307747fab490436297f527e29a787979d3f7ebb7f21a263f08c59062531", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-distroless --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:224d52c0bdc9f1a5063d19a8f128c713ea20eb40ac7180b28fba3986d3680d8e", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:c5f12189115853d508ac82832d29891b4a53919e94403135804725991fd913db", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node22-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node22-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node22-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node22-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node22-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node22-distroless.json" }, { "imageId": "node22-slim", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.11.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:8c386133a8bade5c645dd6accafe304eac25049618954aa2a959b031640bc28b", "manifestDigest": "sha256:8c386133a8bade5c645dd6accafe304eac25049618954aa2a959b031640bc28b", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-slim --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:ac057d5ccd565565ffb98c270aa98826053d204bcc71c8eaeb8289f32f172e64", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:cf89cc4e0002a6087bf6c5e2d34f1aac97dc322cdf0106077f4492167532e486", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node22-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node22-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node22-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node22-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node22-slim-arm64.test-results.json" } }, "catalogRecord": "images/node22-slim.json" }, { "imageId": "node24-dev", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.11.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:f9226ed74156fd7a82bb28c00011c363afd44a373110b60ffd63316c89fa41e1", "manifestDigest": "sha256:f9226ed74156fd7a82bb28c00011c363afd44a373110b60ffd63316c89fa41e1", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-dev --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:95e5f82c4c54a2b4e3d6dd9734ebc2a4bf8b17f7a02493ed5fe67f5ecc1b8c52", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:3a3f30785aef0e5c43b81875787dfa762a1cf7685f6fef71c2d5807db077352b", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node24-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node24-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node24-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node24-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node24-dev-arm64.test-results.json" } }, "catalogRecord": "images/node24-dev.json" }, { "imageId": "node24-distroless", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.11.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:5c411682f3942a58f09039096b60c5fcae6b394c25880ed38686057e2a0877ed", "manifestDigest": "sha256:5c411682f3942a58f09039096b60c5fcae6b394c25880ed38686057e2a0877ed", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-distroless --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e2b27ea121c23ead44cde7702e276e9791ff02b2d4a05a35a797093e6cfca598", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:3f61d604cd55c66fafad3d5881da3d0a80de93e9e3423178ca5a7f306d1490ed", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node24-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node24-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node24-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node24-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node24-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node24-distroless.json" }, { "imageId": "node24-slim", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.11.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:f4dcf93f77ea9df65fe374fb5001de2d4ab969d2ee613f908ceab9b248311340", "manifestDigest": "sha256:f4dcf93f77ea9df65fe374fb5001de2d4ab969d2ee613f908ceab9b248311340", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-slim --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:a12cbf8ae53439540d752ff00c4efa0bb471386ff4b0c76d0b918ad4fe589a2f", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2e691f952ea17cfa67c043e5d501d0e786e419233c51980414c2d4179af2cd38", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node24-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node24-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node24-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node24-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/node24-slim-arm64.test-results.json" } }, "catalogRecord": "images/node24-slim.json" }, { "imageId": "oauth2-proxy7", "kind": "service", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7:v0.11.1", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7@sha256:5dfbb135e4a72d3e2a8310a6a2eeaa9de1538097c2e66f79fb9cb61f67cbfae6", "manifestDigest": "sha256:5dfbb135e4a72d3e2a8310a6a2eeaa9de1538097c2e66f79fb9cb61f67cbfae6", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex oauth2-proxy7 --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e545fa93f571b45beeff0adba15c20b37f52441ca60fd20ee6161ee948f7a8a4", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:29bf1c602f25a014a79465277b858bae93f122bcf2aa378684eaded7c066f27e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/oauth2-proxy7-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/oauth2-proxy7-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/oauth2-proxy7.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/oauth2-proxy7-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/oauth2-proxy7-arm64.test-results.json" } }, "catalogRecord": "images/oauth2-proxy7.json" }, { "imageId": "postgres16", "kind": "service", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16:v0.11.1", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16@sha256:a40748442965a99ff68a0f479e5dcd08ff6ec8a484ecee10482c2f445e073385", "manifestDigest": "sha256:a40748442965a99ff68a0f479e5dcd08ff6ec8a484ecee10482c2f445e073385", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex postgres16 --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:42e2ac6132acc3dd433a92904451dc76644907c000c5efe693d565d0b2c038f4", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:dd850ffe4e5d37915469eaeef4d93e255edaac6e1e4f1f334a7bcbcda04cb375", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/postgres16-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/postgres16-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/postgres16.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/postgres16-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/postgres16-arm64.test-results.json" } }, "catalogRecord": "images/postgres16.json" }, { "imageId": "rust1.95-dev", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.11.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:86275ab241c4dcda02a9c100e401f9d0ca3e763a0d00449f2532723d470cfff8", "manifestDigest": "sha256:86275ab241c4dcda02a9c100e401f9d0ca3e763a0d00449f2532723d470cfff8", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-dev --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:14d6f6dbc09117c81fecd8bb9f3c3134962f657480f37a34f2f14d05dc565e0e", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ef78773c1669a9c7a196f8b36e343e9d1665cf5c83c151d2e0cc221fea5a7610", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/rust1.95-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/rust1.95-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/rust1.95-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/rust1.95-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/rust1.95-dev-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-dev.json" }, { "imageId": "rust1.95-distroless", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.11.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:630a40aba2e73abc7b1ebb85b2a08a5ef26b830f31c88cfdd2933afce762a9ba", "manifestDigest": "sha256:630a40aba2e73abc7b1ebb85b2a08a5ef26b830f31c88cfdd2933afce762a9ba", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-distroless --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:9be8f501b6a1d096b024e07e7bde5914c261f741504b2e4bd9cc71a19b574d74", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ab6bca2e5eb0b217d057a123e5aaa3073ff7e4499764ce2d40f3c078ba44d74e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/rust1.95-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/rust1.95-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/rust1.95-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/rust1.95-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/rust1.95-distroless-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-distroless.json" }, { "imageId": "rust1.95-slim", "kind": "runtime", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.11.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:ffbb63f51c387af1b59767bb33f9d1b3056c39268b7b36e6e13444e409f6d314", "manifestDigest": "sha256:ffbb63f51c387af1b59767bb33f9d1b3056c39268b7b36e6e13444e409f6d314", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-slim --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d86b3b34952dfbcf58b1805e05459bf12e4fbf2233abf2cd49722e133e7bf3da", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e8be1618c2c3d68837d9373152dc96dde55b6c97a9e3745de142013399c518dd", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/rust1.95-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/rust1.95-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/rust1.95-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/rust1.95-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/rust1.95-slim-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-slim.json" }, { "imageId": "valkey8", "kind": "service", "tag": "v0.11.1", "publishedAt": "2026-06-10T02:52:21Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8:v0.11.1", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8@sha256:16c7fa35b1f9c916430012530135721d609839304ab2cac52acf9fcc54fcc36b", "manifestDigest": "sha256:16c7fa35b1f9c916430012530135721d609839304ab2cac52acf9fcc54fcc36b", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex valkey8 --tag v0.11.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5a37faf44ee8da1bd2f602306d991a479f16ff5eeac249b84cdf79619b027ca8", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5715b2b0ad5b0839b59a87741a512ad5f4fc719096a230bb13ad37367fe0872b", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/valkey8-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/valkey8-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/valkey8.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/valkey8-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.1/valkey8-arm64.test-results.json" } }, "catalogRecord": "images/valkey8.json" }, { "imageId": "cc15-dev", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.11.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:296ad1a46cc0ffc3bf412b96948478e45219cca60e7cb65aa4b63a86014b451f", "manifestDigest": "sha256:296ad1a46cc0ffc3bf412b96948478e45219cca60e7cb65aa4b63a86014b451f", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-dev --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:4b6644530ee79d3e6adeeb20b787d9ccafb3a622a5c28b45fb5b7f60d3624f94", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:a2e96dbf38d8ceb7d88df082ac32a0a80c88a73f259ad9e948049243bf7eba29", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/cc15-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/cc15-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/cc15-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/cc15-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/cc15-dev-arm64.test-results.json" } }, "catalogRecord": "images/cc15-dev.json" }, { "imageId": "cc15-distroless", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.11.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:fdb70c268456e0e70e810cb6eebb497e3de7452275f12a5ab0094a4e030e53b4", "manifestDigest": "sha256:fdb70c268456e0e70e810cb6eebb497e3de7452275f12a5ab0094a4e030e53b4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-distroless --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:36ac030556d305a727a441cd71a383402864391154cc6afa6324a1a5607eb16a", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:a70f365093c12fa6590aea5ebc76469071dfd70620042d69f1ab4c61f327eb62", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/cc15-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/cc15-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/cc15-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/cc15-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/cc15-distroless-arm64.test-results.json" } }, "catalogRecord": "images/cc15-distroless.json" }, { "imageId": "cc15-slim", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.11.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:2443545ac80ed06b64510e375f8a0a1049caa2b82d077b644bc94d52a901fb59", "manifestDigest": "sha256:2443545ac80ed06b64510e375f8a0a1049caa2b82d077b644bc94d52a901fb59", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-slim --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e840b5fff165e34faeb6e72079f8a6861565fcd205bc7b3fe10d25cffefc53af", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ef8430c9b319270bc0bdcfd467264dfef668045a4f94eaf64e6ebeb29d20da1c", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/cc15-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/cc15-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/cc15-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/cc15-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/cc15-slim-arm64.test-results.json" } }, "catalogRecord": "images/cc15-slim.json" }, { "imageId": "coreLTS-dev", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.11.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:d1518af4c41e67ea42ebddf112df5a3e11af6c74a26a85dd2d503c506feab967", "manifestDigest": "sha256:d1518af4c41e67ea42ebddf112df5a3e11af6c74a26a85dd2d503c506feab967", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-dev --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e4f308acdc51749f4214d522bddf0da4ae12b653c575db67d28a2e22193fd76e", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5900f1d6f502dfb968006f9e249b719331731c38be038a7e8b1a728a40fe6b5e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/coreLTS-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/coreLTS-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/coreLTS-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/coreLTS-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/coreLTS-dev-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-dev.json" }, { "imageId": "coreLTS-distroless", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.11.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:4c168f1d69577db58690e4b98c91e7324ddf0348a630589f16bbb3770d98bb56", "manifestDigest": "sha256:4c168f1d69577db58690e4b98c91e7324ddf0348a630589f16bbb3770d98bb56", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-distroless --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:c430b0eb17a133c9a2b4a6e2bf374e665bae4d237ecf952d7ebd69841b291c8e", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:94ecdb7a894768cae00f80854bc3b478d31f3c4d58a463d796ba9c4b33e1c483", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/coreLTS-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/coreLTS-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/coreLTS-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/coreLTS-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/coreLTS-distroless-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-distroless.json" }, { "imageId": "coreLTS-slim", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.11.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:eae0f1c5c868f91349022e879b25c51d81bec9c48c9be07687384fc6f6fd42a4", "manifestDigest": "sha256:eae0f1c5c868f91349022e879b25c51d81bec9c48c9be07687384fc6f6fd42a4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-slim --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:6b7e8814f853dfe1d81e3e573a74327be77f7583de54a23d35676cb73b205b22", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:871917fa75107ad235936cffc9f654d57c71afcd6ab942b3d025b332f75fa39f", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/coreLTS-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/coreLTS-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/coreLTS-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/coreLTS-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/coreLTS-slim-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-slim.json" }, { "imageId": "dotnet10-dev", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.11.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:9deeef9837e14445a83cabcbf9c0f36e7125a8f5ab49b98ec667ece3dd256d1c", "manifestDigest": "sha256:9deeef9837e14445a83cabcbf9c0f36e7125a8f5ab49b98ec667ece3dd256d1c", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-dev --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:436403aaae172f2650f36a9048a54b6d03e1475aebd174343d8e5f7e387e5ae7", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:70e6514ef7955a3a5b2613fc9fbf56179583c6b1967f9824dca8947e336c1cfc", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet10-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet10-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet10-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet10-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet10-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-dev.json" }, { "imageId": "dotnet10-distroless", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.11.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:7e137992f601503efbb4afed61d5de1b7895d442b66214307002eea7e63d85a7", "manifestDigest": "sha256:7e137992f601503efbb4afed61d5de1b7895d442b66214307002eea7e63d85a7", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-distroless --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:fd17057d232f970ce6e2f320f2575917c0f59d89a4badcb04663bbb919896dea", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:034a9e281fcbd8d05468109acfc2d274878231d5952aa0042282640318178ac3", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet10-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet10-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet10-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet10-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet10-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-distroless.json" }, { "imageId": "dotnet10-slim", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.11.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:d57ec0d3c18b26b7fbb33660a579d3adb9addb16e182f0ff48933ed1c4960117", "manifestDigest": "sha256:d57ec0d3c18b26b7fbb33660a579d3adb9addb16e182f0ff48933ed1c4960117", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-slim --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:78b85c438a1bdc1be82d709d1bc9f9eb49ef6baee32ce0914963e5586be3c67a", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:006e12f96f381b9fcfff8492baf6608a510fd9e67060e5185a4232caa16f7d10", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet10-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet10-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet10-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet10-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet10-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-slim.json" }, { "imageId": "dotnet8-dev", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.11.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:274982751d65f8bcaf161bac80d2ee2eb112e29beb144443d10de45ab0b1f225", "manifestDigest": "sha256:274982751d65f8bcaf161bac80d2ee2eb112e29beb144443d10de45ab0b1f225", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-dev --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b3a794ff0585b81c703da1d3d6a0427e4fcc45d367b64dae9f0d84c49e8630a5", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e6188e1f86079c12892dcbe3a1f59ad38d12a0d049b4d5335cce8c45d602b711", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet8-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet8-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet8-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet8-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet8-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-dev.json" }, { "imageId": "dotnet8-distroless", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.11.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:98a2e44cecf305e63260865ba4e470c9a0214de67c4d16a41a117fc0f3529f91", "manifestDigest": "sha256:98a2e44cecf305e63260865ba4e470c9a0214de67c4d16a41a117fc0f3529f91", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-distroless --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8eba388bb6cc4ea9fcc0cc0c5e7375d180af9a3922dc8bf5ea153507e92cb7f8", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:49f496f666b0be5deb7a40dc2cd02839f0a5f28728148da3c8ad0ecee95656fe", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet8-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet8-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet8-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet8-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet8-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-distroless.json" }, { "imageId": "dotnet8-slim", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.11.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:65664c1e7ace52ba1e2164b167d76e7cf36d7c38affa348650b8a759b5119a1d", "manifestDigest": "sha256:65664c1e7ace52ba1e2164b167d76e7cf36d7c38affa348650b8a759b5119a1d", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-slim --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:31035adcbb1c5d5e89b9fc32bbebf708944601c94c958a042651efa7652197bd", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:b372dba5cd64be20f39fcdef980406bc18e9be7ed657a52f63ccae722b992ef3", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet8-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet8-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet8-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet8-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/dotnet8-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-slim.json" }, { "imageId": "go1.25-dev", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.11.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:4880379b55f9c9677add9ac7bb4203c3ffff3a3f805bd299e74229cb8346d5dd", "manifestDigest": "sha256:4880379b55f9c9677add9ac7bb4203c3ffff3a3f805bd299e74229cb8346d5dd", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-dev --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:bb27dbadb92d912f9aa21249cd6db3544d569dba2ae279440058b2c397c5396a", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:55b74da025d9b33477fd4f8696500cdf9a2668a450f43be6bfa01533b10df271", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.25-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-dev.json" }, { "imageId": "go1.25-distroless", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.11.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:bacfd48d982a4944ea23afbc4ed3ff594d4af6958d41027be59738d78a25f4c4", "manifestDigest": "sha256:bacfd48d982a4944ea23afbc4ed3ff594d4af6958d41027be59738d78a25f4c4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-distroless --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:749f70bf7925a1a37a678b58396ad64449b103e53637e873d04a657c33766b35", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:91d06b3e58a74843988d5f55082f16458cc66427687195a079af823cc5481924", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-distroless.json" }, { "imageId": "go1.25-slim", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.11.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:4d9b0aab70a78f97313b5218b3530035dbea1229814001cb6e56d01f4f011d50", "manifestDigest": "sha256:4d9b0aab70a78f97313b5218b3530035dbea1229814001cb6e56d01f4f011d50", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-slim --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:a7c4a482593e866901ef583c18bea2d9a3f95882a8d0c246747a81b92e99a94e", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:d9176320cb1efc2ce25364ee997f4b3c1f74f342556e92a24d9bc522d090373a", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.25-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-slim.json" }, { "imageId": "go1.26-dev", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.11.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:c05c9220ae774a448b9a8ab3586f3f26ecb965dc58978d6211a9d89062632ed3", "manifestDigest": "sha256:c05c9220ae774a448b9a8ab3586f3f26ecb965dc58978d6211a9d89062632ed3", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-dev --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:339aa634631dd2b07bc4c52f378c036ff5bff7a5bdf18ad7ec55e5df0d563d7e", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:15350c36131bd71721539beb2691318230de56b5e45a3d028b07629f49c3c665", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.26-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.26-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.26-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.26-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.26-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-dev.json" }, { "imageId": "go1.26-distroless", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.11.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:9eb76fdabd60c6f736c6a5a8b9e5cb9822d8d6d9a9ffaa2d8b5c6f387402095f", "manifestDigest": "sha256:9eb76fdabd60c6f736c6a5a8b9e5cb9822d8d6d9a9ffaa2d8b5c6f387402095f", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-distroless --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:0cf4b11be0836f3bc4e63469ccb39b96aa03ba7a376fd3c63fe5904f6fba4e1d", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9104929151e1db1691697579f5a6f51e3d257dfcdb804b0250bb4b1d36adb677", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.26-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.26-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.26-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.26-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.26-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-distroless.json" }, { "imageId": "go1.26-slim", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.11.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:948cee70bcbf6eb6f619cd79160ecab615f85240e89673ded32c981aabecfa50", "manifestDigest": "sha256:948cee70bcbf6eb6f619cd79160ecab615f85240e89673ded32c981aabecfa50", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-slim --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:74dfbb1ba3099e439094c0b4b91fe867d2eb2a4688c12e88098337d7cc018e74", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:17cb1a63946bb85b3bbbcddfdcaa1ca762e4898cf5589bb6f9c54c71bc0b3d05", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.26-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.26-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.26-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.26-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/go1.26-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-slim.json" }, { "imageId": "java21-dev", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.11.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:67ef33155eaea7bc4d0c7ff3496ddf064614ecbe6515217799e2f212914b310d", "manifestDigest": "sha256:67ef33155eaea7bc4d0c7ff3496ddf064614ecbe6515217799e2f212914b310d", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-dev --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:05472314a1e96d51ffb5014f76382e58cb89e49f44a9f1b8fda277efcac4f735", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:a108888baa2a5cf2bfa046ff69e511fb2d574b1a4b8c15a9a452000359dacf22", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java21-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java21-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java21-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java21-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java21-dev-arm64.test-results.json" } }, "catalogRecord": "images/java21-dev.json" }, { "imageId": "java21-distroless", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.11.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:9454df256ac23319ecacdd260f25632dbafbe36527a8a7350b4a25d0fefa48aa", "manifestDigest": "sha256:9454df256ac23319ecacdd260f25632dbafbe36527a8a7350b4a25d0fefa48aa", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-distroless --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d8ee026ccfb5a26386d64103d6a448bc61ae2edb1f688a24d9433ca7acf8a886", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:579a4944d1d5132be7694759498dfbdcfe22f809cbdc420941636e373b34face", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java21-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java21-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java21-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java21-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java21-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java21-distroless.json" }, { "imageId": "java21-slim", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.11.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:6332e6288e3fcd050d586c3b0a1eb842b5d2504ef23c776fb5d0fac1a372e481", "manifestDigest": "sha256:6332e6288e3fcd050d586c3b0a1eb842b5d2504ef23c776fb5d0fac1a372e481", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-slim --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:01a6fa715babbd8542e13d0a6aa17a1e103190822185fa42741547f5bd710dc7", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:a67228b985c74a0165bb1f3299a14bbd449636b6537d7e57e073fea75171a97a", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java21-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java21-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java21-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java21-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java21-slim-arm64.test-results.json" } }, "catalogRecord": "images/java21-slim.json" }, { "imageId": "java25-dev", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.11.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:9c299b45b471a97c909957dc4f79f21b2d3565c947c8586f489cb2dfd0ebfc7f", "manifestDigest": "sha256:9c299b45b471a97c909957dc4f79f21b2d3565c947c8586f489cb2dfd0ebfc7f", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-dev --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:98629f6f57d0fcc469c64ffcc1b6276960b3ed323f941226b6422a3fa0e5b90a", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:d1244ec2f5365481bbda5c0261d3dd3bb843d6b667689b4c8aca69c1f5face67", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java25-dev-arm64.test-results.json" } }, "catalogRecord": "images/java25-dev.json" }, { "imageId": "java25-distroless", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.11.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:45b0cab11afe7b58f1e8aa70326d4eb8aeeba0e478216296ce3a59182e433dfd", "manifestDigest": "sha256:45b0cab11afe7b58f1e8aa70326d4eb8aeeba0e478216296ce3a59182e433dfd", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-distroless --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8c14d4ce8eb1b21ee574d9d0cf077a564917d0298e3a428fc4a7c9202ac22765", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9a4b26387a07f4f6da713399d2fe1879d8bfbb59d2b12db1fa55f5aa329a3e2c", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java25-distroless.json" }, { "imageId": "java25-slim", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.11.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:e3cba0708f2898c004e9e750197b821fa3b719b9fcd724413283b037c2fe3eba", "manifestDigest": "sha256:e3cba0708f2898c004e9e750197b821fa3b719b9fcd724413283b037c2fe3eba", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-slim --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:fe413ec29a94cad351e5f87eca5cdb0d8cbc8ad3a64ae9f8e4509f1e742d25e3", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:32ce8a7b9f07092bd94feda3d69823818081fdd5ae223798d7e90f2af7331bcf", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/java25-slim-arm64.test-results.json" } }, "catalogRecord": "images/java25-slim.json" }, { "imageId": "node22-dev", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.11.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:14cb54e6ff39f0af91dbc338585b33b24af0d53d4837cd8dbb6eb331645f5556", "manifestDigest": "sha256:14cb54e6ff39f0af91dbc338585b33b24af0d53d4837cd8dbb6eb331645f5556", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-dev --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:dff328a6fe97a9d6b72c99c88796a336f1572d74adbb8c33ef8ca8c7453a2aca", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5b802676c5787a8270274e41115ba27d7e15ffd7bc2d7e92fa1071a5ea188fec", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node22-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node22-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node22-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node22-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node22-dev-arm64.test-results.json" } }, "catalogRecord": "images/node22-dev.json" }, { "imageId": "node22-distroless", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.11.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:d81c2307747fab490436297f527e29a787979d3f7ebb7f21a263f08c59062531", "manifestDigest": "sha256:d81c2307747fab490436297f527e29a787979d3f7ebb7f21a263f08c59062531", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-distroless --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:224d52c0bdc9f1a5063d19a8f128c713ea20eb40ac7180b28fba3986d3680d8e", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:c5f12189115853d508ac82832d29891b4a53919e94403135804725991fd913db", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node22-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node22-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node22-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node22-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node22-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node22-distroless.json" }, { "imageId": "node22-slim", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.11.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:8c386133a8bade5c645dd6accafe304eac25049618954aa2a959b031640bc28b", "manifestDigest": "sha256:8c386133a8bade5c645dd6accafe304eac25049618954aa2a959b031640bc28b", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-slim --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:ac057d5ccd565565ffb98c270aa98826053d204bcc71c8eaeb8289f32f172e64", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:cf89cc4e0002a6087bf6c5e2d34f1aac97dc322cdf0106077f4492167532e486", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node22-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node22-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node22-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node22-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node22-slim-arm64.test-results.json" } }, "catalogRecord": "images/node22-slim.json" }, { "imageId": "node24-dev", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.11.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:f9226ed74156fd7a82bb28c00011c363afd44a373110b60ffd63316c89fa41e1", "manifestDigest": "sha256:f9226ed74156fd7a82bb28c00011c363afd44a373110b60ffd63316c89fa41e1", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-dev --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:95e5f82c4c54a2b4e3d6dd9734ebc2a4bf8b17f7a02493ed5fe67f5ecc1b8c52", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:3a3f30785aef0e5c43b81875787dfa762a1cf7685f6fef71c2d5807db077352b", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node24-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node24-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node24-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node24-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node24-dev-arm64.test-results.json" } }, "catalogRecord": "images/node24-dev.json" }, { "imageId": "node24-distroless", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.11.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:5c411682f3942a58f09039096b60c5fcae6b394c25880ed38686057e2a0877ed", "manifestDigest": "sha256:5c411682f3942a58f09039096b60c5fcae6b394c25880ed38686057e2a0877ed", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-distroless --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e2b27ea121c23ead44cde7702e276e9791ff02b2d4a05a35a797093e6cfca598", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:3f61d604cd55c66fafad3d5881da3d0a80de93e9e3423178ca5a7f306d1490ed", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node24-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node24-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node24-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node24-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node24-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node24-distroless.json" }, { "imageId": "node24-slim", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.11.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:f4dcf93f77ea9df65fe374fb5001de2d4ab969d2ee613f908ceab9b248311340", "manifestDigest": "sha256:f4dcf93f77ea9df65fe374fb5001de2d4ab969d2ee613f908ceab9b248311340", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-slim --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:a12cbf8ae53439540d752ff00c4efa0bb471386ff4b0c76d0b918ad4fe589a2f", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2e691f952ea17cfa67c043e5d501d0e786e419233c51980414c2d4179af2cd38", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node24-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node24-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node24-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node24-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/node24-slim-arm64.test-results.json" } }, "catalogRecord": "images/node24-slim.json" }, { "imageId": "oauth2-proxy7", "kind": "service", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7:v0.11.0", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7@sha256:5dfbb135e4a72d3e2a8310a6a2eeaa9de1538097c2e66f79fb9cb61f67cbfae6", "manifestDigest": "sha256:5dfbb135e4a72d3e2a8310a6a2eeaa9de1538097c2e66f79fb9cb61f67cbfae6", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex oauth2-proxy7 --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e545fa93f571b45beeff0adba15c20b37f52441ca60fd20ee6161ee948f7a8a4", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:29bf1c602f25a014a79465277b858bae93f122bcf2aa378684eaded7c066f27e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/oauth2-proxy7-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/oauth2-proxy7-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/oauth2-proxy7.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/oauth2-proxy7-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/oauth2-proxy7-arm64.test-results.json" } }, "catalogRecord": "images/oauth2-proxy7.json" }, { "imageId": "postgres16", "kind": "service", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16:v0.11.0", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16@sha256:a40748442965a99ff68a0f479e5dcd08ff6ec8a484ecee10482c2f445e073385", "manifestDigest": "sha256:a40748442965a99ff68a0f479e5dcd08ff6ec8a484ecee10482c2f445e073385", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex postgres16 --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:42e2ac6132acc3dd433a92904451dc76644907c000c5efe693d565d0b2c038f4", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:dd850ffe4e5d37915469eaeef4d93e255edaac6e1e4f1f334a7bcbcda04cb375", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/postgres16-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/postgres16-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/postgres16.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/postgres16-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/postgres16-arm64.test-results.json" } }, "catalogRecord": "images/postgres16.json" }, { "imageId": "rust1.95-dev", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.11.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:86275ab241c4dcda02a9c100e401f9d0ca3e763a0d00449f2532723d470cfff8", "manifestDigest": "sha256:86275ab241c4dcda02a9c100e401f9d0ca3e763a0d00449f2532723d470cfff8", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-dev --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:14d6f6dbc09117c81fecd8bb9f3c3134962f657480f37a34f2f14d05dc565e0e", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ef78773c1669a9c7a196f8b36e343e9d1665cf5c83c151d2e0cc221fea5a7610", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/rust1.95-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/rust1.95-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/rust1.95-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/rust1.95-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/rust1.95-dev-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-dev.json" }, { "imageId": "rust1.95-distroless", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.11.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:630a40aba2e73abc7b1ebb85b2a08a5ef26b830f31c88cfdd2933afce762a9ba", "manifestDigest": "sha256:630a40aba2e73abc7b1ebb85b2a08a5ef26b830f31c88cfdd2933afce762a9ba", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-distroless --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:9be8f501b6a1d096b024e07e7bde5914c261f741504b2e4bd9cc71a19b574d74", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ab6bca2e5eb0b217d057a123e5aaa3073ff7e4499764ce2d40f3c078ba44d74e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/rust1.95-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/rust1.95-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/rust1.95-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/rust1.95-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/rust1.95-distroless-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-distroless.json" }, { "imageId": "rust1.95-slim", "kind": "runtime", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.11.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:ffbb63f51c387af1b59767bb33f9d1b3056c39268b7b36e6e13444e409f6d314", "manifestDigest": "sha256:ffbb63f51c387af1b59767bb33f9d1b3056c39268b7b36e6e13444e409f6d314", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-slim --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d86b3b34952dfbcf58b1805e05459bf12e4fbf2233abf2cd49722e133e7bf3da", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e8be1618c2c3d68837d9373152dc96dde55b6c97a9e3745de142013399c518dd", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/rust1.95-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/rust1.95-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/rust1.95-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/rust1.95-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/rust1.95-slim-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-slim.json" }, { "imageId": "valkey8", "kind": "service", "tag": "v0.11.0", "publishedAt": "2026-06-10T01:24:14Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8:v0.11.0", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8@sha256:16c7fa35b1f9c916430012530135721d609839304ab2cac52acf9fcc54fcc36b", "manifestDigest": "sha256:16c7fa35b1f9c916430012530135721d609839304ab2cac52acf9fcc54fcc36b", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex valkey8 --tag v0.11.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5a37faf44ee8da1bd2f602306d991a479f16ff5eeac249b84cdf79619b027ca8", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5715b2b0ad5b0839b59a87741a512ad5f4fc719096a230bb13ad37367fe0872b", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "97ddb11ac9c7e38f7394b3959d2c3f64bbebf156" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/valkey8-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/valkey8-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/valkey8.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/valkey8-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.11.0/valkey8-arm64.test-results.json" } }, "catalogRecord": "images/valkey8.json" }, { "imageId": "cc15-dev", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.10.4-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:84398acb1ee693442804965129813ed4f42bc7e213b4ee55da2dcedc0aa37b9c", "manifestDigest": "sha256:84398acb1ee693442804965129813ed4f42bc7e213b4ee55da2dcedc0aa37b9c", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-dev --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8de9a97404db61c438cf6676f036e3a46b5793835dee3a8e88300724d3c97909", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:366d8412fbbcdba0592f867bcfaed85bb34608c282e82da4843c0ed1989894be", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/cc15-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/cc15-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/cc15-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/cc15-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/cc15-dev-arm64.test-results.json" } }, "catalogRecord": "images/cc15-dev.json" }, { "imageId": "cc15-distroless", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.10.4-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:c91a6d901def6fa7b1907307e35ff9e29f7cde6930ab851c112ce666da1cda37", "manifestDigest": "sha256:c91a6d901def6fa7b1907307e35ff9e29f7cde6930ab851c112ce666da1cda37", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-distroless --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:f17b9ce21648ec3fe941802ee510c42bfb4b28dc565d508f1ea89d2b4db836a0", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:7919843e792172449141bd98230fff59d278884b7b247c97a90f1a073246dbc0", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0453258ccf959abff7a77035395eaa99e686046b" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/cc15-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/cc15-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/cc15-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/cc15-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/cc15-distroless-arm64.test-results.json" } }, "catalogRecord": "images/cc15-distroless.json" }, { "imageId": "cc15-slim", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.10.4-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:d8cd8f7ba4a22e53d9c8e30ac315794746053db977d4387e81c8b1efef2a565f", "manifestDigest": "sha256:d8cd8f7ba4a22e53d9c8e30ac315794746053db977d4387e81c8b1efef2a565f", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-slim --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:4a9af7150ce09e473bac91235b3ecc49936338173d7c1cae43e4fb63191871fe", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:26cf1b7829115e2cf75018e412b6b2ce244a246829188019f6625f805517fee5", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/cc15-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/cc15-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/cc15-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/cc15-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/cc15-slim-arm64.test-results.json" } }, "catalogRecord": "images/cc15-slim.json" }, { "imageId": "coreLTS-dev", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.10.4-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:65150a56450c369a40f6ab5e0c464012fe9bea1c7f09c64ecd04d4027c6b6de4", "manifestDigest": "sha256:65150a56450c369a40f6ab5e0c464012fe9bea1c7f09c64ecd04d4027c6b6de4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-dev --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:ca53a8d21c806e1a06211caf8d7102b70f91f7d0b09ad3619866b4729af87a56", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:aa1da977c720dba2b8ce52cdf06671ec743cfdf7ffbf997645090f83171e164b", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/coreLTS-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/coreLTS-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/coreLTS-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/coreLTS-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/coreLTS-dev-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-dev.json" }, { "imageId": "coreLTS-distroless", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.10.4-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:aada719381710ec3d35bf3c86b7031833f77c8315aa354802cb8d8dc04539efe", "manifestDigest": "sha256:aada719381710ec3d35bf3c86b7031833f77c8315aa354802cb8d8dc04539efe", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-distroless --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5b35c07573294ddc8a0b148d6b5a9d271c8df80a61b4db870c4e7b3caeb778f9", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:b98ffc9f6d177f5ffbedfeec7434b313401f80489b493401bd9026a87c300af1", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/coreLTS-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/coreLTS-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/coreLTS-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/coreLTS-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/coreLTS-distroless-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-distroless.json" }, { "imageId": "coreLTS-slim", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.10.4-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:cca7030e885b9602953159c5f1363e08f5527cd2e0189c435ecad90e222fe3b9", "manifestDigest": "sha256:cca7030e885b9602953159c5f1363e08f5527cd2e0189c435ecad90e222fe3b9", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-slim --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:c9f10b1799e65a3dd10ea88441acc579490b2a20f1fb4c3ebb3886308e7a372d", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:dc6d078e1b20f3c300ff3794453083a1c2028fb25ae9858b8c0155480aa85f30", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "3944a788038da3a0b3c130e42231310e7d122859" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/coreLTS-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/coreLTS-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/coreLTS-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/coreLTS-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/coreLTS-slim-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-slim.json" }, { "imageId": "dotnet10-dev", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.10.4-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:2f593250535f992107afb780d41bda7108488c8c9b47c38c01414863fed5e936", "manifestDigest": "sha256:2f593250535f992107afb780d41bda7108488c8c9b47c38c01414863fed5e936", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-dev --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:6626da4a316bdd4b9a9b569df798bebd372239f3b50468b29a5ef3aa42d9feec", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5173d928b925a34c164fb5a40d6e001c49e13fef4d5a83a865c82c8d2b092f75", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet10-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet10-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet10-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet10-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet10-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-dev.json" }, { "imageId": "dotnet10-distroless", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.10.4-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:6ccb2ee5f7e3607b3d74889f3b33d05eef15eb44a4f6de899b7aff074e24d221", "manifestDigest": "sha256:6ccb2ee5f7e3607b3d74889f3b33d05eef15eb44a4f6de899b7aff074e24d221", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-distroless --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:4a439acbda220de40e1517ea29ed51d83cfee8c669c6fd9d2f1e1a50ca49f5e9", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:403e811a8200e63d1b3b6744ad3f75b153a1fa9e9fb51ea549e1fb7ec4a80437", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0453258ccf959abff7a77035395eaa99e686046b" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet10-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet10-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet10-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet10-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet10-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-distroless.json" }, { "imageId": "dotnet10-slim", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.10.4-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:1c6deb1f811f946e212c7d275d717332f1f98e391853b8aad2c76f271551386e", "manifestDigest": "sha256:1c6deb1f811f946e212c7d275d717332f1f98e391853b8aad2c76f271551386e", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-slim --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:94350e86cb99ca4f0d0f1957a36a5f6832247d2c8b8cbb08ff3cc0365ccdc7da", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ea5d1d3daeac3d13a08e06b32c3158f98d0392b17dce26d14c95055a50cfcd5c", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet10-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet10-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet10-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet10-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet10-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-slim.json" }, { "imageId": "dotnet8-dev", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.10.4-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:c2f5427f328a8accc6cc1e91d34a2108cc7168c3e0d26aee7ca3e09761386ff4", "manifestDigest": "sha256:c2f5427f328a8accc6cc1e91d34a2108cc7168c3e0d26aee7ca3e09761386ff4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-dev --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:1562735e0d9cc27532eb7d8f0379d957e6392fa3e866e00aa72ac000307ec861", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9a7224eb0e3415bb796a3664ca21c6bca12fcd94084dd60b2dfeb14680b709df", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet8-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet8-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet8-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet8-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet8-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-dev.json" }, { "imageId": "dotnet8-distroless", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.10.4-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:3ccec3a5fbead5775d268c1bb7d94b4dd8aeab1509fe5a263bc61c50748f1f07", "manifestDigest": "sha256:3ccec3a5fbead5775d268c1bb7d94b4dd8aeab1509fe5a263bc61c50748f1f07", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-distroless --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:4d4d166f93aef3ce3e78e8c9c551ef401d8e98b330a6a127ce1c4bee5cd18537", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e00d2fc0c82729f301430f32b7b400153228c2cd0114fe618a1b9dab278caea6", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet8-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet8-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet8-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet8-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet8-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-distroless.json" }, { "imageId": "dotnet8-slim", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.10.4-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:1edf3848dd2edc9861eeba77c65c3eec047b43806182e782301cb0899bf19b2a", "manifestDigest": "sha256:1edf3848dd2edc9861eeba77c65c3eec047b43806182e782301cb0899bf19b2a", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-slim --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:41455b471637f6167ae67b72d1b10804d2c75a9c4fcbbcf44095eda3379fabc4", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e39c7ce0b89d4340cba1b38bd0e1519b417c274fe4ad84052aacb48ea913178d", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet8-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet8-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet8-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet8-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/dotnet8-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-slim.json" }, { "imageId": "go1.25-dev", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.10.4-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:c66e17df07e157f80e4c466914b1903dd245b77716b2c07c19c35a9dbc4a0d8e", "manifestDigest": "sha256:c66e17df07e157f80e4c466914b1903dd245b77716b2c07c19c35a9dbc4a0d8e", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-dev --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:12b3f9894ace7338d9ca61a7e8862a25d6b0a1ee6ba5419d472fe61b69faf54c", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:b328c9301777f8e9e57f2b225a3ae84b07b4b4905379395ad7ea606cfc515a73", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.25-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-dev.json" }, { "imageId": "go1.25-distroless", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.10.4-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:29161a8efd1f3c6813dd374c93d6c1d7da4cf670fc779dddfe21ed7805d010f2", "manifestDigest": "sha256:29161a8efd1f3c6813dd374c93d6c1d7da4cf670fc779dddfe21ed7805d010f2", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-distroless --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:9874610c444c6f02f96b49edd566aa0321e8a72f70b364db3e31a96d646c122e", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:48dea3412171ff5c8ce27c0d3e1c2dd58ff3931cf2c231fd983576e1fb3f73fe", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-distroless.json" }, { "imageId": "go1.25-slim", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.10.4-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:4bea3d7d99e2945852355e726c906943e4e488fae92930a60a953b8cd303f43d", "manifestDigest": "sha256:4bea3d7d99e2945852355e726c906943e4e488fae92930a60a953b8cd303f43d", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-slim --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b4015bbd9b269ddd670f8fdb5a30a86ba075fd5fdd9e15f690de577b5d6190c0", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:40df6dc52b59d26c037415de2522e88a329cf6f1f2361ae4cebf87d42fc33210", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.25-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-slim.json" }, { "imageId": "go1.26-dev", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.10.4-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:f3ca2dc5fd4404291f219d6277e8c42071702a664ce75dbe65ac3d62e5599d77", "manifestDigest": "sha256:f3ca2dc5fd4404291f219d6277e8c42071702a664ce75dbe65ac3d62e5599d77", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-dev --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:7c96eddbb2c068ab290c4c213e75df2ffab229a3be82541a6421026d185ca6d3", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2edcbcaf87f4d5604142361c98d811d4a80970d276175e7e490ace7a135bfa68", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.26-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.26-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.26-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.26-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.26-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-dev.json" }, { "imageId": "go1.26-distroless", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.10.4-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:2312b424814a8492b57f12bee58a461f6d790ca002015c22d7a492ed8c798ba6", "manifestDigest": "sha256:2312b424814a8492b57f12bee58a461f6d790ca002015c22d7a492ed8c798ba6", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-distroless --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:9daf5f3178bb771ef2bd03cc2823a8581441716e7cd4ff24841d2b23a2fab23a", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9d9d9e6ff5a1435c5d1acca45ba06d08e599b621db10e77671a7a35b0adb60c6", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.26-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.26-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.26-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.26-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.26-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-distroless.json" }, { "imageId": "go1.26-slim", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.10.4-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:84ef917c4e62acd02e203c10120c33633ce59e40a66e2e03b98a98a37bd23542", "manifestDigest": "sha256:84ef917c4e62acd02e203c10120c33633ce59e40a66e2e03b98a98a37bd23542", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-slim --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5335af179a330de5f9b9bdc3616f1e4fb99d7c3a0f5e905fad25b9b4cd1ae534", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:944ab099fae4141bbe3afabcf8c63cb477106719faf128561b737e9832cf4092", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.26-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.26-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.26-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.26-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/go1.26-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-slim.json" }, { "imageId": "java21-dev", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.10.4-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:d6bacd4e1cd9394157823e7a13033abe2fbc985ea71a09d695d0fea57a995783", "manifestDigest": "sha256:d6bacd4e1cd9394157823e7a13033abe2fbc985ea71a09d695d0fea57a995783", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-dev --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5eade228681095af32fc579263b5902bb123e448c73804a6589ddcd2ba697a93", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:1157d5cd3e6bcb03aff411f48023ca88baa8fe5090e9582216c3a6c2e3f635c2", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java21-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java21-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java21-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java21-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java21-dev-arm64.test-results.json" } }, "catalogRecord": "images/java21-dev.json" }, { "imageId": "java21-distroless", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.10.4-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:f3df115c93dea9aa1f4213228d0d6c88da44006289935d27f61b345f27e439b3", "manifestDigest": "sha256:f3df115c93dea9aa1f4213228d0d6c88da44006289935d27f61b345f27e439b3", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-distroless --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e647b23bf7c3667babc2feddaa1f822775b5f8ca28c81683946517cd5c781efb", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9d5ca9ca7fc19bd8c78b21b201648e36ae77c7da906fc3a804c7a76225e90486", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java21-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java21-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java21-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java21-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java21-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java21-distroless.json" }, { "imageId": "java21-slim", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.10.4-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:cc3117409bad6360c31f2fbbff5938a3e9bb143b3b0678d15ae70e75510078f9", "manifestDigest": "sha256:cc3117409bad6360c31f2fbbff5938a3e9bb143b3b0678d15ae70e75510078f9", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-slim --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:405d6e80de2662183663a5950aae1783ee870263dbd58e2722b0db39a5cf399f", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:322f0cf5c8523aac7f0e19c3ba569eea9c30bfeb086e3e5828d692eda5a29517", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java21-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java21-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java21-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java21-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java21-slim-arm64.test-results.json" } }, "catalogRecord": "images/java21-slim.json" }, { "imageId": "java25-dev", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.10.4-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:a4494e0efc4b0c3a0f505be3610b67168b3c8093dda9332642c458f6b3e9210a", "manifestDigest": "sha256:a4494e0efc4b0c3a0f505be3610b67168b3c8093dda9332642c458f6b3e9210a", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-dev --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:216fe48128afc955b34965e2d4f6a7571d79cc36ce5ffbd46ddc3a0c96d1a79f", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:3d78fa02be7b077e6fb01e892228ea064c8eb152c36f655d220b2ec8d348733e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java25-dev-arm64.test-results.json" } }, "catalogRecord": "images/java25-dev.json" }, { "imageId": "java25-distroless", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.10.4-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:d720bd81fc5c75315a5345018507064647b439683e5af524cf9b858a8c454df6", "manifestDigest": "sha256:d720bd81fc5c75315a5345018507064647b439683e5af524cf9b858a8c454df6", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-distroless --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:50feabe8fc0258d216ee381c5b214ca0dae8784aa68e2e6e167ef3d59b0e0e97", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:cf45b901baa3eb96140e521d3a7c15cb0d684a0e371f3f99ffd9dcc4c1e1c0a5", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0453258ccf959abff7a77035395eaa99e686046b" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java25-distroless.json" }, { "imageId": "java25-slim", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.10.4-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:d8cd354c146345a982ed600f55e217d5d47790aa994b2ad0a14ccc80a211f4b8", "manifestDigest": "sha256:d8cd354c146345a982ed600f55e217d5d47790aa994b2ad0a14ccc80a211f4b8", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-slim --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d5ab504b0c65ab90a4ba8e077bfe6a14399c3440ea217093890df9cf45cc6bb5", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:24f074ec85dda9fb56088974ad22b9e13e5077c852c6d22a0e0051ef64c09481", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0453258ccf959abff7a77035395eaa99e686046b" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/java25-slim-arm64.test-results.json" } }, "catalogRecord": "images/java25-slim.json" }, { "imageId": "node22-dev", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.10.4-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:d378c9d6ab372736f5a326909ecdb90fab2c907816044f8b060afd05bece7949", "manifestDigest": "sha256:d378c9d6ab372736f5a326909ecdb90fab2c907816044f8b060afd05bece7949", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-dev --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b82960137870bd7c155e76a64c71672829e9ed83d9c4a7b32d6dc5538b825793", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:6ceacc06fc8c3a4722bcdb8647bdfaf9ea6a042f0681f656549a050069da042f", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node22-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node22-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node22-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node22-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node22-dev-arm64.test-results.json" } }, "catalogRecord": "images/node22-dev.json" }, { "imageId": "node22-distroless", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.10.4-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:a1403bba6db4b7f61d758f539a3e794c776f25c88f5fa78be543741c3b431ac4", "manifestDigest": "sha256:a1403bba6db4b7f61d758f539a3e794c776f25c88f5fa78be543741c3b431ac4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-distroless --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:dc61254465cc197294908e5fd1acaa30151e57f67bd799848d19b31cd560e1f3", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:aeae107b95aa265d54ce0266fba3558ae10a6c276a49c434801ecfaeb599cf10", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node22-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node22-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node22-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node22-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node22-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node22-distroless.json" }, { "imageId": "node22-slim", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.10.4-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:642b3f767c2eb81197e546917bb506a9ba03b37848e7ed262e7260dc62f5113b", "manifestDigest": "sha256:642b3f767c2eb81197e546917bb506a9ba03b37848e7ed262e7260dc62f5113b", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-slim --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:86c97e7affb3702b3990b4a97b11d709788c74de53ded2a49d327170c6a30bdb", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:3c3561dc94aeb8ad28775ae940853d5c87655fb7076d16a1660eb24400efd718", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "3944a788038da3a0b3c130e42231310e7d122859" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node22-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node22-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node22-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node22-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node22-slim-arm64.test-results.json" } }, "catalogRecord": "images/node22-slim.json" }, { "imageId": "node24-dev", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.10.4-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:e026838e8588749a23cb7e174f5dfaa4115e10b8507065f06640f704bda507a3", "manifestDigest": "sha256:e026838e8588749a23cb7e174f5dfaa4115e10b8507065f06640f704bda507a3", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-dev --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:913ee411b12fa357b88d590878a5a0169e81313cb990b4009edd068e41047067", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e0c46babad81d2277e788d9a1d3761b073a13093740e87c1cd184c1bacc1831c", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node24-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node24-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node24-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node24-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node24-dev-arm64.test-results.json" } }, "catalogRecord": "images/node24-dev.json" }, { "imageId": "node24-distroless", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.10.4-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:152619b873ab28bca165441625418dfdccb0438f8b07362fafe7aaa42acfc9fb", "manifestDigest": "sha256:152619b873ab28bca165441625418dfdccb0438f8b07362fafe7aaa42acfc9fb", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-distroless --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:443b45306d99e7aca5004a3a6697bd463a055e8bb9153284ad8930730c52b904", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:8e852fab81b8d1e05de807f520d5358b11fffc8c56aa99e5375586de0af5e27e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node24-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node24-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node24-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node24-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node24-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node24-distroless.json" }, { "imageId": "node24-slim", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.10.4-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:48dfeab61e92a325d20dd98b2bcedacc78736cb2b181f1e11528419d85809b3e", "manifestDigest": "sha256:48dfeab61e92a325d20dd98b2bcedacc78736cb2b181f1e11528419d85809b3e", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-slim --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e5f92deb7d174d15184b658640b123dc9031532e931c50843e8717e6bd1689cb", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e9009b53ab0d98dd189d98d117c230b068c3e2e76c8708221a19b8f0c47314d5", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node24-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node24-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node24-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node24-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/node24-slim-arm64.test-results.json" } }, "catalogRecord": "images/node24-slim.json" }, { "imageId": "oauth2-proxy7", "kind": "service", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7:v0.10.4", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7@sha256:0f39bf438ce5471a8dfd33aa562dce8f0b92467d1059e629cd5b5410edcfa6ae", "manifestDigest": "sha256:0f39bf438ce5471a8dfd33aa562dce8f0b92467d1059e629cd5b5410edcfa6ae", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex oauth2-proxy7 --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5848328ae8890d4d97a7bbc858eedf82942151b6e734248a29cfa95263c92e15", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2cc9acc979e62a38d6de74e753c62072780b62658dd6bc1f30417430fed4fcbb", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "3944a788038da3a0b3c130e42231310e7d122859" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/oauth2-proxy7-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/oauth2-proxy7-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/oauth2-proxy7.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/oauth2-proxy7-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/oauth2-proxy7-arm64.test-results.json" } }, "catalogRecord": "images/oauth2-proxy7.json" }, { "imageId": "postgres16", "kind": "service", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16:v0.10.4", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16@sha256:7746ff36f6bc400df5c6944aad622ec112468acebddb779951ea1d31e9f02974", "manifestDigest": "sha256:7746ff36f6bc400df5c6944aad622ec112468acebddb779951ea1d31e9f02974", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex postgres16 --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:1d90f3112d92d4342e939867ae69502fac13e24b247594ad0d91e8f881427614", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:6dc412e998d52d02902cd321e65eb90131dbe260fc9de598c57db01d74875049", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0453258ccf959abff7a77035395eaa99e686046b" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/postgres16-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/postgres16-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/postgres16.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/postgres16-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/postgres16-arm64.test-results.json" } }, "catalogRecord": "images/postgres16.json" }, { "imageId": "rust1.95-dev", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.10.4-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:aeb6ee50ac00c7da52d0f5e4a2f49a2eea81e432f1b4fdb00debbd381f8dc9bf", "manifestDigest": "sha256:aeb6ee50ac00c7da52d0f5e4a2f49a2eea81e432f1b4fdb00debbd381f8dc9bf", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-dev --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:7cb8c89f7155c00e214b94fd290b06c29caed76a2658f113f3fe8c5872f6f518", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2f442dc5e1ba193b21db6fc1da6f20e03484788a286777c898eb34dca07f2fd5", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/rust1.95-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/rust1.95-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/rust1.95-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/rust1.95-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/rust1.95-dev-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-dev.json" }, { "imageId": "rust1.95-distroless", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.10.4-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:25630edd86567afd38d2443d5a1250ecd673a501aa90272c81d351502c893790", "manifestDigest": "sha256:25630edd86567afd38d2443d5a1250ecd673a501aa90272c81d351502c893790", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-distroless --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:467f59b486c0e8186ad54f1bb7036760ad9db80558d17ec52247db807a70d2b9", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:18d86c02be0b0a06ebed17b024de44e40b0dfe9beea9557a00cd6339d168540e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0453258ccf959abff7a77035395eaa99e686046b" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/rust1.95-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/rust1.95-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/rust1.95-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/rust1.95-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/rust1.95-distroless-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-distroless.json" }, { "imageId": "rust1.95-slim", "kind": "runtime", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.10.4-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:0bc34e97cb3a9cfdf0dd0b5aa6cd75ac7d03b0631473b0ebc26f171dee50657a", "manifestDigest": "sha256:0bc34e97cb3a9cfdf0dd0b5aa6cd75ac7d03b0631473b0ebc26f171dee50657a", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-slim --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d48cde8344f558c2903e426e1f110dd7e36a57bfe1263e27996d920d033fdcad", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:a3d7e2f898e88f446d81f7ba9721e81e8e028aade1b7037169c8e858d026790b", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/rust1.95-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/rust1.95-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/rust1.95-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/rust1.95-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/rust1.95-slim-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-slim.json" }, { "imageId": "valkey8", "kind": "service", "tag": "v0.10.4", "publishedAt": "2026-06-09T12:54:17Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8:v0.10.4", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8@sha256:b37cbfd2bf5a761140097023b7c8feb979752a220fb232f9cc975efb1e4fce3c", "manifestDigest": "sha256:b37cbfd2bf5a761140097023b7c8feb979752a220fb232f9cc975efb1e4fce3c", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex valkey8 --tag v0.10.4" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d35fde3e075e0b365fb662744962d08808627a9d64eec1aa58c7ac2637973cad", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e46113a6ba5fff9d6d0ab1401674c026498565b3482f9e5c74e165080208ec43", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "3944a788038da3a0b3c130e42231310e7d122859" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/valkey8-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/valkey8-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/valkey8.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/valkey8-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.4/valkey8-arm64.test-results.json" } }, "catalogRecord": "images/valkey8.json" }, { "imageId": "cc15-dev", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.10.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:84398acb1ee693442804965129813ed4f42bc7e213b4ee55da2dcedc0aa37b9c", "manifestDigest": "sha256:84398acb1ee693442804965129813ed4f42bc7e213b4ee55da2dcedc0aa37b9c", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-dev --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8de9a97404db61c438cf6676f036e3a46b5793835dee3a8e88300724d3c97909", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:366d8412fbbcdba0592f867bcfaed85bb34608c282e82da4843c0ed1989894be", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/cc15-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/cc15-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/cc15-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/cc15-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/cc15-dev-arm64.test-results.json" } }, "catalogRecord": "images/cc15-dev.json" }, { "imageId": "cc15-distroless", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.10.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:c91a6d901def6fa7b1907307e35ff9e29f7cde6930ab851c112ce666da1cda37", "manifestDigest": "sha256:c91a6d901def6fa7b1907307e35ff9e29f7cde6930ab851c112ce666da1cda37", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-distroless --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:f17b9ce21648ec3fe941802ee510c42bfb4b28dc565d508f1ea89d2b4db836a0", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:7919843e792172449141bd98230fff59d278884b7b247c97a90f1a073246dbc0", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/cc15-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/cc15-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/cc15-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/cc15-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/cc15-distroless-arm64.test-results.json" } }, "catalogRecord": "images/cc15-distroless.json" }, { "imageId": "cc15-slim", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.10.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:d8cd8f7ba4a22e53d9c8e30ac315794746053db977d4387e81c8b1efef2a565f", "manifestDigest": "sha256:d8cd8f7ba4a22e53d9c8e30ac315794746053db977d4387e81c8b1efef2a565f", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-slim --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:4a9af7150ce09e473bac91235b3ecc49936338173d7c1cae43e4fb63191871fe", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:26cf1b7829115e2cf75018e412b6b2ce244a246829188019f6625f805517fee5", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/cc15-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/cc15-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/cc15-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/cc15-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/cc15-slim-arm64.test-results.json" } }, "catalogRecord": "images/cc15-slim.json" }, { "imageId": "coreLTS-dev", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.10.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:65150a56450c369a40f6ab5e0c464012fe9bea1c7f09c64ecd04d4027c6b6de4", "manifestDigest": "sha256:65150a56450c369a40f6ab5e0c464012fe9bea1c7f09c64ecd04d4027c6b6de4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-dev --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:ca53a8d21c806e1a06211caf8d7102b70f91f7d0b09ad3619866b4729af87a56", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:aa1da977c720dba2b8ce52cdf06671ec743cfdf7ffbf997645090f83171e164b", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/coreLTS-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/coreLTS-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/coreLTS-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/coreLTS-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/coreLTS-dev-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-dev.json" }, { "imageId": "coreLTS-distroless", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.10.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:aada719381710ec3d35bf3c86b7031833f77c8315aa354802cb8d8dc04539efe", "manifestDigest": "sha256:aada719381710ec3d35bf3c86b7031833f77c8315aa354802cb8d8dc04539efe", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-distroless --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5b35c07573294ddc8a0b148d6b5a9d271c8df80a61b4db870c4e7b3caeb778f9", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:b98ffc9f6d177f5ffbedfeec7434b313401f80489b493401bd9026a87c300af1", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/coreLTS-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/coreLTS-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/coreLTS-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/coreLTS-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/coreLTS-distroless-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-distroless.json" }, { "imageId": "coreLTS-slim", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.10.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:cca7030e885b9602953159c5f1363e08f5527cd2e0189c435ecad90e222fe3b9", "manifestDigest": "sha256:cca7030e885b9602953159c5f1363e08f5527cd2e0189c435ecad90e222fe3b9", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-slim --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:c9f10b1799e65a3dd10ea88441acc579490b2a20f1fb4c3ebb3886308e7a372d", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:dc6d078e1b20f3c300ff3794453083a1c2028fb25ae9858b8c0155480aa85f30", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/coreLTS-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/coreLTS-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/coreLTS-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/coreLTS-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/coreLTS-slim-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-slim.json" }, { "imageId": "dotnet10-dev", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.10.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:2f593250535f992107afb780d41bda7108488c8c9b47c38c01414863fed5e936", "manifestDigest": "sha256:2f593250535f992107afb780d41bda7108488c8c9b47c38c01414863fed5e936", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-dev --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:6626da4a316bdd4b9a9b569df798bebd372239f3b50468b29a5ef3aa42d9feec", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5173d928b925a34c164fb5a40d6e001c49e13fef4d5a83a865c82c8d2b092f75", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet10-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet10-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet10-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet10-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet10-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-dev.json" }, { "imageId": "dotnet10-distroless", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.10.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:6ccb2ee5f7e3607b3d74889f3b33d05eef15eb44a4f6de899b7aff074e24d221", "manifestDigest": "sha256:6ccb2ee5f7e3607b3d74889f3b33d05eef15eb44a4f6de899b7aff074e24d221", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-distroless --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:4a439acbda220de40e1517ea29ed51d83cfee8c669c6fd9d2f1e1a50ca49f5e9", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:403e811a8200e63d1b3b6744ad3f75b153a1fa9e9fb51ea549e1fb7ec4a80437", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet10-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet10-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet10-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet10-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet10-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-distroless.json" }, { "imageId": "dotnet10-slim", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.10.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:1c6deb1f811f946e212c7d275d717332f1f98e391853b8aad2c76f271551386e", "manifestDigest": "sha256:1c6deb1f811f946e212c7d275d717332f1f98e391853b8aad2c76f271551386e", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-slim --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:94350e86cb99ca4f0d0f1957a36a5f6832247d2c8b8cbb08ff3cc0365ccdc7da", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ea5d1d3daeac3d13a08e06b32c3158f98d0392b17dce26d14c95055a50cfcd5c", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet10-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet10-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet10-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet10-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet10-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-slim.json" }, { "imageId": "dotnet8-dev", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.10.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:c2f5427f328a8accc6cc1e91d34a2108cc7168c3e0d26aee7ca3e09761386ff4", "manifestDigest": "sha256:c2f5427f328a8accc6cc1e91d34a2108cc7168c3e0d26aee7ca3e09761386ff4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-dev --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:1562735e0d9cc27532eb7d8f0379d957e6392fa3e866e00aa72ac000307ec861", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9a7224eb0e3415bb796a3664ca21c6bca12fcd94084dd60b2dfeb14680b709df", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet8-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet8-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet8-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet8-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet8-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-dev.json" }, { "imageId": "dotnet8-distroless", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.10.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:3ccec3a5fbead5775d268c1bb7d94b4dd8aeab1509fe5a263bc61c50748f1f07", "manifestDigest": "sha256:3ccec3a5fbead5775d268c1bb7d94b4dd8aeab1509fe5a263bc61c50748f1f07", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-distroless --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:4d4d166f93aef3ce3e78e8c9c551ef401d8e98b330a6a127ce1c4bee5cd18537", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e00d2fc0c82729f301430f32b7b400153228c2cd0114fe618a1b9dab278caea6", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet8-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet8-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet8-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet8-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet8-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-distroless.json" }, { "imageId": "dotnet8-slim", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.10.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:1edf3848dd2edc9861eeba77c65c3eec047b43806182e782301cb0899bf19b2a", "manifestDigest": "sha256:1edf3848dd2edc9861eeba77c65c3eec047b43806182e782301cb0899bf19b2a", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-slim --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:41455b471637f6167ae67b72d1b10804d2c75a9c4fcbbcf44095eda3379fabc4", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e39c7ce0b89d4340cba1b38bd0e1519b417c274fe4ad84052aacb48ea913178d", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet8-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet8-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet8-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet8-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/dotnet8-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-slim.json" }, { "imageId": "go1.25-dev", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.10.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:c66e17df07e157f80e4c466914b1903dd245b77716b2c07c19c35a9dbc4a0d8e", "manifestDigest": "sha256:c66e17df07e157f80e4c466914b1903dd245b77716b2c07c19c35a9dbc4a0d8e", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-dev --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:12b3f9894ace7338d9ca61a7e8862a25d6b0a1ee6ba5419d472fe61b69faf54c", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:b328c9301777f8e9e57f2b225a3ae84b07b4b4905379395ad7ea606cfc515a73", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.25-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-dev.json" }, { "imageId": "go1.25-distroless", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.10.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:29161a8efd1f3c6813dd374c93d6c1d7da4cf670fc779dddfe21ed7805d010f2", "manifestDigest": "sha256:29161a8efd1f3c6813dd374c93d6c1d7da4cf670fc779dddfe21ed7805d010f2", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-distroless --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:9874610c444c6f02f96b49edd566aa0321e8a72f70b364db3e31a96d646c122e", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:48dea3412171ff5c8ce27c0d3e1c2dd58ff3931cf2c231fd983576e1fb3f73fe", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-distroless.json" }, { "imageId": "go1.25-slim", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.10.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:4bea3d7d99e2945852355e726c906943e4e488fae92930a60a953b8cd303f43d", "manifestDigest": "sha256:4bea3d7d99e2945852355e726c906943e4e488fae92930a60a953b8cd303f43d", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-slim --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b4015bbd9b269ddd670f8fdb5a30a86ba075fd5fdd9e15f690de577b5d6190c0", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:40df6dc52b59d26c037415de2522e88a329cf6f1f2361ae4cebf87d42fc33210", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.25-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-slim.json" }, { "imageId": "go1.26-dev", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.10.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:f3ca2dc5fd4404291f219d6277e8c42071702a664ce75dbe65ac3d62e5599d77", "manifestDigest": "sha256:f3ca2dc5fd4404291f219d6277e8c42071702a664ce75dbe65ac3d62e5599d77", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-dev --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:7c96eddbb2c068ab290c4c213e75df2ffab229a3be82541a6421026d185ca6d3", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2edcbcaf87f4d5604142361c98d811d4a80970d276175e7e490ace7a135bfa68", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.26-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.26-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.26-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.26-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.26-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-dev.json" }, { "imageId": "go1.26-distroless", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.10.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:2312b424814a8492b57f12bee58a461f6d790ca002015c22d7a492ed8c798ba6", "manifestDigest": "sha256:2312b424814a8492b57f12bee58a461f6d790ca002015c22d7a492ed8c798ba6", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-distroless --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:9daf5f3178bb771ef2bd03cc2823a8581441716e7cd4ff24841d2b23a2fab23a", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9d9d9e6ff5a1435c5d1acca45ba06d08e599b621db10e77671a7a35b0adb60c6", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.26-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.26-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.26-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.26-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.26-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-distroless.json" }, { "imageId": "go1.26-slim", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.10.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:84ef917c4e62acd02e203c10120c33633ce59e40a66e2e03b98a98a37bd23542", "manifestDigest": "sha256:84ef917c4e62acd02e203c10120c33633ce59e40a66e2e03b98a98a37bd23542", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-slim --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5335af179a330de5f9b9bdc3616f1e4fb99d7c3a0f5e905fad25b9b4cd1ae534", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:944ab099fae4141bbe3afabcf8c63cb477106719faf128561b737e9832cf4092", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.26-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.26-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.26-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.26-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/go1.26-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-slim.json" }, { "imageId": "java21-dev", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.10.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:d6bacd4e1cd9394157823e7a13033abe2fbc985ea71a09d695d0fea57a995783", "manifestDigest": "sha256:d6bacd4e1cd9394157823e7a13033abe2fbc985ea71a09d695d0fea57a995783", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-dev --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5eade228681095af32fc579263b5902bb123e448c73804a6589ddcd2ba697a93", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:1157d5cd3e6bcb03aff411f48023ca88baa8fe5090e9582216c3a6c2e3f635c2", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java21-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java21-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java21-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java21-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java21-dev-arm64.test-results.json" } }, "catalogRecord": "images/java21-dev.json" }, { "imageId": "java21-distroless", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.10.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:f3df115c93dea9aa1f4213228d0d6c88da44006289935d27f61b345f27e439b3", "manifestDigest": "sha256:f3df115c93dea9aa1f4213228d0d6c88da44006289935d27f61b345f27e439b3", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-distroless --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e647b23bf7c3667babc2feddaa1f822775b5f8ca28c81683946517cd5c781efb", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9d5ca9ca7fc19bd8c78b21b201648e36ae77c7da906fc3a804c7a76225e90486", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java21-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java21-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java21-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java21-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java21-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java21-distroless.json" }, { "imageId": "java21-slim", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.10.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:cc3117409bad6360c31f2fbbff5938a3e9bb143b3b0678d15ae70e75510078f9", "manifestDigest": "sha256:cc3117409bad6360c31f2fbbff5938a3e9bb143b3b0678d15ae70e75510078f9", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-slim --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:405d6e80de2662183663a5950aae1783ee870263dbd58e2722b0db39a5cf399f", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:322f0cf5c8523aac7f0e19c3ba569eea9c30bfeb086e3e5828d692eda5a29517", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java21-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java21-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java21-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java21-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java21-slim-arm64.test-results.json" } }, "catalogRecord": "images/java21-slim.json" }, { "imageId": "java25-dev", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.10.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:a4494e0efc4b0c3a0f505be3610b67168b3c8093dda9332642c458f6b3e9210a", "manifestDigest": "sha256:a4494e0efc4b0c3a0f505be3610b67168b3c8093dda9332642c458f6b3e9210a", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-dev --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:216fe48128afc955b34965e2d4f6a7571d79cc36ce5ffbd46ddc3a0c96d1a79f", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:3d78fa02be7b077e6fb01e892228ea064c8eb152c36f655d220b2ec8d348733e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java25-dev-arm64.test-results.json" } }, "catalogRecord": "images/java25-dev.json" }, { "imageId": "java25-distroless", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.10.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:d720bd81fc5c75315a5345018507064647b439683e5af524cf9b858a8c454df6", "manifestDigest": "sha256:d720bd81fc5c75315a5345018507064647b439683e5af524cf9b858a8c454df6", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-distroless --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:50feabe8fc0258d216ee381c5b214ca0dae8784aa68e2e6e167ef3d59b0e0e97", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:cf45b901baa3eb96140e521d3a7c15cb0d684a0e371f3f99ffd9dcc4c1e1c0a5", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java25-distroless.json" }, { "imageId": "java25-slim", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.10.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:d8cd354c146345a982ed600f55e217d5d47790aa994b2ad0a14ccc80a211f4b8", "manifestDigest": "sha256:d8cd354c146345a982ed600f55e217d5d47790aa994b2ad0a14ccc80a211f4b8", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-slim --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d5ab504b0c65ab90a4ba8e077bfe6a14399c3440ea217093890df9cf45cc6bb5", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:24f074ec85dda9fb56088974ad22b9e13e5077c852c6d22a0e0051ef64c09481", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/java25-slim-arm64.test-results.json" } }, "catalogRecord": "images/java25-slim.json" }, { "imageId": "node22-dev", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.10.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:d378c9d6ab372736f5a326909ecdb90fab2c907816044f8b060afd05bece7949", "manifestDigest": "sha256:d378c9d6ab372736f5a326909ecdb90fab2c907816044f8b060afd05bece7949", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-dev --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b82960137870bd7c155e76a64c71672829e9ed83d9c4a7b32d6dc5538b825793", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:6ceacc06fc8c3a4722bcdb8647bdfaf9ea6a042f0681f656549a050069da042f", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node22-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node22-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node22-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node22-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node22-dev-arm64.test-results.json" } }, "catalogRecord": "images/node22-dev.json" }, { "imageId": "node22-distroless", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.10.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:a1403bba6db4b7f61d758f539a3e794c776f25c88f5fa78be543741c3b431ac4", "manifestDigest": "sha256:a1403bba6db4b7f61d758f539a3e794c776f25c88f5fa78be543741c3b431ac4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-distroless --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:dc61254465cc197294908e5fd1acaa30151e57f67bd799848d19b31cd560e1f3", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:aeae107b95aa265d54ce0266fba3558ae10a6c276a49c434801ecfaeb599cf10", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node22-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node22-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node22-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node22-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node22-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node22-distroless.json" }, { "imageId": "node22-slim", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.10.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:642b3f767c2eb81197e546917bb506a9ba03b37848e7ed262e7260dc62f5113b", "manifestDigest": "sha256:642b3f767c2eb81197e546917bb506a9ba03b37848e7ed262e7260dc62f5113b", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-slim --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:86c97e7affb3702b3990b4a97b11d709788c74de53ded2a49d327170c6a30bdb", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:3c3561dc94aeb8ad28775ae940853d5c87655fb7076d16a1660eb24400efd718", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node22-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node22-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node22-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node22-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node22-slim-arm64.test-results.json" } }, "catalogRecord": "images/node22-slim.json" }, { "imageId": "node24-dev", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.10.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:e026838e8588749a23cb7e174f5dfaa4115e10b8507065f06640f704bda507a3", "manifestDigest": "sha256:e026838e8588749a23cb7e174f5dfaa4115e10b8507065f06640f704bda507a3", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-dev --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:913ee411b12fa357b88d590878a5a0169e81313cb990b4009edd068e41047067", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e0c46babad81d2277e788d9a1d3761b073a13093740e87c1cd184c1bacc1831c", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node24-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node24-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node24-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node24-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node24-dev-arm64.test-results.json" } }, "catalogRecord": "images/node24-dev.json" }, { "imageId": "node24-distroless", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.10.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:152619b873ab28bca165441625418dfdccb0438f8b07362fafe7aaa42acfc9fb", "manifestDigest": "sha256:152619b873ab28bca165441625418dfdccb0438f8b07362fafe7aaa42acfc9fb", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-distroless --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:443b45306d99e7aca5004a3a6697bd463a055e8bb9153284ad8930730c52b904", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:8e852fab81b8d1e05de807f520d5358b11fffc8c56aa99e5375586de0af5e27e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node24-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node24-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node24-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node24-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node24-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node24-distroless.json" }, { "imageId": "node24-slim", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.10.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:48dfeab61e92a325d20dd98b2bcedacc78736cb2b181f1e11528419d85809b3e", "manifestDigest": "sha256:48dfeab61e92a325d20dd98b2bcedacc78736cb2b181f1e11528419d85809b3e", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-slim --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e5f92deb7d174d15184b658640b123dc9031532e931c50843e8717e6bd1689cb", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e9009b53ab0d98dd189d98d117c230b068c3e2e76c8708221a19b8f0c47314d5", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node24-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node24-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node24-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node24-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/node24-slim-arm64.test-results.json" } }, "catalogRecord": "images/node24-slim.json" }, { "imageId": "oauth2-proxy7", "kind": "service", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7:v0.10.2", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7@sha256:0f39bf438ce5471a8dfd33aa562dce8f0b92467d1059e629cd5b5410edcfa6ae", "manifestDigest": "sha256:0f39bf438ce5471a8dfd33aa562dce8f0b92467d1059e629cd5b5410edcfa6ae", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex oauth2-proxy7 --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5848328ae8890d4d97a7bbc858eedf82942151b6e734248a29cfa95263c92e15", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2cc9acc979e62a38d6de74e753c62072780b62658dd6bc1f30417430fed4fcbb", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/oauth2-proxy7-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/oauth2-proxy7-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/oauth2-proxy7.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/oauth2-proxy7-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/oauth2-proxy7-arm64.test-results.json" } }, "catalogRecord": "images/oauth2-proxy7.json" }, { "imageId": "postgres16", "kind": "service", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16:v0.10.2", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16@sha256:7746ff36f6bc400df5c6944aad622ec112468acebddb779951ea1d31e9f02974", "manifestDigest": "sha256:7746ff36f6bc400df5c6944aad622ec112468acebddb779951ea1d31e9f02974", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex postgres16 --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:1d90f3112d92d4342e939867ae69502fac13e24b247594ad0d91e8f881427614", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:6dc412e998d52d02902cd321e65eb90131dbe260fc9de598c57db01d74875049", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/postgres16-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/postgres16-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/postgres16.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/postgres16-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/postgres16-arm64.test-results.json" } }, "catalogRecord": "images/postgres16.json" }, { "imageId": "rust1.95-dev", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.10.2-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:aeb6ee50ac00c7da52d0f5e4a2f49a2eea81e432f1b4fdb00debbd381f8dc9bf", "manifestDigest": "sha256:aeb6ee50ac00c7da52d0f5e4a2f49a2eea81e432f1b4fdb00debbd381f8dc9bf", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-dev --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:7cb8c89f7155c00e214b94fd290b06c29caed76a2658f113f3fe8c5872f6f518", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2f442dc5e1ba193b21db6fc1da6f20e03484788a286777c898eb34dca07f2fd5", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/rust1.95-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/rust1.95-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/rust1.95-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/rust1.95-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/rust1.95-dev-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-dev.json" }, { "imageId": "rust1.95-distroless", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.10.2-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:25630edd86567afd38d2443d5a1250ecd673a501aa90272c81d351502c893790", "manifestDigest": "sha256:25630edd86567afd38d2443d5a1250ecd673a501aa90272c81d351502c893790", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-distroless --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:467f59b486c0e8186ad54f1bb7036760ad9db80558d17ec52247db807a70d2b9", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:18d86c02be0b0a06ebed17b024de44e40b0dfe9beea9557a00cd6339d168540e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/rust1.95-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/rust1.95-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/rust1.95-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/rust1.95-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/rust1.95-distroless-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-distroless.json" }, { "imageId": "rust1.95-slim", "kind": "runtime", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.10.2-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:0bc34e97cb3a9cfdf0dd0b5aa6cd75ac7d03b0631473b0ebc26f171dee50657a", "manifestDigest": "sha256:0bc34e97cb3a9cfdf0dd0b5aa6cd75ac7d03b0631473b0ebc26f171dee50657a", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-slim --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d48cde8344f558c2903e426e1f110dd7e36a57bfe1263e27996d920d033fdcad", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:a3d7e2f898e88f446d81f7ba9721e81e8e028aade1b7037169c8e858d026790b", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/rust1.95-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/rust1.95-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/rust1.95-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/rust1.95-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/rust1.95-slim-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-slim.json" }, { "imageId": "valkey8", "kind": "service", "tag": "v0.10.2", "publishedAt": "2026-06-07T21:31:16Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8:v0.10.2", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8@sha256:b37cbfd2bf5a761140097023b7c8feb979752a220fb232f9cc975efb1e4fce3c", "manifestDigest": "sha256:b37cbfd2bf5a761140097023b7c8feb979752a220fb232f9cc975efb1e4fce3c", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex valkey8 --tag v0.10.2" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d35fde3e075e0b365fb662744962d08808627a9d64eec1aa58c7ac2637973cad", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e46113a6ba5fff9d6d0ab1401674c026498565b3482f9e5c74e165080208ec43", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "627b3af56fcdd445cd3ac1832f3129a0ceb6dd97" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/valkey8-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/valkey8-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/valkey8.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/valkey8-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.2/valkey8-arm64.test-results.json" } }, "catalogRecord": "images/valkey8.json" }, { "imageId": "cc15-dev", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.10.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:84398acb1ee693442804965129813ed4f42bc7e213b4ee55da2dcedc0aa37b9c", "manifestDigest": "sha256:84398acb1ee693442804965129813ed4f42bc7e213b4ee55da2dcedc0aa37b9c", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-dev --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8de9a97404db61c438cf6676f036e3a46b5793835dee3a8e88300724d3c97909", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:366d8412fbbcdba0592f867bcfaed85bb34608c282e82da4843c0ed1989894be", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/cc15-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/cc15-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/cc15-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/cc15-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/cc15-dev-arm64.test-results.json" } }, "catalogRecord": "images/cc15-dev.json" }, { "imageId": "cc15-distroless", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.10.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:c91a6d901def6fa7b1907307e35ff9e29f7cde6930ab851c112ce666da1cda37", "manifestDigest": "sha256:c91a6d901def6fa7b1907307e35ff9e29f7cde6930ab851c112ce666da1cda37", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-distroless --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:f17b9ce21648ec3fe941802ee510c42bfb4b28dc565d508f1ea89d2b4db836a0", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:7919843e792172449141bd98230fff59d278884b7b247c97a90f1a073246dbc0", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/cc15-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/cc15-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/cc15-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/cc15-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/cc15-distroless-arm64.test-results.json" } }, "catalogRecord": "images/cc15-distroless.json" }, { "imageId": "cc15-slim", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.10.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:d8cd8f7ba4a22e53d9c8e30ac315794746053db977d4387e81c8b1efef2a565f", "manifestDigest": "sha256:d8cd8f7ba4a22e53d9c8e30ac315794746053db977d4387e81c8b1efef2a565f", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-slim --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:4a9af7150ce09e473bac91235b3ecc49936338173d7c1cae43e4fb63191871fe", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:26cf1b7829115e2cf75018e412b6b2ce244a246829188019f6625f805517fee5", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/cc15-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/cc15-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/cc15-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/cc15-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/cc15-slim-arm64.test-results.json" } }, "catalogRecord": "images/cc15-slim.json" }, { "imageId": "coreLTS-dev", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.10.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:65150a56450c369a40f6ab5e0c464012fe9bea1c7f09c64ecd04d4027c6b6de4", "manifestDigest": "sha256:65150a56450c369a40f6ab5e0c464012fe9bea1c7f09c64ecd04d4027c6b6de4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-dev --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:ca53a8d21c806e1a06211caf8d7102b70f91f7d0b09ad3619866b4729af87a56", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:aa1da977c720dba2b8ce52cdf06671ec743cfdf7ffbf997645090f83171e164b", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/coreLTS-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/coreLTS-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/coreLTS-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/coreLTS-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/coreLTS-dev-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-dev.json" }, { "imageId": "coreLTS-distroless", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.10.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:aada719381710ec3d35bf3c86b7031833f77c8315aa354802cb8d8dc04539efe", "manifestDigest": "sha256:aada719381710ec3d35bf3c86b7031833f77c8315aa354802cb8d8dc04539efe", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-distroless --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5b35c07573294ddc8a0b148d6b5a9d271c8df80a61b4db870c4e7b3caeb778f9", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:b98ffc9f6d177f5ffbedfeec7434b313401f80489b493401bd9026a87c300af1", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/coreLTS-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/coreLTS-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/coreLTS-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/coreLTS-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/coreLTS-distroless-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-distroless.json" }, { "imageId": "coreLTS-slim", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.10.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:cca7030e885b9602953159c5f1363e08f5527cd2e0189c435ecad90e222fe3b9", "manifestDigest": "sha256:cca7030e885b9602953159c5f1363e08f5527cd2e0189c435ecad90e222fe3b9", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-slim --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:c9f10b1799e65a3dd10ea88441acc579490b2a20f1fb4c3ebb3886308e7a372d", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:dc6d078e1b20f3c300ff3794453083a1c2028fb25ae9858b8c0155480aa85f30", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/coreLTS-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/coreLTS-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/coreLTS-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/coreLTS-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/coreLTS-slim-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-slim.json" }, { "imageId": "dotnet10-dev", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.10.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:2f593250535f992107afb780d41bda7108488c8c9b47c38c01414863fed5e936", "manifestDigest": "sha256:2f593250535f992107afb780d41bda7108488c8c9b47c38c01414863fed5e936", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-dev --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:6626da4a316bdd4b9a9b569df798bebd372239f3b50468b29a5ef3aa42d9feec", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5173d928b925a34c164fb5a40d6e001c49e13fef4d5a83a865c82c8d2b092f75", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet10-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet10-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet10-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet10-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet10-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-dev.json" }, { "imageId": "dotnet10-distroless", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.10.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:6ccb2ee5f7e3607b3d74889f3b33d05eef15eb44a4f6de899b7aff074e24d221", "manifestDigest": "sha256:6ccb2ee5f7e3607b3d74889f3b33d05eef15eb44a4f6de899b7aff074e24d221", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-distroless --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:4a439acbda220de40e1517ea29ed51d83cfee8c669c6fd9d2f1e1a50ca49f5e9", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:403e811a8200e63d1b3b6744ad3f75b153a1fa9e9fb51ea549e1fb7ec4a80437", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet10-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet10-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet10-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet10-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet10-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-distroless.json" }, { "imageId": "dotnet10-slim", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.10.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:1c6deb1f811f946e212c7d275d717332f1f98e391853b8aad2c76f271551386e", "manifestDigest": "sha256:1c6deb1f811f946e212c7d275d717332f1f98e391853b8aad2c76f271551386e", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-slim --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:94350e86cb99ca4f0d0f1957a36a5f6832247d2c8b8cbb08ff3cc0365ccdc7da", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ea5d1d3daeac3d13a08e06b32c3158f98d0392b17dce26d14c95055a50cfcd5c", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet10-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet10-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet10-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet10-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet10-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-slim.json" }, { "imageId": "dotnet8-dev", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.10.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:c2f5427f328a8accc6cc1e91d34a2108cc7168c3e0d26aee7ca3e09761386ff4", "manifestDigest": "sha256:c2f5427f328a8accc6cc1e91d34a2108cc7168c3e0d26aee7ca3e09761386ff4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-dev --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:1562735e0d9cc27532eb7d8f0379d957e6392fa3e866e00aa72ac000307ec861", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9a7224eb0e3415bb796a3664ca21c6bca12fcd94084dd60b2dfeb14680b709df", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet8-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet8-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet8-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet8-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet8-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-dev.json" }, { "imageId": "dotnet8-distroless", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.10.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:3ccec3a5fbead5775d268c1bb7d94b4dd8aeab1509fe5a263bc61c50748f1f07", "manifestDigest": "sha256:3ccec3a5fbead5775d268c1bb7d94b4dd8aeab1509fe5a263bc61c50748f1f07", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-distroless --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:4d4d166f93aef3ce3e78e8c9c551ef401d8e98b330a6a127ce1c4bee5cd18537", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e00d2fc0c82729f301430f32b7b400153228c2cd0114fe618a1b9dab278caea6", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet8-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet8-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet8-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet8-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet8-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-distroless.json" }, { "imageId": "dotnet8-slim", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.10.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:1edf3848dd2edc9861eeba77c65c3eec047b43806182e782301cb0899bf19b2a", "manifestDigest": "sha256:1edf3848dd2edc9861eeba77c65c3eec047b43806182e782301cb0899bf19b2a", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-slim --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:41455b471637f6167ae67b72d1b10804d2c75a9c4fcbbcf44095eda3379fabc4", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e39c7ce0b89d4340cba1b38bd0e1519b417c274fe4ad84052aacb48ea913178d", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet8-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet8-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet8-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet8-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/dotnet8-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-slim.json" }, { "imageId": "go1.25-dev", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.10.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:c66e17df07e157f80e4c466914b1903dd245b77716b2c07c19c35a9dbc4a0d8e", "manifestDigest": "sha256:c66e17df07e157f80e4c466914b1903dd245b77716b2c07c19c35a9dbc4a0d8e", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-dev --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:12b3f9894ace7338d9ca61a7e8862a25d6b0a1ee6ba5419d472fe61b69faf54c", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:b328c9301777f8e9e57f2b225a3ae84b07b4b4905379395ad7ea606cfc515a73", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.25-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-dev.json" }, { "imageId": "go1.25-distroless", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.10.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:29161a8efd1f3c6813dd374c93d6c1d7da4cf670fc779dddfe21ed7805d010f2", "manifestDigest": "sha256:29161a8efd1f3c6813dd374c93d6c1d7da4cf670fc779dddfe21ed7805d010f2", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-distroless --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:9874610c444c6f02f96b49edd566aa0321e8a72f70b364db3e31a96d646c122e", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:48dea3412171ff5c8ce27c0d3e1c2dd58ff3931cf2c231fd983576e1fb3f73fe", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-distroless.json" }, { "imageId": "go1.25-slim", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.10.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:4bea3d7d99e2945852355e726c906943e4e488fae92930a60a953b8cd303f43d", "manifestDigest": "sha256:4bea3d7d99e2945852355e726c906943e4e488fae92930a60a953b8cd303f43d", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-slim --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b4015bbd9b269ddd670f8fdb5a30a86ba075fd5fdd9e15f690de577b5d6190c0", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:40df6dc52b59d26c037415de2522e88a329cf6f1f2361ae4cebf87d42fc33210", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.25-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-slim.json" }, { "imageId": "go1.26-dev", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.10.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:f3ca2dc5fd4404291f219d6277e8c42071702a664ce75dbe65ac3d62e5599d77", "manifestDigest": "sha256:f3ca2dc5fd4404291f219d6277e8c42071702a664ce75dbe65ac3d62e5599d77", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-dev --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:7c96eddbb2c068ab290c4c213e75df2ffab229a3be82541a6421026d185ca6d3", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2edcbcaf87f4d5604142361c98d811d4a80970d276175e7e490ace7a135bfa68", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.26-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.26-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.26-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.26-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.26-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-dev.json" }, { "imageId": "go1.26-distroless", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.10.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:2312b424814a8492b57f12bee58a461f6d790ca002015c22d7a492ed8c798ba6", "manifestDigest": "sha256:2312b424814a8492b57f12bee58a461f6d790ca002015c22d7a492ed8c798ba6", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-distroless --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:9daf5f3178bb771ef2bd03cc2823a8581441716e7cd4ff24841d2b23a2fab23a", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9d9d9e6ff5a1435c5d1acca45ba06d08e599b621db10e77671a7a35b0adb60c6", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.26-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.26-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.26-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.26-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.26-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-distroless.json" }, { "imageId": "go1.26-slim", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.10.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:84ef917c4e62acd02e203c10120c33633ce59e40a66e2e03b98a98a37bd23542", "manifestDigest": "sha256:84ef917c4e62acd02e203c10120c33633ce59e40a66e2e03b98a98a37bd23542", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-slim --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5335af179a330de5f9b9bdc3616f1e4fb99d7c3a0f5e905fad25b9b4cd1ae534", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:944ab099fae4141bbe3afabcf8c63cb477106719faf128561b737e9832cf4092", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.26-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.26-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.26-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.26-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/go1.26-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-slim.json" }, { "imageId": "java21-dev", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.10.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:d6bacd4e1cd9394157823e7a13033abe2fbc985ea71a09d695d0fea57a995783", "manifestDigest": "sha256:d6bacd4e1cd9394157823e7a13033abe2fbc985ea71a09d695d0fea57a995783", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-dev --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5eade228681095af32fc579263b5902bb123e448c73804a6589ddcd2ba697a93", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:1157d5cd3e6bcb03aff411f48023ca88baa8fe5090e9582216c3a6c2e3f635c2", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java21-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java21-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java21-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java21-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java21-dev-arm64.test-results.json" } }, "catalogRecord": "images/java21-dev.json" }, { "imageId": "java21-distroless", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.10.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:f3df115c93dea9aa1f4213228d0d6c88da44006289935d27f61b345f27e439b3", "manifestDigest": "sha256:f3df115c93dea9aa1f4213228d0d6c88da44006289935d27f61b345f27e439b3", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-distroless --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e647b23bf7c3667babc2feddaa1f822775b5f8ca28c81683946517cd5c781efb", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9d5ca9ca7fc19bd8c78b21b201648e36ae77c7da906fc3a804c7a76225e90486", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java21-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java21-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java21-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java21-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java21-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java21-distroless.json" }, { "imageId": "java21-slim", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.10.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:cc3117409bad6360c31f2fbbff5938a3e9bb143b3b0678d15ae70e75510078f9", "manifestDigest": "sha256:cc3117409bad6360c31f2fbbff5938a3e9bb143b3b0678d15ae70e75510078f9", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-slim --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:405d6e80de2662183663a5950aae1783ee870263dbd58e2722b0db39a5cf399f", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:322f0cf5c8523aac7f0e19c3ba569eea9c30bfeb086e3e5828d692eda5a29517", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java21-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java21-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java21-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java21-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java21-slim-arm64.test-results.json" } }, "catalogRecord": "images/java21-slim.json" }, { "imageId": "java25-dev", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.10.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:a4494e0efc4b0c3a0f505be3610b67168b3c8093dda9332642c458f6b3e9210a", "manifestDigest": "sha256:a4494e0efc4b0c3a0f505be3610b67168b3c8093dda9332642c458f6b3e9210a", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-dev --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:216fe48128afc955b34965e2d4f6a7571d79cc36ce5ffbd46ddc3a0c96d1a79f", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:3d78fa02be7b077e6fb01e892228ea064c8eb152c36f655d220b2ec8d348733e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java25-dev-arm64.test-results.json" } }, "catalogRecord": "images/java25-dev.json" }, { "imageId": "java25-distroless", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.10.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:d720bd81fc5c75315a5345018507064647b439683e5af524cf9b858a8c454df6", "manifestDigest": "sha256:d720bd81fc5c75315a5345018507064647b439683e5af524cf9b858a8c454df6", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-distroless --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:50feabe8fc0258d216ee381c5b214ca0dae8784aa68e2e6e167ef3d59b0e0e97", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:cf45b901baa3eb96140e521d3a7c15cb0d684a0e371f3f99ffd9dcc4c1e1c0a5", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java25-distroless.json" }, { "imageId": "java25-slim", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.10.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:d8cd354c146345a982ed600f55e217d5d47790aa994b2ad0a14ccc80a211f4b8", "manifestDigest": "sha256:d8cd354c146345a982ed600f55e217d5d47790aa994b2ad0a14ccc80a211f4b8", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-slim --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d5ab504b0c65ab90a4ba8e077bfe6a14399c3440ea217093890df9cf45cc6bb5", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:24f074ec85dda9fb56088974ad22b9e13e5077c852c6d22a0e0051ef64c09481", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/java25-slim-arm64.test-results.json" } }, "catalogRecord": "images/java25-slim.json" }, { "imageId": "node22-dev", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.10.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:d378c9d6ab372736f5a326909ecdb90fab2c907816044f8b060afd05bece7949", "manifestDigest": "sha256:d378c9d6ab372736f5a326909ecdb90fab2c907816044f8b060afd05bece7949", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-dev --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b82960137870bd7c155e76a64c71672829e9ed83d9c4a7b32d6dc5538b825793", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:6ceacc06fc8c3a4722bcdb8647bdfaf9ea6a042f0681f656549a050069da042f", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node22-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node22-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node22-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node22-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node22-dev-arm64.test-results.json" } }, "catalogRecord": "images/node22-dev.json" }, { "imageId": "node22-distroless", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.10.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:a1403bba6db4b7f61d758f539a3e794c776f25c88f5fa78be543741c3b431ac4", "manifestDigest": "sha256:a1403bba6db4b7f61d758f539a3e794c776f25c88f5fa78be543741c3b431ac4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-distroless --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:dc61254465cc197294908e5fd1acaa30151e57f67bd799848d19b31cd560e1f3", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:aeae107b95aa265d54ce0266fba3558ae10a6c276a49c434801ecfaeb599cf10", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node22-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node22-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node22-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node22-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node22-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node22-distroless.json" }, { "imageId": "node22-slim", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.10.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:642b3f767c2eb81197e546917bb506a9ba03b37848e7ed262e7260dc62f5113b", "manifestDigest": "sha256:642b3f767c2eb81197e546917bb506a9ba03b37848e7ed262e7260dc62f5113b", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-slim --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:86c97e7affb3702b3990b4a97b11d709788c74de53ded2a49d327170c6a30bdb", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:3c3561dc94aeb8ad28775ae940853d5c87655fb7076d16a1660eb24400efd718", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node22-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node22-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node22-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node22-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node22-slim-arm64.test-results.json" } }, "catalogRecord": "images/node22-slim.json" }, { "imageId": "node24-dev", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.10.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:e026838e8588749a23cb7e174f5dfaa4115e10b8507065f06640f704bda507a3", "manifestDigest": "sha256:e026838e8588749a23cb7e174f5dfaa4115e10b8507065f06640f704bda507a3", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-dev --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:913ee411b12fa357b88d590878a5a0169e81313cb990b4009edd068e41047067", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e0c46babad81d2277e788d9a1d3761b073a13093740e87c1cd184c1bacc1831c", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node24-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node24-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node24-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node24-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node24-dev-arm64.test-results.json" } }, "catalogRecord": "images/node24-dev.json" }, { "imageId": "node24-distroless", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.10.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:152619b873ab28bca165441625418dfdccb0438f8b07362fafe7aaa42acfc9fb", "manifestDigest": "sha256:152619b873ab28bca165441625418dfdccb0438f8b07362fafe7aaa42acfc9fb", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-distroless --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:443b45306d99e7aca5004a3a6697bd463a055e8bb9153284ad8930730c52b904", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:8e852fab81b8d1e05de807f520d5358b11fffc8c56aa99e5375586de0af5e27e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node24-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node24-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node24-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node24-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node24-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node24-distroless.json" }, { "imageId": "node24-slim", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.10.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:48dfeab61e92a325d20dd98b2bcedacc78736cb2b181f1e11528419d85809b3e", "manifestDigest": "sha256:48dfeab61e92a325d20dd98b2bcedacc78736cb2b181f1e11528419d85809b3e", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-slim --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e5f92deb7d174d15184b658640b123dc9031532e931c50843e8717e6bd1689cb", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e9009b53ab0d98dd189d98d117c230b068c3e2e76c8708221a19b8f0c47314d5", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node24-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node24-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node24-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node24-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/node24-slim-arm64.test-results.json" } }, "catalogRecord": "images/node24-slim.json" }, { "imageId": "oauth2-proxy7", "kind": "service", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7:v0.10.1", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7@sha256:0f39bf438ce5471a8dfd33aa562dce8f0b92467d1059e629cd5b5410edcfa6ae", "manifestDigest": "sha256:0f39bf438ce5471a8dfd33aa562dce8f0b92467d1059e629cd5b5410edcfa6ae", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex oauth2-proxy7 --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5848328ae8890d4d97a7bbc858eedf82942151b6e734248a29cfa95263c92e15", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2cc9acc979e62a38d6de74e753c62072780b62658dd6bc1f30417430fed4fcbb", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/oauth2-proxy7-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/oauth2-proxy7-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/oauth2-proxy7.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/oauth2-proxy7-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/oauth2-proxy7-arm64.test-results.json" } }, "catalogRecord": "images/oauth2-proxy7.json" }, { "imageId": "postgres16", "kind": "service", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16:v0.10.1", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16@sha256:7746ff36f6bc400df5c6944aad622ec112468acebddb779951ea1d31e9f02974", "manifestDigest": "sha256:7746ff36f6bc400df5c6944aad622ec112468acebddb779951ea1d31e9f02974", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex postgres16 --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:1d90f3112d92d4342e939867ae69502fac13e24b247594ad0d91e8f881427614", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:6dc412e998d52d02902cd321e65eb90131dbe260fc9de598c57db01d74875049", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/postgres16-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/postgres16-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/postgres16.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/postgres16-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/postgres16-arm64.test-results.json" } }, "catalogRecord": "images/postgres16.json" }, { "imageId": "rust1.95-dev", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.10.1-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:aeb6ee50ac00c7da52d0f5e4a2f49a2eea81e432f1b4fdb00debbd381f8dc9bf", "manifestDigest": "sha256:aeb6ee50ac00c7da52d0f5e4a2f49a2eea81e432f1b4fdb00debbd381f8dc9bf", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-dev --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:7cb8c89f7155c00e214b94fd290b06c29caed76a2658f113f3fe8c5872f6f518", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2f442dc5e1ba193b21db6fc1da6f20e03484788a286777c898eb34dca07f2fd5", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/rust1.95-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/rust1.95-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/rust1.95-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/rust1.95-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/rust1.95-dev-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-dev.json" }, { "imageId": "rust1.95-distroless", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.10.1-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:25630edd86567afd38d2443d5a1250ecd673a501aa90272c81d351502c893790", "manifestDigest": "sha256:25630edd86567afd38d2443d5a1250ecd673a501aa90272c81d351502c893790", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-distroless --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:467f59b486c0e8186ad54f1bb7036760ad9db80558d17ec52247db807a70d2b9", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:18d86c02be0b0a06ebed17b024de44e40b0dfe9beea9557a00cd6339d168540e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/rust1.95-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/rust1.95-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/rust1.95-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/rust1.95-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/rust1.95-distroless-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-distroless.json" }, { "imageId": "rust1.95-slim", "kind": "runtime", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.10.1-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:0bc34e97cb3a9cfdf0dd0b5aa6cd75ac7d03b0631473b0ebc26f171dee50657a", "manifestDigest": "sha256:0bc34e97cb3a9cfdf0dd0b5aa6cd75ac7d03b0631473b0ebc26f171dee50657a", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-slim --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d48cde8344f558c2903e426e1f110dd7e36a57bfe1263e27996d920d033fdcad", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:a3d7e2f898e88f446d81f7ba9721e81e8e028aade1b7037169c8e858d026790b", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/rust1.95-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/rust1.95-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/rust1.95-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/rust1.95-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/rust1.95-slim-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-slim.json" }, { "imageId": "valkey8", "kind": "service", "tag": "v0.10.1", "publishedAt": "2026-06-07T16:42:20Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8:v0.10.1", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8@sha256:b37cbfd2bf5a761140097023b7c8feb979752a220fb232f9cc975efb1e4fce3c", "manifestDigest": "sha256:b37cbfd2bf5a761140097023b7c8feb979752a220fb232f9cc975efb1e4fce3c", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex valkey8 --tag v0.10.1" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d35fde3e075e0b365fb662744962d08808627a9d64eec1aa58c7ac2637973cad", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e46113a6ba5fff9d6d0ab1401674c026498565b3482f9e5c74e165080208ec43", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/valkey8-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/valkey8-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/valkey8.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/valkey8-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.1/valkey8-arm64.test-results.json" } }, "catalogRecord": "images/valkey8.json" }, { "imageId": "cc15-dev", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.10.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:84398acb1ee693442804965129813ed4f42bc7e213b4ee55da2dcedc0aa37b9c", "manifestDigest": "sha256:84398acb1ee693442804965129813ed4f42bc7e213b4ee55da2dcedc0aa37b9c", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-dev --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:8de9a97404db61c438cf6676f036e3a46b5793835dee3a8e88300724d3c97909", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:366d8412fbbcdba0592f867bcfaed85bb34608c282e82da4843c0ed1989894be", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/cc15-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/cc15-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/cc15-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/cc15-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/cc15-dev-arm64.test-results.json" } }, "catalogRecord": "images/cc15-dev.json" }, { "imageId": "cc15-distroless", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.10.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:c91a6d901def6fa7b1907307e35ff9e29f7cde6930ab851c112ce666da1cda37", "manifestDigest": "sha256:c91a6d901def6fa7b1907307e35ff9e29f7cde6930ab851c112ce666da1cda37", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-distroless --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:f17b9ce21648ec3fe941802ee510c42bfb4b28dc565d508f1ea89d2b4db836a0", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:7919843e792172449141bd98230fff59d278884b7b247c97a90f1a073246dbc0", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/cc15-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/cc15-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/cc15-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/cc15-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/cc15-distroless-arm64.test-results.json" } }, "catalogRecord": "images/cc15-distroless.json" }, { "imageId": "cc15-slim", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-cc15", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.10.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-cc15@sha256:d8cd8f7ba4a22e53d9c8e30ac315794746053db977d4387e81c8b1efef2a565f", "manifestDigest": "sha256:d8cd8f7ba4a22e53d9c8e30ac315794746053db977d4387e81c8b1efef2a565f", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex cc15-slim --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:4a9af7150ce09e473bac91235b3ecc49936338173d7c1cae43e4fb63191871fe", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:26cf1b7829115e2cf75018e412b6b2ce244a246829188019f6625f805517fee5", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/cc15-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/cc15-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/cc15-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/cc15-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/cc15-slim-arm64.test-results.json" } }, "catalogRecord": "images/cc15-slim.json" }, { "imageId": "coreLTS-dev", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.10.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:65150a56450c369a40f6ab5e0c464012fe9bea1c7f09c64ecd04d4027c6b6de4", "manifestDigest": "sha256:65150a56450c369a40f6ab5e0c464012fe9bea1c7f09c64ecd04d4027c6b6de4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-dev --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:ca53a8d21c806e1a06211caf8d7102b70f91f7d0b09ad3619866b4729af87a56", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:aa1da977c720dba2b8ce52cdf06671ec743cfdf7ffbf997645090f83171e164b", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/coreLTS-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/coreLTS-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/coreLTS-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/coreLTS-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/coreLTS-dev-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-dev.json" }, { "imageId": "coreLTS-distroless", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.10.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:aada719381710ec3d35bf3c86b7031833f77c8315aa354802cb8d8dc04539efe", "manifestDigest": "sha256:aada719381710ec3d35bf3c86b7031833f77c8315aa354802cb8d8dc04539efe", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-distroless --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5b35c07573294ddc8a0b148d6b5a9d271c8df80a61b4db870c4e7b3caeb778f9", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:b98ffc9f6d177f5ffbedfeec7434b313401f80489b493401bd9026a87c300af1", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/coreLTS-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/coreLTS-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/coreLTS-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/coreLTS-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/coreLTS-distroless-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-distroless.json" }, { "imageId": "coreLTS-slim", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-corelts", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.10.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-corelts@sha256:cca7030e885b9602953159c5f1363e08f5527cd2e0189c435ecad90e222fe3b9", "manifestDigest": "sha256:cca7030e885b9602953159c5f1363e08f5527cd2e0189c435ecad90e222fe3b9", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex coreLTS-slim --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:c9f10b1799e65a3dd10ea88441acc579490b2a20f1fb4c3ebb3886308e7a372d", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:dc6d078e1b20f3c300ff3794453083a1c2028fb25ae9858b8c0155480aa85f30", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/coreLTS-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/coreLTS-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/coreLTS-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/coreLTS-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/coreLTS-slim-arm64.test-results.json" } }, "catalogRecord": "images/coreLTS-slim.json" }, { "imageId": "dotnet10-dev", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.10.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:2f593250535f992107afb780d41bda7108488c8c9b47c38c01414863fed5e936", "manifestDigest": "sha256:2f593250535f992107afb780d41bda7108488c8c9b47c38c01414863fed5e936", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-dev --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:6626da4a316bdd4b9a9b569df798bebd372239f3b50468b29a5ef3aa42d9feec", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:5173d928b925a34c164fb5a40d6e001c49e13fef4d5a83a865c82c8d2b092f75", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet10-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet10-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet10-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet10-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet10-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-dev.json" }, { "imageId": "dotnet10-distroless", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.10.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:6ccb2ee5f7e3607b3d74889f3b33d05eef15eb44a4f6de899b7aff074e24d221", "manifestDigest": "sha256:6ccb2ee5f7e3607b3d74889f3b33d05eef15eb44a4f6de899b7aff074e24d221", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-distroless --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:4a439acbda220de40e1517ea29ed51d83cfee8c669c6fd9d2f1e1a50ca49f5e9", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:403e811a8200e63d1b3b6744ad3f75b153a1fa9e9fb51ea549e1fb7ec4a80437", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet10-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet10-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet10-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet10-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet10-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-distroless.json" }, { "imageId": "dotnet10-slim", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.10.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet10@sha256:1c6deb1f811f946e212c7d275d717332f1f98e391853b8aad2c76f271551386e", "manifestDigest": "sha256:1c6deb1f811f946e212c7d275d717332f1f98e391853b8aad2c76f271551386e", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet10-slim --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:94350e86cb99ca4f0d0f1957a36a5f6832247d2c8b8cbb08ff3cc0365ccdc7da", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:ea5d1d3daeac3d13a08e06b32c3158f98d0392b17dce26d14c95055a50cfcd5c", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet10-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet10-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet10-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet10-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet10-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet10-slim.json" }, { "imageId": "dotnet8-dev", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.10.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:c2f5427f328a8accc6cc1e91d34a2108cc7168c3e0d26aee7ca3e09761386ff4", "manifestDigest": "sha256:c2f5427f328a8accc6cc1e91d34a2108cc7168c3e0d26aee7ca3e09761386ff4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-dev --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:1562735e0d9cc27532eb7d8f0379d957e6392fa3e866e00aa72ac000307ec861", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9a7224eb0e3415bb796a3664ca21c6bca12fcd94084dd60b2dfeb14680b709df", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet8-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet8-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet8-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet8-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet8-dev-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-dev.json" }, { "imageId": "dotnet8-distroless", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.10.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:3ccec3a5fbead5775d268c1bb7d94b4dd8aeab1509fe5a263bc61c50748f1f07", "manifestDigest": "sha256:3ccec3a5fbead5775d268c1bb7d94b4dd8aeab1509fe5a263bc61c50748f1f07", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-distroless --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:4d4d166f93aef3ce3e78e8c9c551ef401d8e98b330a6a127ce1c4bee5cd18537", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e00d2fc0c82729f301430f32b7b400153228c2cd0114fe618a1b9dab278caea6", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet8-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet8-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet8-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet8-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet8-distroless-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-distroless.json" }, { "imageId": "dotnet8-slim", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.10.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-dotnet8@sha256:1edf3848dd2edc9861eeba77c65c3eec047b43806182e782301cb0899bf19b2a", "manifestDigest": "sha256:1edf3848dd2edc9861eeba77c65c3eec047b43806182e782301cb0899bf19b2a", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex dotnet8-slim --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:41455b471637f6167ae67b72d1b10804d2c75a9c4fcbbcf44095eda3379fabc4", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e39c7ce0b89d4340cba1b38bd0e1519b417c274fe4ad84052aacb48ea913178d", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet8-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet8-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet8-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet8-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/dotnet8-slim-arm64.test-results.json" } }, "catalogRecord": "images/dotnet8-slim.json" }, { "imageId": "go1.25-dev", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.10.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:c66e17df07e157f80e4c466914b1903dd245b77716b2c07c19c35a9dbc4a0d8e", "manifestDigest": "sha256:c66e17df07e157f80e4c466914b1903dd245b77716b2c07c19c35a9dbc4a0d8e", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-dev --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:12b3f9894ace7338d9ca61a7e8862a25d6b0a1ee6ba5419d472fe61b69faf54c", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:b328c9301777f8e9e57f2b225a3ae84b07b4b4905379395ad7ea606cfc515a73", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.25-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-dev.json" }, { "imageId": "go1.25-distroless", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.10.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:29161a8efd1f3c6813dd374c93d6c1d7da4cf670fc779dddfe21ed7805d010f2", "manifestDigest": "sha256:29161a8efd1f3c6813dd374c93d6c1d7da4cf670fc779dddfe21ed7805d010f2", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-distroless --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:9874610c444c6f02f96b49edd566aa0321e8a72f70b364db3e31a96d646c122e", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:48dea3412171ff5c8ce27c0d3e1c2dd58ff3931cf2c231fd983576e1fb3f73fe", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-distroless.json" }, { "imageId": "go1.25-slim", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.10.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.25@sha256:4bea3d7d99e2945852355e726c906943e4e488fae92930a60a953b8cd303f43d", "manifestDigest": "sha256:4bea3d7d99e2945852355e726c906943e4e488fae92930a60a953b8cd303f43d", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.25-slim --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b4015bbd9b269ddd670f8fdb5a30a86ba075fd5fdd9e15f690de577b5d6190c0", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:40df6dc52b59d26c037415de2522e88a329cf6f1f2361ae4cebf87d42fc33210", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.25-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.25-slim.json" }, { "imageId": "go1.26-dev", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.10.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:f3ca2dc5fd4404291f219d6277e8c42071702a664ce75dbe65ac3d62e5599d77", "manifestDigest": "sha256:f3ca2dc5fd4404291f219d6277e8c42071702a664ce75dbe65ac3d62e5599d77", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-dev --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:7c96eddbb2c068ab290c4c213e75df2ffab229a3be82541a6421026d185ca6d3", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2edcbcaf87f4d5604142361c98d811d4a80970d276175e7e490ace7a135bfa68", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.26-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.26-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.26-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.26-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.26-dev-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-dev.json" }, { "imageId": "go1.26-distroless", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.10.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:2312b424814a8492b57f12bee58a461f6d790ca002015c22d7a492ed8c798ba6", "manifestDigest": "sha256:2312b424814a8492b57f12bee58a461f6d790ca002015c22d7a492ed8c798ba6", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-distroless --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:9daf5f3178bb771ef2bd03cc2823a8581441716e7cd4ff24841d2b23a2fab23a", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9d9d9e6ff5a1435c5d1acca45ba06d08e599b621db10e77671a7a35b0adb60c6", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.26-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.26-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.26-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.26-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.26-distroless-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-distroless.json" }, { "imageId": "go1.26-slim", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.10.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-go1.26@sha256:84ef917c4e62acd02e203c10120c33633ce59e40a66e2e03b98a98a37bd23542", "manifestDigest": "sha256:84ef917c4e62acd02e203c10120c33633ce59e40a66e2e03b98a98a37bd23542", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex go1.26-slim --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5335af179a330de5f9b9bdc3616f1e4fb99d7c3a0f5e905fad25b9b4cd1ae534", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:944ab099fae4141bbe3afabcf8c63cb477106719faf128561b737e9832cf4092", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.26-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.26-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.26-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.26-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/go1.26-slim-arm64.test-results.json" } }, "catalogRecord": "images/go1.26-slim.json" }, { "imageId": "java21-dev", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.10.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:d6bacd4e1cd9394157823e7a13033abe2fbc985ea71a09d695d0fea57a995783", "manifestDigest": "sha256:d6bacd4e1cd9394157823e7a13033abe2fbc985ea71a09d695d0fea57a995783", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-dev --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5eade228681095af32fc579263b5902bb123e448c73804a6589ddcd2ba697a93", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:1157d5cd3e6bcb03aff411f48023ca88baa8fe5090e9582216c3a6c2e3f635c2", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java21-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java21-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java21-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java21-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java21-dev-arm64.test-results.json" } }, "catalogRecord": "images/java21-dev.json" }, { "imageId": "java21-distroless", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.10.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:f3df115c93dea9aa1f4213228d0d6c88da44006289935d27f61b345f27e439b3", "manifestDigest": "sha256:f3df115c93dea9aa1f4213228d0d6c88da44006289935d27f61b345f27e439b3", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-distroless --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e647b23bf7c3667babc2feddaa1f822775b5f8ca28c81683946517cd5c781efb", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:9d5ca9ca7fc19bd8c78b21b201648e36ae77c7da906fc3a804c7a76225e90486", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java21-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java21-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java21-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java21-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java21-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java21-distroless.json" }, { "imageId": "java21-slim", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java21", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.10.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java21@sha256:cc3117409bad6360c31f2fbbff5938a3e9bb143b3b0678d15ae70e75510078f9", "manifestDigest": "sha256:cc3117409bad6360c31f2fbbff5938a3e9bb143b3b0678d15ae70e75510078f9", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java21-slim --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:405d6e80de2662183663a5950aae1783ee870263dbd58e2722b0db39a5cf399f", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:322f0cf5c8523aac7f0e19c3ba569eea9c30bfeb086e3e5828d692eda5a29517", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java21-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java21-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java21-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java21-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java21-slim-arm64.test-results.json" } }, "catalogRecord": "images/java21-slim.json" }, { "imageId": "java25-dev", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.10.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:a4494e0efc4b0c3a0f505be3610b67168b3c8093dda9332642c458f6b3e9210a", "manifestDigest": "sha256:a4494e0efc4b0c3a0f505be3610b67168b3c8093dda9332642c458f6b3e9210a", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-dev --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:216fe48128afc955b34965e2d4f6a7571d79cc36ce5ffbd46ddc3a0c96d1a79f", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:3d78fa02be7b077e6fb01e892228ea064c8eb152c36f655d220b2ec8d348733e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java25-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java25-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java25-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java25-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java25-dev-arm64.test-results.json" } }, "catalogRecord": "images/java25-dev.json" }, { "imageId": "java25-distroless", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.10.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:d720bd81fc5c75315a5345018507064647b439683e5af524cf9b858a8c454df6", "manifestDigest": "sha256:d720bd81fc5c75315a5345018507064647b439683e5af524cf9b858a8c454df6", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-distroless --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:50feabe8fc0258d216ee381c5b214ca0dae8784aa68e2e6e167ef3d59b0e0e97", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:cf45b901baa3eb96140e521d3a7c15cb0d684a0e371f3f99ffd9dcc4c1e1c0a5", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java25-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java25-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java25-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java25-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java25-distroless-arm64.test-results.json" } }, "catalogRecord": "images/java25-distroless.json" }, { "imageId": "java25-slim", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-java25", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.10.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-java25@sha256:d8cd354c146345a982ed600f55e217d5d47790aa994b2ad0a14ccc80a211f4b8", "manifestDigest": "sha256:d8cd354c146345a982ed600f55e217d5d47790aa994b2ad0a14ccc80a211f4b8", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex java25-slim --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d5ab504b0c65ab90a4ba8e077bfe6a14399c3440ea217093890df9cf45cc6bb5", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:24f074ec85dda9fb56088974ad22b9e13e5077c852c6d22a0e0051ef64c09481", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java25-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java25-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java25-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java25-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/java25-slim-arm64.test-results.json" } }, "catalogRecord": "images/java25-slim.json" }, { "imageId": "node22-dev", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.10.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:d378c9d6ab372736f5a326909ecdb90fab2c907816044f8b060afd05bece7949", "manifestDigest": "sha256:d378c9d6ab372736f5a326909ecdb90fab2c907816044f8b060afd05bece7949", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-dev --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:b82960137870bd7c155e76a64c71672829e9ed83d9c4a7b32d6dc5538b825793", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:6ceacc06fc8c3a4722bcdb8647bdfaf9ea6a042f0681f656549a050069da042f", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node22-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node22-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node22-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node22-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node22-dev-arm64.test-results.json" } }, "catalogRecord": "images/node22-dev.json" }, { "imageId": "node22-distroless", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.10.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:a1403bba6db4b7f61d758f539a3e794c776f25c88f5fa78be543741c3b431ac4", "manifestDigest": "sha256:a1403bba6db4b7f61d758f539a3e794c776f25c88f5fa78be543741c3b431ac4", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-distroless --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:dc61254465cc197294908e5fd1acaa30151e57f67bd799848d19b31cd560e1f3", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:aeae107b95aa265d54ce0266fba3558ae10a6c276a49c434801ecfaeb599cf10", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node22-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node22-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node22-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node22-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node22-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node22-distroless.json" }, { "imageId": "node22-slim", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node22", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.10.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node22@sha256:642b3f767c2eb81197e546917bb506a9ba03b37848e7ed262e7260dc62f5113b", "manifestDigest": "sha256:642b3f767c2eb81197e546917bb506a9ba03b37848e7ed262e7260dc62f5113b", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node22-slim --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:86c97e7affb3702b3990b4a97b11d709788c74de53ded2a49d327170c6a30bdb", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:3c3561dc94aeb8ad28775ae940853d5c87655fb7076d16a1660eb24400efd718", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node22-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node22-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node22-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node22-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node22-slim-arm64.test-results.json" } }, "catalogRecord": "images/node22-slim.json" }, { "imageId": "node24-dev", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.10.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:e026838e8588749a23cb7e174f5dfaa4115e10b8507065f06640f704bda507a3", "manifestDigest": "sha256:e026838e8588749a23cb7e174f5dfaa4115e10b8507065f06640f704bda507a3", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-dev --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:913ee411b12fa357b88d590878a5a0169e81313cb990b4009edd068e41047067", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e0c46babad81d2277e788d9a1d3761b073a13093740e87c1cd184c1bacc1831c", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node24-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node24-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node24-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node24-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node24-dev-arm64.test-results.json" } }, "catalogRecord": "images/node24-dev.json" }, { "imageId": "node24-distroless", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.10.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:152619b873ab28bca165441625418dfdccb0438f8b07362fafe7aaa42acfc9fb", "manifestDigest": "sha256:152619b873ab28bca165441625418dfdccb0438f8b07362fafe7aaa42acfc9fb", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-distroless --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:443b45306d99e7aca5004a3a6697bd463a055e8bb9153284ad8930730c52b904", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:8e852fab81b8d1e05de807f520d5358b11fffc8c56aa99e5375586de0af5e27e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "2f2f2d60d58d78077f89467d5fb249e1659356d3" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node24-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node24-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node24-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node24-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node24-distroless-arm64.test-results.json" } }, "catalogRecord": "images/node24-distroless.json" }, { "imageId": "node24-slim", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-node24", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.10.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-node24@sha256:48dfeab61e92a325d20dd98b2bcedacc78736cb2b181f1e11528419d85809b3e", "manifestDigest": "sha256:48dfeab61e92a325d20dd98b2bcedacc78736cb2b181f1e11528419d85809b3e", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex node24-slim --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:e5f92deb7d174d15184b658640b123dc9031532e931c50843e8717e6bd1689cb", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e9009b53ab0d98dd189d98d117c230b068c3e2e76c8708221a19b8f0c47314d5", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node24-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node24-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node24-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node24-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/node24-slim-arm64.test-results.json" } }, "catalogRecord": "images/node24-slim.json" }, { "imageId": "oauth2-proxy7", "kind": "service", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7:v0.10.0", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-oauth2-proxy7@sha256:0f39bf438ce5471a8dfd33aa562dce8f0b92467d1059e629cd5b5410edcfa6ae", "manifestDigest": "sha256:0f39bf438ce5471a8dfd33aa562dce8f0b92467d1059e629cd5b5410edcfa6ae", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex oauth2-proxy7 --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:5848328ae8890d4d97a7bbc858eedf82942151b6e734248a29cfa95263c92e15", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2cc9acc979e62a38d6de74e753c62072780b62658dd6bc1f30417430fed4fcbb", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/oauth2-proxy7-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/oauth2-proxy7-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/oauth2-proxy7.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/oauth2-proxy7-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/oauth2-proxy7-arm64.test-results.json" } }, "catalogRecord": "images/oauth2-proxy7.json" }, { "imageId": "postgres16", "kind": "service", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16:v0.10.0", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-postgres16@sha256:7746ff36f6bc400df5c6944aad622ec112468acebddb779951ea1d31e9f02974", "manifestDigest": "sha256:7746ff36f6bc400df5c6944aad622ec112468acebddb779951ea1d31e9f02974", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex postgres16 --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:1d90f3112d92d4342e939867ae69502fac13e24b247594ad0d91e8f881427614", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:6dc412e998d52d02902cd321e65eb90131dbe260fc9de598c57db01d74875049", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/postgres16-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/postgres16-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/postgres16.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/postgres16-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/postgres16-arm64.test-results.json" } }, "catalogRecord": "images/postgres16.json" }, { "imageId": "rust1.95-dev", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.10.0-dev", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:aeb6ee50ac00c7da52d0f5e4a2f49a2eea81e432f1b4fdb00debbd381f8dc9bf", "manifestDigest": "sha256:aeb6ee50ac00c7da52d0f5e4a2f49a2eea81e432f1b4fdb00debbd381f8dc9bf", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-dev --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:7cb8c89f7155c00e214b94fd290b06c29caed76a2658f113f3fe8c5872f6f518", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:2f442dc5e1ba193b21db6fc1da6f20e03484788a286777c898eb34dca07f2fd5", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/rust1.95-dev-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/rust1.95-dev-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/rust1.95-dev.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/rust1.95-dev-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/rust1.95-dev-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-dev.json" }, { "imageId": "rust1.95-distroless", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.10.0-distroless", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:25630edd86567afd38d2443d5a1250ecd673a501aa90272c81d351502c893790", "manifestDigest": "sha256:25630edd86567afd38d2443d5a1250ecd673a501aa90272c81d351502c893790", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-distroless --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:467f59b486c0e8186ad54f1bb7036760ad9db80558d17ec52247db807a70d2b9", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:18d86c02be0b0a06ebed17b024de44e40b0dfe9beea9557a00cd6339d168540e", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/rust1.95-distroless-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/rust1.95-distroless-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/rust1.95-distroless.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/rust1.95-distroless-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/rust1.95-distroless-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-distroless.json" }, { "imageId": "rust1.95-slim", "kind": "runtime", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.10.0-slim", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-rust1.95@sha256:0bc34e97cb3a9cfdf0dd0b5aa6cd75ac7d03b0631473b0ebc26f171dee50657a", "manifestDigest": "sha256:0bc34e97cb3a9cfdf0dd0b5aa6cd75ac7d03b0631473b0ebc26f171dee50657a", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex rust1.95-slim --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d48cde8344f558c2903e426e1f110dd7e36a57bfe1263e27996d920d033fdcad", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:a3d7e2f898e88f446d81f7ba9721e81e8e028aade1b7037169c8e858d026790b", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "0964779396905c2f196b09bde96a62d557947354" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/rust1.95-slim-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/rust1.95-slim-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/rust1.95-slim.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/rust1.95-slim-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/rust1.95-slim-arm64.test-results.json" } }, "catalogRecord": "images/rust1.95-slim.json" }, { "imageId": "valkey8", "kind": "service", "tag": "v0.10.0", "publishedAt": "2026-06-07T14:37:59Z", "isLatest": false, "fullName": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8", "imageRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8:v0.10.0", "immutableRef": "ghcr.io/northcutted/clearcutt/clearcutt-valkey8@sha256:b37cbfd2bf5a761140097023b7c8feb979752a220fb232f9cc975efb1e4fce3c", "manifestDigest": "sha256:b37cbfd2bf5a761140097023b7c8feb979752a220fb232f9cc975efb1e4fce3c", "channels": { "signature": { "expected": true, "observed": true, "status": "verified", "source": "sigstore", "detail": "catalog release record reports Sigstore signature evidence" }, "provenance": { "expected": true, "observed": true, "status": "verified", "source": "slsa", "detail": "catalog release record reports SLSA provenance evidence" }, "sbom": { "expected": true, "observed": true, "status": "verified", "source": "spdx-sbom", "detail": "2/2 architecture SBOMs" }, "tests": { "expected": true, "observed": true, "status": "verified", "source": "test-results", "detail": "2/2 passing test results" }, "vulnerabilities": { "expected": true, "observed": false, "status": "missing", "source": "none", "detail": "0/2 vulnerability scans" }, "exceptions": { "expected": false, "observed": false, "status": "not_applicable", "detail": "no vulnerability exceptions recorded for this release" }, "vex": { "expected": false, "observed": false, "status": "not_applicable", "detail": "generate on demand with clearcutt vex valkey8 --tag v0.10.0" } }, "missing": [ "vulnerabilities" ], "architectures": [ { "arch": "amd64", "os": "linux", "imageDigest": "sha256:d35fde3e075e0b365fb662744962d08808627a9d64eec1aa58c7ac2637973cad", "sbom": true, "tests": true, "vulnerabilities": false }, { "arch": "arm64", "os": "linux", "imageDigest": "sha256:e46113a6ba5fff9d6d0ab1401674c026498565b3482f9e5c74e165080208ec43", "sbom": true, "tests": true, "vulnerabilities": false } ], "signature": { "subject": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "issuer": "https://token.actions.githubusercontent.com" }, "provenance": { "predicateType": "https://slsa.dev/provenance/v1", "builderId": "https://github.com/northcutted/clearcutt/.github/workflows/release.yml@refs/heads/main", "slsaLevel": 3, "sourceUri": "https://github.com/northcutted/clearcutt", "sourceRevision": "87314711d48c726722f4be05349ca73d3d6d004d" }, "assets": { "sbom": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/valkey8-amd64.sbom.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/valkey8-arm64.sbom.json" }, "provenance": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/valkey8.intoto.jsonl", "testResults": { "amd64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/valkey8-amd64.test-results.json", "arm64": "https://github.com/northcutted/clearcutt/releases/download/v0.10.0/valkey8-arm64.test-results.json" } }, "catalogRecord": "images/valkey8.json" } ] }