{ "schemaVersion": 1, "date": "2026-11-01", "frozenAt": "2026-10-24T18:00:00Z", "baselineDate": "2026-10-18", "population": { "images": 1000, "frame": "the 181 official images and the 819 most-pulled community repositories our searches of Docker Hub find (each with at least 57.9 million pulls)", "scannedAt": "2026-10-24", "scanned": 923, "notScanned": 77, "notScannedReasons": { "noLinuxAmd64Tag": 55, "pullOrScanFailed": 22 }, "maintainedRule": "frozen tag pushed on or after 2026-07-16" }, "forecast": { "metric": "images carrying a time-zone copy that gives the wrong UTC offset for at least one Canadian zone at 2026-11-01T08:00Z, at the tag current on 2026-11-01", "atFreeze": 557, "atFreezeMaintained": 291, "point": 532, "interval": [ 515, 543 ], "level": 0.9, "maintained": { "point": 272, "interval": [ 255, 281 ], "scope": "Counts only images leaving through a published fix route. Images leaving through changes outside the route table (including images at the floor) and images becoming wrong are simulated for the whole frame but not split by maintained status, so the full maintained outcome can fall outside this range." }, "floor": 374, "scenarios": [ { "name": "Debian accepts the 2026e update but no Debian base image rebuild happens before 1 November; the official Eclipse Temurin images do not publish the October Java update before 1 November", "key": "debArchiveOnly+noTem", "p": 0.5678, "point": 537, "interval": [ 528, 544 ] }, { "name": "Debian accepts the 2026e update but no Debian base image rebuild happens before 1 November; the official Eclipse Temurin images publish the October Java update before 1 November", "key": "debArchiveOnly+tem", "p": 0.4322, "point": 523, "interval": [ 513, 533 ] } ], "comparator": { "name": "the freeze-day count: nothing changes after the freeze", "point": 557 } }, "atFreezeByZone": { "America/Edmonton": 457, "America/Inuvik": 550, "America/Winnipeg": 557, "America/Vancouver": 0 }, "osCheck": { "asOf": "2026-10-24", "wrong": 557, "osOnly": 196, "mixed": 187, "nonOsOnly": 174, "wrongOutsideOsPackage": 361 }, "fixCalls": [ { "repository": "stakater/reloader", "callFixedBy": "2026-11-01", "p": 0.437, "call": "not fixed", "routes": [ "DISTROLESS13" ], "group": "DISTROLESS13_GATED" }, { "repository": "fluent/fluent-bit", "callFixedBy": "2026-11-01", "p": 0.412, "call": "not fixed", "routes": [ "DISTROLESS13" ], "group": "DISTROLESS13_GATED" }, { "repository": "library/nginx", "callFixedBy": "2026-11-01", "p": 0.0, "call": "not fixed", "routes": [ "DEB13" ], "group": "DEBIAN_GATED" }, { "repository": "library/memcached", "callFixedBy": "2026-11-01", "p": 0.0, "call": "not fixed", "routes": [ "DEB13" ], "group": "DEBIAN_GATED" }, { "repository": "library/postgres", "callFixedBy": "2026-11-01", "p": 0.0, "call": "not fixed", "routes": [ "DEB13", "NONE" ], "group": "FLOOR" }, { "repository": "library/redis", "callFixedBy": "2026-11-01", "p": 0.404, "call": "not fixed", "routes": [ "DEB13" ], "group": "DEBIAN_GATED" }, { "repository": "library/python", "callFixedBy": "2026-11-01", "p": 0.0, "call": "not fixed", "routes": [ "DEB13", "NONE" ], "group": "FLOOR" }, { "repository": "library/node", "callFixedBy": "2026-11-01", "p": 0.0, "call": "not fixed", "routes": [ "DEB13", "NONE" ], "group": "FLOOR" }, { "repository": "jenkins/jenkins", "callFixedBy": "2026-11-01", "p": 0.0, "call": "not fixed", "routes": [ "DEB13", "JDK" ], "group": "FLOOR" }, { "repository": "library/mongo", "callFixedBy": "2026-11-01", "p": 0.06, "call": "not fixed", "routes": [ "VENDOR" ], "group": "VENDOR_UNKNOWN" }, { "repository": "grafana/loki", "callFixedBy": "2026-11-01", "p": 0.258, "call": "not fixed", "routes": [ "DISTROLESS13" ], "group": "DISTROLESS13_GATED" }, { "repository": "library/httpd", "callFixedBy": "2026-11-01", "p": 0.0, "call": "not fixed", "routes": [ "DEB13" ], "group": "DEBIAN_GATED" }, { "repository": "timberio/vector", "callFixedBy": "2026-11-01", "p": 0.0, "call": "not fixed", "routes": [ "DISTROLESS12" ], "group": "FLOOR" }, { "repository": "library/docker", "callFixedBy": "2026-11-01", "p": 0.0, "call": "not fixed", "routes": [ "GO" ], "group": "FLOOR" }, { "repository": "newrelic/infrastructure-bundle", "callFixedBy": "2026-11-01", "p": 0.0, "call": "not fixed", "routes": [ "JDK" ], "group": "FLOOR" }, { "repository": "openpolicyagent/gatekeeper", "callFixedBy": "2026-11-01", "p": 0.0, "call": "not fixed", "routes": [ "DISTROLESS12" ], "group": "FLOOR" }, { "repository": "bitnami/sealed-secrets-controller", "callFixedBy": "2026-11-01", "p": 0.171, "call": "not fixed", "routes": [ "DISTROLESS13" ], "group": "DISTROLESS13_GATED" }, { "repository": "library/golang", "callFixedBy": "2026-11-01", "p": 0.0, "call": "not fixed", "routes": [ "DEB13" ], "group": "DEBIAN_GATED" }, { "repository": "linuxserver/radarr", "callFixedBy": "2026-11-01", "p": 0.0, "call": "not fixed", "routes": [ "NONE" ], "group": "FLOOR" }, { "repository": "linuxserver/sonarr", "callFixedBy": "2026-11-01", "p": 0.0, "call": "not fixed", "routes": [ "NONE" ], "group": "FLOOR" }, { "repository": "library/sonarqube", "callFixedBy": "2026-11-01", "p": 0.397, "call": "not fixed", "routes": [ "TEM25" ], "group": "TEMURIN_GATED" }, { "repository": "amazon/aws-xray-daemon", "callFixedBy": "2026-11-01", "p": 0.165, "call": "not fixed", "routes": [ "ARCH" ], "group": "ARCH_AVAILABLE" }, { "repository": "kiwigrid/k8s-sidecar", "callFixedBy": "2026-11-01", "p": 0.122, "call": "not fixed", "routes": [ "ARCH" ], "group": "ARCH_AVAILABLE" }, { "repository": "kong/kong-gateway", "callFixedBy": "2026-11-01", "p": 0.168, "call": "not fixed", "routes": [ "ARCH" ], "group": "ARCH_AVAILABLE" }, { "repository": "cloudcustodian/c7n", "callFixedBy": "2026-11-01", "p": 0.9, "call": "fixed", "routes": [ "ARCH" ], "group": "ARCH_AVAILABLE" }, { "repository": "cloudcustodian/c7n-org", "callFixedBy": "2026-11-01", "p": 0.899, "call": "fixed", "routes": [ "ARCH" ], "group": "ARCH_AVAILABLE" }, { "repository": "altinity/metrics-exporter", "callFixedBy": "2026-11-01", "p": 0.819, "call": "fixed", "routes": [ "DISTROLESS13" ], "group": "DISTROLESS13_GATED" }, { "repository": "altinity/clickhouse-operator", "callFixedBy": "2026-11-01", "p": 0.815, "call": "fixed", "routes": [ "DISTROLESS13" ], "group": "DISTROLESS13_GATED" }, { "repository": "getwud/wud", "callFixedBy": "2026-11-01", "p": 0.743, "call": "fixed", "routes": [ "NODE" ], "group": "VENDOR_UNKNOWN" } ], "daily": [ { "date": "2026-10-19", "read": "20261019T0217Z", "scanned": 923, "notScanned": 77, "wrong": 602, "wrongMaintained": 334, "fixedSinceCensus": 0, "newlyWrong": 0 }, { "date": "2026-10-20", "read": "20261020T0215Z", "scanned": 923, "notScanned": 77, "wrong": 597, "wrongMaintained": 329, "fixedSinceCensus": 5, "newlyWrong": 0 }, { "date": "2026-10-21", "read": "20261021T0215Z", "scanned": 923, "notScanned": 77, "wrong": 595, "wrongMaintained": 327, "fixedSinceCensus": 7, "newlyWrong": 0 }, { "date": "2026-10-22", "read": "20261022T0315Z", "scanned": 923, "notScanned": 77, "wrong": 580, "wrongMaintained": 313, "fixedSinceCensus": 22, "newlyWrong": 0 }, { "date": "2026-10-23", "read": "20261023T0215Z", "scanned": 923, "notScanned": 77, "wrong": 566, "wrongMaintained": 299, "fixedSinceCensus": 36, "newlyWrong": 0 }, { "date": "2026-10-24", "read": "20261024T0215Z", "scanned": 923, "notScanned": 77, "wrong": 557, "wrongMaintained": 291, "fixedSinceCensus": 45, "newlyWrong": 0 } ], "fixed": [ { "repository": "amazon/aws-for-fluent-bit", "fixedOn": "2026-10-20", "censusDigest": "sha256:32b8cbb1996d7f651d74d8970a0f7a74ddc207ac5d9ca902a4160de65fa38819", "censusPushed": "2026-10-08T15:09:10.255673Z", "evidence": "https://hub.docker.com/layers/amazon/aws-for-fluent-bit/latest/images/sha256-32a411007c9bf4103347dbfee28b76eef94515c7904ebe0f8ac3eab9e8d8a870", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-22T23:34:23.342422Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:32a411007c9bf4103347dbfee28b76eef94515c7904ebe0f8ac3eab9e8d8a870", "fixedPushed": "2026-10-22T23:34:23.342422Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Amazon Linux 2): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "aws/aws-for-fluent-bit" ], "window": [ "2026-09-08", "2026-10-23" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:32a411007c9bf4103347dbfee28b76eef94515c7904ebe0f8ac3eab9e8d8a870", "read": "20261024T0215Z", "tag": "latest" }, "who": "Amazon Web Services (AWS for Fluent Bit)" }, { "repository": "bitnami/minideb", "fixedOn": "2026-10-23", "censusDigest": "sha256:3679b212d268aea2e8a12c760f3fa124299806e4f64fb651fbf9e72081b8daf9", "censusPushed": "2026-10-18T00:46:54.400782Z", "evidence": "https://hub.docker.com/layers/bitnami/minideb/latest/images/sha256-2860cadff6bb2cb3ee8d79abc50e25bc278883fdb97de639501540d6e9e5876e", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-24T00:48:09.812016Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:2860cadff6bb2cb3ee8d79abc50e25bc278883fdb97de639501540d6e9e5876e", "fixedPushed": "2026-10-24T00:48:09.812016Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Debian GNU/Linux 13 (trixie)): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "bitnami/minideb" ], "window": [ "2026-09-18", "2026-10-25" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:2860cadff6bb2cb3ee8d79abc50e25bc278883fdb97de639501540d6e9e5876e", "read": "20261024T0215Z", "tag": "latest" }, "who": "Bitnami (Broadcom)" }, { "repository": "bitnami/wordpress", "fixedOn": "2026-10-22", "censusDigest": "sha256:fe99c2a13ba1797639eaeb1909411ba0b7589400c098afb0903e5830c6648819", "censusPushed": "2026-10-15T18:20:50.762335Z", "evidence": "https://hub.docker.com/layers/bitnami/wordpress/latest/images/sha256-e8be3c8ac7a2693989dd011fc7884430a308b9202d6efb6734b719c7edf08d00", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-23T17:38:33.028539Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:e8be3c8ac7a2693989dd011fc7884430a308b9202d6efb6734b719c7edf08d00", "fixedPushed": "2026-10-23T17:38:33.028539Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (VMware Photon OS/Linux): /opt/bitnami/apache/modules/libphp.so 2026c to 2026e or later (offsets measured); /opt/bitnami/php/bin/php 2026c to 2026e or later (offsets measured); /opt/bitnami/php/bin/php-cgi 2026c to 2026e or later (offsets measured); /opt/bitnami/php/bin/phpdbg 2026c to 2026e or later (offsets measured); /opt/bitnami/php/sbin/php-fpm 2026c to 2026e or later (offsets measured); /usr/lib/libicudata.so.76.1 2024b, removed", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "bitnami/containers" ], "window": [ "2026-09-15", "2026-10-24" ] }, "residual": [ "/opt/bitnami/mysql/plugin/ha_duckdb.so (2026a; used by ICU users (Node.js Intl and Date local time, DuckDB ICU, ...))" ], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/opt/bitnami/apache/modules/libphp.so", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/opt/bitnami/php/bin/php", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/opt/bitnami/php/bin/php-cgi", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/opt/bitnami/php/bin/phpdbg", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/opt/bitnami/php/sbin/php-fpm", "release": "2026e or later", "verdict": "OK" }, { "basis": "judged from its tz release label", "path": "/usr/lib/libicudata.so.78.3", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:e8be3c8ac7a2693989dd011fc7884430a308b9202d6efb6734b719c7edf08d00", "read": "20261024T0215Z", "tag": "latest" }, "who": "Bitnami (Broadcom)" }, { "repository": "caprover/caprover", "fixedOn": "2026-10-24", "censusDigest": "sha256:dbbb7c09c3788b03a1e1a9c8066cadd79ffedd95db70253303d5de69519829eb", "censusPushed": "2026-08-30T18:19:02.130883Z", "evidence": "https://hub.docker.com/layers/caprover/caprover/latest/images/sha256-dc1afff960f0988fcb676e89aec5b973f3084fcb90524f90e92dc540673ee7b3", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-23T17:33:46.012808Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:dc1afff960f0988fcb676e89aec5b973f3084fcb90524f90e92dc540673ee7b3", "fixedPushed": "2026-10-23T17:33:46.012808Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Alpine Linux v3.24): /usr/local/bin/node 2026a to 2026e or later (judged from its tz release label)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "caprover/caprover" ], "window": [ "2026-07-31", "2026-10-24" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "judged from its tz release label", "path": "/usr/local/bin/node", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:dc1afff960f0988fcb676e89aec5b973f3084fcb90524f90e92dc540673ee7b3", "read": "20261024T0215Z", "tag": "latest" }, "who": "CapRover" }, { "repository": "cimg/python", "fixedOn": "2026-10-23", "censusDigest": "sha256:a0d0a6cfe7ba856f8876bdcaf8bea2021db296fc22076e35a1eea4f43f0b8f5a", "censusPushed": "2026-10-16T22:55:11.123129Z", "evidence": "https://hub.docker.com/layers/cimg/python/3.15/images/sha256-ccb187e947e1b9cab0932873da003992080fc69568552738c0f99486868e5d8a", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-22T07:02:03.728718Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:ccb187e947e1b9cab0932873da003992080fc69568552738c0f99486868e5d8a", "fixedPushed": "2026-10-22T07:02:03.728718Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Ubuntu 26.04.1 LTS): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "CircleCI-Public/cimg-python" ], "window": [ "2026-09-16", "2026-10-23" ] }, "residual": [ "/usr/libexec/docker/cli-plugins/docker-buildx (older than 2026b; used by this Go program only when no zoneinfo directory is found ($ZONEINFO, /usr/share/zoneinfo, ...); this image has one, so this copy is a fallback)" ], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:ccb187e947e1b9cab0932873da003992080fc69568552738c0f99486868e5d8a", "read": "20261024T0215Z", "tag": "3.15" }, "who": "CircleCI" }, { "repository": "cimg/redis", "fixedOn": "2026-10-23", "censusDigest": "sha256:e6ebb13f53ca5903b597a48ca5143166d6cb69a2b6297ec42dec0e759a23bc1d", "censusPushed": "2026-09-18T18:13:42.99444Z", "evidence": "https://hub.docker.com/layers/cimg/redis/8.2/images/sha256-fdb5e84bed5fb09d471845afba89247c1e9aeb111e1856d7a5cc855bd65a496a", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-22T16:47:10.658627Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:fdb5e84bed5fb09d471845afba89247c1e9aeb111e1856d7a5cc855bd65a496a", "fixedPushed": "2026-10-22T16:47:10.658627Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Ubuntu 22.04.5 LTS): /usr/share/zoneinfo-icu/44/be/zoneinfo64.res 2026c to 2026e or later (judged from its tz release label); /usr/share/zoneinfo-icu/44/le/zoneinfo64.res 2026c to 2026e or later (judged from its tz release label); /usr/share/zoneinfo 2026c to 2026e or later (offsets measured); release not determined, so not judged: /usr/lib/x86_64-linux-gnu/libicudata.so.70.1", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "CircleCI-Public/cimg-redis" ], "window": [ "2026-08-19", "2026-10-23" ] }, "residual": [ "/usr/libexec/docker/cli-plugins/docker-buildx (older than 2026b; used by this Go program only when no zoneinfo directory is found ($ZONEINFO, /usr/share/zoneinfo, ...); this image has one, so this copy is a fallback)" ], "scanReceipt": { "defaultCopies": [ { "basis": "not determined", "path": "/usr/lib/x86_64-linux-gnu/libicudata.so.70.1", "release": "UNKNOWN", "verdict": "UNKNOWN" }, { "basis": "judged from its tz release label", "path": "/usr/share/zoneinfo-icu/44/be/zoneinfo64.res", "release": "2026e or later", "verdict": "OK" }, { "basis": "judged from its tz release label", "path": "/usr/share/zoneinfo-icu/44/le/zoneinfo64.res", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:fdb5e84bed5fb09d471845afba89247c1e9aeb111e1856d7a5cc855bd65a496a", "read": "20261024T0215Z", "tag": "8.2" }, "who": "CircleCI" }, { "repository": "cimg/ruby", "fixedOn": "2026-10-22", "censusDigest": "sha256:0f8560651fe087914bdbf487d7a22cf13b580b2f78449518f21ab6f166b49af2", "censusPushed": "2026-09-23T13:34:29.331874Z", "evidence": "https://hub.docker.com/layers/cimg/ruby/3.4/images/sha256-d451034776d8c142a0b2105c5bd5f33820f78006999fb2bd97fc1286501869e1", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-23T12:45:47.732132Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:d451034776d8c142a0b2105c5bd5f33820f78006999fb2bd97fc1286501869e1", "fixedPushed": "2026-10-23T12:45:47.732132Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Ubuntu 22.04.5 LTS): /usr/share/zoneinfo-icu/44/be/zoneinfo64.res 2026c to 2026e or later (judged from its tz release label); /usr/share/zoneinfo-icu/44/le/zoneinfo64.res 2026c to 2026e or later (judged from its tz release label); /usr/share/zoneinfo 2026c to 2026e or later (offsets measured); release not determined, so not judged: /usr/lib/x86_64-linux-gnu/libicudata.so.70.1", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "CircleCI-Public/cimg-ruby" ], "window": [ "2026-08-24", "2026-10-24" ] }, "residual": [ "/usr/libexec/docker/cli-plugins/docker-buildx (older than 2026b; used by this Go program only when no zoneinfo directory is found ($ZONEINFO, /usr/share/zoneinfo, ...); this image has one, so this copy is a fallback)" ], "scanReceipt": { "defaultCopies": [ { "basis": "not determined", "path": "/usr/lib/x86_64-linux-gnu/libicudata.so.70.1", "release": "UNKNOWN", "verdict": "UNKNOWN" }, { "basis": "judged from its tz release label", "path": "/usr/share/zoneinfo-icu/44/be/zoneinfo64.res", "release": "2026e or later", "verdict": "OK" }, { "basis": "judged from its tz release label", "path": "/usr/share/zoneinfo-icu/44/le/zoneinfo64.res", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:d451034776d8c142a0b2105c5bd5f33820f78006999fb2bd97fc1286501869e1", "read": "20261024T0215Z", "tag": "3.4" }, "who": "CircleCI" }, { "repository": "cockroachdb/cockroach", "fixedOn": "2026-10-22", "censusDigest": "sha256:84f0c929fdd4284b40a0c4afb1f284573fb281abc0323f8329e4e5f1650a3e00", "censusPushed": "2026-09-23T15:04:25.315287Z", "evidence": "https://hub.docker.com/layers/cockroachdb/cockroach/latest/images/sha256-73579c702780314ddd1ab2dfa7634c4c8207b46e084c8d5fe12a349fc5209242", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-21T20:59:27.844946Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:73579c702780314ddd1ab2dfa7634c4c8207b46e084c8d5fe12a349fc5209242", "fixedPushed": "2026-10-21T20:59:27.844946Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Red Hat Enterprise Linux 10.2 (Coughlan)): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "cockroachdb/cockroach" ], "window": [ "2026-08-24", "2026-10-22" ] }, "residual": [ "/cockroach/cockroach (older than 2026b; used by this Go program only when no zoneinfo directory is found ($ZONEINFO, /usr/share/zoneinfo, ...); this image has one, so this copy is a fallback)" ], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:73579c702780314ddd1ab2dfa7634c4c8207b46e084c8d5fe12a349fc5209242", "read": "20261024T0215Z", "tag": "latest" }, "who": "Cockroach Labs" }, { "repository": "concourse/registry-image-resource", "fixedOn": "2026-10-22", "censusDigest": "sha256:9cce475335525f249ef5a6bbaa4c2458e64770674d7de3350d77102d763526ab", "censusPushed": "2026-08-11T02:34:36.567611Z", "evidence": "https://hub.docker.com/layers/concourse/registry-image-resource/latest/images/sha256-d83b3c39e04d239a6819637cf26f3dd4945657a175fadd31fc52a0424e131ca7", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-21T19:29:53.359603Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:d83b3c39e04d239a6819637cf26f3dd4945657a175fadd31fc52a0424e131ca7", "fixedPushed": "2026-10-21T19:29:53.359603Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Wolfi): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "concourse/registry-image-resource" ], "window": [ "2026-07-12", "2026-10-22" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:d83b3c39e04d239a6819637cf26f3dd4945657a175fadd31fc52a0424e131ca7", "read": "20261024T0215Z", "tag": "latest" }, "who": "Concourse" }, { "repository": "concourse/s3-resource", "fixedOn": "2026-10-23", "censusDigest": "sha256:3c430e69beadc6d51afd177bc31d0c53e23dd8c938b0b85ca8d1671fcddd66be", "censusPushed": "2026-08-10T17:05:35.190526Z", "evidence": "https://hub.docker.com/layers/concourse/s3-resource/latest/images/sha256-774aa45fc12e397e7c20ee71e271634102bafc0450f0675bfa5d82e8daf982f4", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-22T16:12:45.054713Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:774aa45fc12e397e7c20ee71e271634102bafc0450f0675bfa5d82e8daf982f4", "fixedPushed": "2026-10-22T16:12:45.054713Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Wolfi): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "concourse/s3-resource" ], "window": [ "2026-07-11", "2026-10-23" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:774aa45fc12e397e7c20ee71e271634102bafc0450f0675bfa5d82e8daf982f4", "read": "20261024T0215Z", "tag": "latest" }, "who": "Concourse" }, { "repository": "concourse/semver-resource", "fixedOn": "2026-10-23", "censusDigest": "sha256:a1bef98114224dee52432bccb32ea3af6a7ab0a29853204a5e1300f3be0a1134", "censusPushed": "2026-09-17T21:58:37.501305Z", "evidence": "https://hub.docker.com/layers/concourse/semver-resource/latest/images/sha256-f5f5e1e04e2a292d54df205c53c77e6ac9c3c2668b0d6c7b6543f8ca03b4e58c", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-22T17:28:03.003976Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:f5f5e1e04e2a292d54df205c53c77e6ac9c3c2668b0d6c7b6543f8ca03b4e58c", "fixedPushed": "2026-10-22T17:28:03.003976Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Wolfi): /usr/share/zoneinfo 2026d to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "concourse/semver-resource" ], "window": [ "2026-08-18", "2026-10-23" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:f5f5e1e04e2a292d54df205c53c77e6ac9c3c2668b0d6c7b6543f8ca03b4e58c", "read": "20261024T0215Z", "tag": "latest" }, "who": "Concourse" }, { "repository": "datadog/agent", "fixedOn": "2026-10-20", "censusDigest": "sha256:5098392716b9750a7383d9333acd3b738c660bb0e54478009ad666a59d8115de", "censusPushed": "2026-10-14T13:34:13.431347Z", "evidence": null, "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": false, "registryServesDigest": true, "tagPushedNow": "2026-10-24T03:17:40.22769Z" }, "evidenceNote": "Docker Hub's page for the latest tag now shows a later push (2026-10-24), not the digest we scanned; Docker Hub's registry still served that digest on 2026-10-24T18:18Z (docker buildx imagetools inspect datadog/agent@sha256:58e91b8dd1beff34715103896962cc18664b3c9e360e403c05068d3a822bf0ac). scanReceipt is our own record of the scan.", "fixedDigest": "sha256:58e91b8dd1beff34715103896962cc18664b3c9e360e403c05068d3a822bf0ac", "fixedPushed": "2026-10-21T21:59:45.455066Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Ubuntu 24.04.5 LTS): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 4, "relevant": [], "searchHits": 348, "searched": true, "sources": [ "DataDog/datadog-agent", "DataDog/datadog-agent-buildimages" ], "window": [ "2026-09-14", "2026-10-22" ] }, "residual": [ "/opt/datadog-agent/bin/agent/agent (older than 2026b; used by this Go program only when no zoneinfo directory is found ($ZONEINFO, /usr/share/zoneinfo, ...); this image has one, so this copy is a fallback)", "/opt/datadog-agent/embedded/bin/agent-data-plane (2025b; Rust chrono-tz compiled into this binary (version read from build paths))", "/opt/datadog-agent/embedded/bin/security-agent (older than 2026b; used by this Go program only when no zoneinfo directory is found ($ZONEINFO, /usr/share/zoneinfo, ...); this image has one, so this copy is a fallback)", "/opt/datadog-agent/embedded/bin/system-probe (older than 2026b; used by this Go program only when no zoneinfo directory is found ($ZONEINFO, /usr/share/zoneinfo, ...); this image has one, so this copy is a fallback)", "/opt/datadog-agent/embedded/lib/python3.13/site-packages/dateutil/zoneinfo/dateutil-zoneinfo.tar.gz (older than 2026b; used by dateutil.zoneinfo)" ], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:58e91b8dd1beff34715103896962cc18664b3c9e360e403c05068d3a822bf0ac", "read": "20261024T0215Z", "tag": "latest" }, "who": "Datadog" }, { "repository": "datadog/cluster-agent", "fixedOn": "2026-10-20", "censusDigest": "sha256:95dc4cb255fd0cd0673457b64ac527afe2f3f8affe664dfcf7ae4d953386f900", "censusPushed": "2026-10-14T13:34:20.880735Z", "evidence": null, "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": false, "registryServesDigest": true, "tagPushedNow": "2026-10-24T03:07:08.361322Z" }, "evidenceNote": "Docker Hub's page for the latest tag now shows a later push (2026-10-24), not the digest we scanned; Docker Hub's registry still served that digest on 2026-10-24T18:18Z (docker buildx imagetools inspect datadog/cluster-agent@sha256:bf33972d58738f3a8584b4d16ef8f01619549d1185391c3768ccab5a13f9bf8b). scanReceipt is our own record of the scan.", "fixedDigest": "sha256:bf33972d58738f3a8584b4d16ef8f01619549d1185391c3768ccab5a13f9bf8b", "fixedPushed": "2026-10-21T21:47:25.286274Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Ubuntu 24.04.5 LTS): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 4, "relevant": [], "searchHits": 348, "searched": true, "sources": [ "DataDog/datadog-agent", "DataDog/datadog-agent-buildimages" ], "window": [ "2026-09-14", "2026-10-22" ] }, "residual": [ "/opt/datadog-agent/bin/datadog-cluster-agent (older than 2026b; used by this Go program only when no zoneinfo directory is found ($ZONEINFO, /usr/share/zoneinfo, ...); this image has one, so this copy is a fallback)" ], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:bf33972d58738f3a8584b4d16ef8f01619549d1185391c3768ccab5a13f9bf8b", "read": "20261024T0215Z", "tag": "latest" }, "who": "Datadog" }, { "repository": "gitlab/gitlab-runner", "fixedOn": "2026-10-23", "censusDigest": "sha256:d61f66ed46901a079403fc0b08a82f882db03dbc8a032d38643b60a64fc67942", "censusPushed": "2026-10-15T04:38:43.04653Z", "evidence": "https://hub.docker.com/layers/gitlab/gitlab-runner/latest/images/sha256-40241432bfae021972b800030c2d58687ac326756ac346c2b71464e57a4812e2", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-22T17:02:00.054984Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:40241432bfae021972b800030c2d58687ac326756ac346c2b71464e57a4812e2", "fixedPushed": "2026-10-22T17:02:00.054984Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Ubuntu 24.04.5 LTS): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [], "window": [ "2026-09-15", "2026-10-23" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:40241432bfae021972b800030c2d58687ac326756ac346c2b71464e57a4812e2", "read": "20261024T0215Z", "tag": "latest" }, "who": "GitLab" }, { "repository": "grafana/alloy", "fixedOn": "2026-10-20", "censusDigest": "sha256:5133c159d34c7acf37a1b6d91682abcb6b28b2a29bae152ff5cf4753296f956c", "censusPushed": "2026-09-28T17:02:10.361514Z", "evidence": "https://hub.docker.com/layers/grafana/alloy/latest/images/sha256-2fc2ae17ed3b712e37047724efd1cdf7a4124016c0b7522ac469dab0ddf8a8d7", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-22T21:41:58.079165Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:2fc2ae17ed3b712e37047724efd1cdf7a4124016c0b7522ac469dab0ddf8a8d7", "fixedPushed": "2026-10-22T21:41:58.079165Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Ubuntu 24.04.5 LTS): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 1, "relevant": [], "searchHits": 1, "searched": true, "sources": [ "grafana/alloy" ], "window": [ "2026-08-29", "2026-10-23" ] }, "residual": [ "/usr/bin/alloy (2026c; used by this Go program only when no zoneinfo directory is found ($ZONEINFO, /usr/share/zoneinfo, ...); this image has one, so this copy is a fallback)" ], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:2fc2ae17ed3b712e37047724efd1cdf7a4124016c0b7522ac469dab0ddf8a8d7", "read": "20261024T0215Z", "tag": "latest" }, "who": "Grafana Labs" }, { "repository": "grafana/grafana-image-renderer", "fixedOn": "2026-10-24", "censusDigest": "sha256:8e9f15a37829baad8d013ce6cdc2284cba0268ba2ba3829b41efa16d0d82fb26", "censusPushed": "2026-10-13T11:02:48.541418Z", "evidence": "https://hub.docker.com/layers/grafana/grafana-image-renderer/latest/images/sha256-3d21b2b3e65af4591df03f6e8206bd47a37db8f596a2ac064c778eb49211eebd", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-23T09:23:29.322958Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:3d21b2b3e65af4591df03f6e8206bd47a37db8f596a2ac064c778eb49211eebd", "fixedPushed": "2026-10-23T09:23:29.322958Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Debian GNU/Linux 13 (trixie)): /usr/lib/chromium/icudtl.dat 2026c to 2026e or later (judged from its tz release label); /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "grafana/grafana-image-renderer" ], "window": [ "2026-09-13", "2026-10-24" ] }, "residual": [ "/usr/bin/grafana-image-renderer (older than 2026b; used by this Go program only when no zoneinfo directory is found ($ZONEINFO, /usr/share/zoneinfo, ...); this image has one, so this copy is a fallback)" ], "scanReceipt": { "defaultCopies": [ { "basis": "judged from its tz release label", "path": "/usr/lib/chromium/icudtl.dat", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:3d21b2b3e65af4591df03f6e8206bd47a37db8f596a2ac064c778eb49211eebd", "read": "20261024T0215Z", "tag": "latest" }, "who": "Grafana Labs" }, { "repository": "gremlin/gremlin", "fixedOn": "2026-10-22", "censusDigest": "sha256:781343f07a57c39473a2b6bfba2b7cc799f1f225269b0ccedecaefb55a78b2a7", "censusPushed": "2026-09-25T21:11:03.968743Z", "evidence": "https://hub.docker.com/layers/gremlin/gremlin/latest/images/sha256-0ad36bb24ae186191a3558463bd459d47a73bb2919df18608d6efce4bf622af7", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-22T16:44:55.677773Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:0ad36bb24ae186191a3558463bd459d47a73bb2919df18608d6efce4bf622af7", "fixedPushed": "2026-10-22T16:44:55.677773Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Wolfi): /usr/share/zoneinfo 2026d to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [], "window": [ "2026-08-26", "2026-10-23" ] }, "residual": [ "/opt/chainguard/aws-cli-2/lib/python3.14/site-packages/dateutil/zoneinfo/dateutil-zoneinfo.tar.gz (older than 2026b; used by dateutil.zoneinfo)" ], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:0ad36bb24ae186191a3558463bd459d47a73bb2919df18608d6efce4bf622af7", "read": "20261024T0215Z", "tag": "latest" }, "who": "Gremlin" }, { "repository": "hashicorp/consul", "fixedOn": "2026-10-23", "censusDigest": "sha256:8d96c7aae8cd304f99e02d937087f8b5f356fa71abc9237f8044ed14b1ae9eae", "censusPushed": "2026-09-10T06:24:56.38083Z", "evidence": "https://hub.docker.com/layers/hashicorp/consul/latest/images/sha256-2106c7472cefbf434777bd508936b2786662d38e77e52ca1c5588d3d73b8f602", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-22T15:41:00.12032Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:2106c7472cefbf434777bd508936b2786662d38e77e52ca1c5588d3d73b8f602", "fixedPushed": "2026-10-22T15:41:00.12032Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Alpine Linux v3.24): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "hashicorp/consul" ], "window": [ "2026-08-11", "2026-10-23" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:2106c7472cefbf434777bd508936b2786662d38e77e52ca1c5588d3d73b8f602", "read": "20261024T0215Z", "tag": "latest" }, "who": "HashiCorp" }, { "repository": "hashicorp/consul-enterprise", "fixedOn": "2026-10-23", "censusDigest": "sha256:3d54f649e4580f8a6f81fa2b4de92a7ae5de708637c7b69d3a531fd0fbd1b8a7", "censusPushed": "2026-09-10T06:37:09.546855Z", "evidence": "https://hub.docker.com/layers/hashicorp/consul-enterprise/latest/images/sha256-319dafb3ec4b1cc59b3405015feb7588921f1612b4fa9876f38dbdb6a81197c1", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-22T15:45:03.602008Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:319dafb3ec4b1cc59b3405015feb7588921f1612b4fa9876f38dbdb6a81197c1", "fixedPushed": "2026-10-22T15:45:03.602008Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Alpine Linux v3.24): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [], "window": [ "2026-08-11", "2026-10-23" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:319dafb3ec4b1cc59b3405015feb7588921f1612b4fa9876f38dbdb6a81197c1", "read": "20261024T0215Z", "tag": "latest" }, "who": "HashiCorp" }, { "repository": "hashicorp/tfc-agent", "fixedOn": "2026-10-22", "censusDigest": "sha256:37dd44c388ed37103eaf61478f7fbd4f3c6a63bffa87ab448e80c88c9f4f9f5c", "censusPushed": "2026-10-14T16:49:08.114324Z", "evidence": "https://hub.docker.com/layers/hashicorp/tfc-agent/latest/images/sha256-539a16bf773c7cb604b15fd6ee79eadf1879f7105b4fe86fef549277311bb4e6", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-23T18:37:32.787259Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:539a16bf773c7cb604b15fd6ee79eadf1879f7105b4fe86fef549277311bb4e6", "fixedPushed": "2026-10-23T18:37:32.787259Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Ubuntu 24.04.5 LTS): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [], "window": [ "2026-09-14", "2026-10-24" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:539a16bf773c7cb604b15fd6ee79eadf1879f7105b4fe86fef549277311bb4e6", "read": "20261024T0215Z", "tag": "latest" }, "who": "HashiCorp" }, { "repository": "homeassistant/home-assistant", "fixedOn": "2026-10-24", "censusDigest": "sha256:d30d46d24d55c43f1122ab04fdf04d2d31144815b983b07feb075f3a18814239", "censusPushed": "2026-10-16T20:18:52.972891Z", "evidence": "https://hub.docker.com/layers/homeassistant/home-assistant/latest/images/sha256-c32ab33f0b0589182b2f40324826acb02a104d1707c91573b6420fd622b82127", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-23T19:05:05.601583Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:c32ab33f0b0589182b2f40324826acb02a104d1707c91573b6420fd622b82127", "fixedPushed": "2026-10-23T19:05:05.601583Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Alpine Linux v3.24): /usr/share/zoneinfo 2026b to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 5, "relevant": [], "searchHits": 5, "searched": true, "sources": [ "home-assistant/core", "home-assistant/docker" ], "window": [ "2026-09-16", "2026-10-24" ] }, "residual": [ "/usr/local/lib/python3.14/site-packages/dateutil/zoneinfo/dateutil-zoneinfo.tar.gz (older than 2026b; used by dateutil.zoneinfo)" ], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:c32ab33f0b0589182b2f40324826acb02a104d1707c91573b6420fd622b82127", "read": "20261024T0215Z", "tag": "latest" }, "who": "Home Assistant" }, { "repository": "library/adminer", "fixedOn": "2026-10-22", "censusDigest": "sha256:29642e5502fbfc41e31c3f590fc8ffed6b860fc1ffb86c66341ba07556068306", "censusPushed": "2026-10-13T23:49:26.700139Z", "evidence": "https://hub.docker.com/layers/library/adminer/latest/images/sha256-f2345387b7e50f03bdd74b571fb62b34fa4ccb59ef1a7ecf1a6e93221f46a35a", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-22T17:49:05.104405Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:f2345387b7e50f03bdd74b571fb62b34fa4ccb59ef1a7ecf1a6e93221f46a35a", "fixedPushed": "2026-10-22T02:50:27.270413Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Alpine Linux v3.24): /usr/local/bin/php 2026c to 2026e or later (offsets measured); /usr/local/bin/php-cgi 2026c to 2026e or later (offsets measured); /usr/local/bin/phpdbg 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "TimWolla/docker-adminer" ], "window": [ "2026-09-13", "2026-10-23" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/local/bin/php", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/usr/local/bin/php-cgi", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/usr/local/bin/phpdbg", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:f2345387b7e50f03bdd74b571fb62b34fa4ccb59ef1a7ecf1a6e93221f46a35a", "read": "20261024T0215Z", "tag": "latest" }, "who": "Adminer Docker Official Image maintainers" }, { "repository": "library/amazoncorretto", "fixedOn": "2026-10-24", "censusDigest": "sha256:0e487c1d8f070fc04856cb2a7c51bafe3ff6c99e2e769a8f734a6ba1e40360c1", "censusPushed": "2026-10-14T20:52:18.562265Z", "evidence": "https://hub.docker.com/layers/library/amazoncorretto/latest/images/sha256-34a83f62b8f9a16749058e7eebf31aa13cc703fecb8d0079d7869dfef0e7cf96", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-23T21:00:02.865027Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:34a83f62b8f9a16749058e7eebf31aa13cc703fecb8d0079d7869dfef0e7cf96", "fixedPushed": "2026-10-23T21:00:02.865027Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Amazon Linux 2023.12.20261021): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "corretto/corretto-docker" ], "window": [ "2026-09-14", "2026-10-24" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "judged from its tz release label", "path": "/usr/lib/jvm/java-1.8.0-amazon-corretto.x86_64/jre/lib/tzdb.dat", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:34a83f62b8f9a16749058e7eebf31aa13cc703fecb8d0079d7869dfef0e7cf96", "read": "20261024T0215Z", "tag": "latest" }, "who": "Amazon Corretto (Amazon Web Services)" }, { "repository": "library/amazonlinux", "fixedOn": "2026-10-23", "censusDigest": "sha256:500790b3c980438d9d6cde6c149e59dda1992660941a814198b95ed56574fb96", "censusPushed": "2026-10-05T19:30:34.642021Z", "evidence": "https://hub.docker.com/layers/library/amazonlinux/latest/images/sha256-b156298161e9ab6392cda59081d016866601f7213a28ec21270d3a75c72f2170", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-23T01:30:34.958791Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:b156298161e9ab6392cda59081d016866601f7213a28ec21270d3a75c72f2170", "fixedPushed": "2026-10-23T01:30:34.958791Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Amazon Linux 2023.12.20261021): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "amazonlinux/container-images" ], "window": [ "2026-09-05", "2026-10-24" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:b156298161e9ab6392cda59081d016866601f7213a28ec21270d3a75c72f2170", "read": "20261024T0215Z", "tag": "latest" }, "who": "Amazon Linux (Amazon Web Services)" }, { "repository": "library/composer", "fixedOn": "2026-10-22", "censusDigest": "sha256:bdd249749908be12facc9dec72e19704371bb893f96dff3e024ec89528a5a08d", "censusPushed": "2026-09-30T06:13:32.653419Z", "evidence": "https://hub.docker.com/layers/library/composer/latest/images/sha256-66c00f4ea1c6a01364d75460bb2837886388e1d5b2b1b6e0f22c8788eb4e73ad", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-22T18:13:32.616039Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:66c00f4ea1c6a01364d75460bb2837886388e1d5b2b1b6e0f22c8788eb4e73ad", "fixedPushed": "2026-10-22T03:14:13.013974Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Alpine Linux v3.24): /usr/local/bin/php 2026c to 2026e or later (offsets measured); /usr/local/bin/php-cgi 2026c to 2026e or later (offsets measured); /usr/local/bin/phpdbg 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "composer/docker" ], "window": [ "2026-08-31", "2026-10-23" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/local/bin/php", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/usr/local/bin/php-cgi", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/usr/local/bin/phpdbg", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:66c00f4ea1c6a01364d75460bb2837886388e1d5b2b1b6e0f22c8788eb4e73ad", "read": "20261024T0215Z", "tag": "latest" }, "who": "Composer" }, { "repository": "library/eclipse-mosquitto", "fixedOn": "2026-10-24", "censusDigest": "sha256:12436df85d6b2b91e63c71184da35ec89400a98abdc688a78b1403a11ecf44b4", "censusPushed": "2026-09-18T05:52:28.001614Z", "evidence": "https://hub.docker.com/layers/library/eclipse-mosquitto/latest/images/sha256-888af343ab81912c1f4a88cda46c687a2ce607ed3732754c36d8b8879d17a8b4", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-23T11:53:01.093714Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:888af343ab81912c1f4a88cda46c687a2ce607ed3732754c36d8b8879d17a8b4", "fixedPushed": "2026-10-23T11:53:01.093714Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Alpine Linux v3.23): /usr/share/zoneinfo 2026d to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "eclipse-mosquitto/mosquitto" ], "window": [ "2026-08-19", "2026-10-24" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:888af343ab81912c1f4a88cda46c687a2ce607ed3732754c36d8b8879d17a8b4", "read": "20261024T0215Z", "tag": "latest" }, "who": "Eclipse Mosquitto" }, { "repository": "library/eggdrop", "fixedOn": "2026-10-22", "censusDigest": "sha256:89f50e93e0b8751865faec217378fef34e39edfef57d89fbdb77e93f4ea7bcd4", "censusPushed": "2026-09-18T01:30:34.724057Z", "evidence": "https://hub.docker.com/layers/library/eggdrop/latest/images/sha256-b254b7af14b0ef0e929212a806beebd2dc7a352b5d185fdfc060d53cb592f6f7", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-21T22:30:38.204696Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:b254b7af14b0ef0e929212a806beebd2dc7a352b5d185fdfc060d53cb592f6f7", "fixedPushed": "2026-10-21T22:30:38.204696Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Alpine Linux v3.23): /usr/share/zoneinfo 2026d to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 2, "relevant": [], "searchHits": 2, "searched": true, "sources": [ "eggheads/eggdrop-docker" ], "window": [ "2026-08-19", "2026-10-22" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:b254b7af14b0ef0e929212a806beebd2dc7a352b5d185fdfc060d53cb592f6f7", "read": "20261024T0215Z", "tag": "latest" }, "who": "Eggheads (Eggdrop)" }, { "repository": "library/redmine", "fixedOn": "2026-10-23", "censusDigest": "sha256:0dec628f46727aabbe96a8fcf9ddb33fca463c8a2fc856de2f93c2aa6daef0cd", "censusPushed": "2026-10-10T15:50:22.571037Z", "evidence": "https://hub.docker.com/layers/library/redmine/latest/images/sha256-1e556fc3279007cf2542cb035530c53c2e6efd5a14a6147ba743677ead616151", "evidenceCheck": { "checkedAt": "2026-10-24T18:18Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-23T21:50:34.394226Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:18Z", "fixedDigest": "sha256:1e556fc3279007cf2542cb035530c53c2e6efd5a14a6147ba743677ead616151", "fixedPushed": "2026-10-23T21:50:34.394226Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Debian GNU/Linux 13 (trixie)): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "docker-library/redmine" ], "window": [ "2026-09-10", "2026-10-24" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:1e556fc3279007cf2542cb035530c53c2e6efd5a14a6147ba743677ead616151", "read": "20261024T0215Z", "tag": "latest" }, "who": "Redmine Docker Official Image maintainers" }, { "repository": "library/sapmachine", "fixedOn": "2026-10-22", "censusDigest": "sha256:17f91134dfc27c3d3216a166b9951910791115bbe5e3d5f14c5de14d020be252", "censusPushed": "2026-10-17T05:15:18.214381Z", "evidence": "https://hub.docker.com/layers/library/sapmachine/latest/images/sha256-ba16817a7c1a6cc8dae3fdfc29f2139895f5fdc62b8a5578b294e0c40501d7a4", "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-23T20:13:29.251828Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:19Z", "fixedDigest": "sha256:ba16817a7c1a6cc8dae3fdfc29f2139895f5fdc62b8a5578b294e0c40501d7a4", "fixedPushed": "2026-10-23T20:13:29.251828Z", "how": "SapMachine took in the OpenJDK change “(tz) Update Timezone Data to 2026e” (JDK-8393337, committed 3 October) for its Java 27 build; the 23 October image has no default copy the scanner recognises judged wrong (Ubuntu 24.04.5 LTS): /usr/lib/jvm/sapmachine-27/lib/tzdb.dat 2026b to 2026e or later (judged from its tz release label)", "kind": "deliberate", "kindCheck": { "candidates": 8, "relevant": [ "https://github.com/SAP/SapMachine/commit/661bd45630e169e44c89ca7c306b56c0c95ab247", "https://github.com/SAP/SapMachine/commit/ae8f343ec02388248f157d9160e692af1f94c57a" ], "searchHits": 8, "searched": true, "sources": [ "SAP/SapMachine", "SAP/SapMachine-infrastructure" ], "window": [ "2026-09-17", "2026-10-24" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "judged from its tz release label", "path": "/usr/lib/jvm/sapmachine-27/lib/tzdb.dat", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:ba16817a7c1a6cc8dae3fdfc29f2139895f5fdc62b8a5578b294e0c40501d7a4", "read": "20261024T0215Z", "tag": "latest" }, "who": "SAP (SapMachine)" }, { "repository": "linuxserver/code-server", "fixedOn": "2026-10-24", "censusDigest": "sha256:e9b7e618d7c0e0aef581b96bd1edb6ce9db0e4d48aea1631b0a79c9196b05df2", "censusPushed": "2026-10-17T22:31:00.51086Z", "evidence": "https://hub.docker.com/layers/linuxserver/code-server/latest/images/sha256-45c2e5c840248cc431260bac20219ad5b3b6124fcd8dab346cf85e3cb6b8963c", "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-24T01:30:16.54838Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:19Z", "fixedDigest": "sha256:45c2e5c840248cc431260bac20219ad5b3b6124fcd8dab346cf85e3cb6b8963c", "fixedPushed": "2026-10-24T01:30:16.54838Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Ubuntu 24.04.5 LTS): /app/code-server/lib/node 2026c to 2026e or later (judged from its tz release label); /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "linuxserver/docker-code-server", "linuxserver/docker-baseimage-ubuntu" ], "window": [ "2026-09-17", "2026-10-25" ] }, "residual": [ "/app/code-server/lib/vscode/node_modules/@github/copilot-sdk-linux-x64/prebuilds/linux-x64/runtime.node (2025b; Rust chrono-tz compiled into this binary (version read from build paths))" ], "scanReceipt": { "defaultCopies": [ { "basis": "judged from its tz release label", "path": "/app/code-server/lib/node", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/app/code-server/lib/vscode/node_modules/@github/copilot-sdk-linux-x64/prebuilds/linux-x64/runtime.node", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:45c2e5c840248cc431260bac20219ad5b3b6124fcd8dab346cf85e3cb6b8963c", "read": "20261024T0215Z", "tag": "latest" }, "who": "LinuxServer.io" }, { "repository": "linuxserver/ddclient", "fixedOn": "2026-10-21", "censusDigest": "sha256:ccd5b99362f823722a8334b4eae4837f56fb1bf5c0abcce48e35f297599fcffd", "censusPushed": "2026-10-06T13:52:48.111125Z", "evidence": "https://hub.docker.com/layers/linuxserver/ddclient/latest/images/sha256-62d9f55b9abe77977450f800dfdc3f79dc702fbca0fde182effaf4a2d2bf0254", "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-20T12:24:07.789845Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:19Z", "fixedDigest": "sha256:62d9f55b9abe77977450f800dfdc3f79dc702fbca0fde182effaf4a2d2bf0254", "fixedPushed": "2026-10-20T12:24:07.789845Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Alpine Linux v3.22): /usr/share/zoneinfo 2026d to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "linuxserver/docker-ddclient", "linuxserver/docker-baseimage-alpine" ], "window": [ "2026-09-06", "2026-10-21" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:62d9f55b9abe77977450f800dfdc3f79dc702fbca0fde182effaf4a2d2bf0254", "read": "20261024T0215Z", "tag": "latest" }, "who": "LinuxServer.io" }, { "repository": "linuxserver/lazylibrarian", "fixedOn": "2026-10-23", "censusDigest": "sha256:8177abf972c8ee151e15440b9bf01b83181231e89964dd3ff68cb6486b757492", "censusPushed": "2026-10-17T20:05:58.957021Z", "evidence": null, "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": false, "registryServesDigest": true, "tagPushedNow": "2026-10-24T16:34:41.013599Z" }, "evidenceNote": "Docker Hub's page for the latest tag now shows a later push (2026-10-24), not the digest we scanned; Docker Hub's registry still served that digest on 2026-10-24T18:19Z (docker buildx imagetools inspect linuxserver/lazylibrarian@sha256:dcd5f06c3b3969ffe9c3594de7e13e7f37daf94f99c187f31f16fa9ec791026b). scanReceipt is our own record of the scan.", "fixedDigest": "sha256:dcd5f06c3b3969ffe9c3594de7e13e7f37daf94f99c187f31f16fa9ec791026b", "fixedPushed": "2026-10-23T17:48:17.94997Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Ubuntu 24.04.5 LTS): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "linuxserver/docker-lazylibrarian", "linuxserver/docker-baseimage-ubuntu" ], "window": [ "2026-09-17", "2026-10-24" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:dcd5f06c3b3969ffe9c3594de7e13e7f37daf94f99c187f31f16fa9ec791026b", "read": "20261024T0215Z", "tag": "latest" }, "who": "LinuxServer.io" }, { "repository": "linuxserver/nzbhydra2", "fixedOn": "2026-10-22", "censusDigest": "sha256:99263bf7302c4f7c457526814692bd5a44d419dc3eba8e5f2356d0bff8b0f14c", "censusPushed": "2026-10-15T00:36:34.059828Z", "evidence": "https://hub.docker.com/layers/linuxserver/nzbhydra2/latest/images/sha256-88a6285dda9481f158ae2ce2a27814af1fda892b72b2f0ca3ef4ace977778cbf", "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-22T00:38:13.68781Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:19Z", "fixedDigest": "sha256:88a6285dda9481f158ae2ce2a27814af1fda892b72b2f0ca3ef4ace977778cbf", "fixedPushed": "2026-10-22T00:38:13.68781Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Ubuntu 24.04.5 LTS): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "linuxserver/docker-nzbhydra2", "linuxserver/docker-baseimage-ubuntu" ], "window": [ "2026-09-15", "2026-10-23" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:88a6285dda9481f158ae2ce2a27814af1fda892b72b2f0ca3ef4ace977778cbf", "read": "20261024T0215Z", "tag": "latest" }, "who": "LinuxServer.io" }, { "repository": "linuxserver/smokeping", "fixedOn": "2026-10-21", "censusDigest": "sha256:43d89f225085d9df04123899ccb7909ef1dfe0c6ab49e499306b58ce6ccff496", "censusPushed": "2026-10-07T00:26:03.700437Z", "evidence": "https://hub.docker.com/layers/linuxserver/smokeping/latest/images/sha256-4246ae370d3c70fa989edd4f63a83a9025f69f067d95bd8736b74242eb835d47", "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-20T23:47:11.52354Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:19Z", "fixedDigest": "sha256:4246ae370d3c70fa989edd4f63a83a9025f69f067d95bd8736b74242eb835d47", "fixedPushed": "2026-10-20T23:47:11.52354Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Alpine Linux v3.22): /usr/share/zoneinfo 2026d to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "linuxserver/docker-smokeping", "linuxserver/docker-baseimage-alpine" ], "window": [ "2026-09-07", "2026-10-21" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:4246ae370d3c70fa989edd4f63a83a9025f69f067d95bd8736b74242eb835d47", "read": "20261024T0215Z", "tag": "latest" }, "who": "LinuxServer.io" }, { "repository": "n8nio/n8n", "fixedOn": "2026-10-23", "censusDigest": "sha256:aaa5cd750a76ba08d7611b15df2e3521122d5d7846b15648656ad0db704ce7b6", "censusPushed": "2026-10-16T07:31:31.689763Z", "evidence": "https://hub.docker.com/layers/n8nio/n8n/latest/images/sha256-845ac21710739d7206086974295f7f93932e0fa8dd87af6d9fb0b7aa0338ad15", "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-22T09:23:58.438611Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:19Z", "fixedDigest": "sha256:845ac21710739d7206086974295f7f93932e0fa8dd87af6d9fb0b7aa0338ad15", "fixedPushed": "2026-10-22T09:23:58.438611Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Docker Hardened Images/Alpine Linux v3.24): /usr/bin/node 2026c to 2026e or later (judged from its tz release label); /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 1, "relevant": [], "searchHits": 1, "searched": true, "sources": [ "n8n-io/n8n" ], "window": [ "2026-09-16", "2026-10-23" ] }, "residual": [ "/usr/local/lib/node_modules/n8n/node_modules/.pnpm/moment-timezone@0.5.48/node_modules/moment-timezone/data/packed/latest.json (2025b; library's own copy (version label only))" ], "scanReceipt": { "defaultCopies": [ { "basis": "judged from its tz release label", "path": "/usr/bin/node", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:845ac21710739d7206086974295f7f93932e0fa8dd87af6d9fb0b7aa0338ad15", "read": "20261024T0215Z", "tag": "latest" }, "who": "n8n" }, { "repository": "netdata/netdata", "fixedOn": "2026-10-23", "censusDigest": "sha256:68f451b9fbc70ae206592908038c733da6a90db0667fcbb5528111ce8b638040", "censusPushed": "2026-10-18T01:28:45.548256Z", "evidence": "https://hub.docker.com/layers/netdata/netdata/latest/images/sha256-3e9f2404191d0d0e8f84b7c7bbb0e534b8e8eaa0863c19aa36199df59a20491b", "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-24T01:36:42.072122Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:19Z", "fixedDigest": "sha256:3e9f2404191d0d0e8f84b7c7bbb0e534b8e8eaa0863c19aa36199df59a20491b", "fixedPushed": "2026-10-24T01:36:42.072122Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Debian GNU/Linux 13 (trixie)): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 1, "relevant": [], "searchHits": 1, "searched": true, "sources": [ "netdata/netdata" ], "window": [ "2026-09-18", "2026-10-25" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:3e9f2404191d0d0e8f84b7c7bbb0e534b8e8eaa0863c19aa36199df59a20491b", "read": "20261024T0215Z", "tag": "latest" }, "who": "Netdata" }, { "repository": "nodered/node-red", "fixedOn": "2026-10-22", "censusDigest": "sha256:148cf534d628591aa605f808971153d7de03b5ea5ca84b569daeadd97dc52769", "censusPushed": "2026-10-08T14:24:27.24164Z", "evidence": "https://hub.docker.com/layers/nodered/node-red/latest/images/sha256-051b217b585013c692006e238faa1067adc52f7ded972cbca3d944f5f9563d80", "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-21T15:55:41.9628Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:19Z", "fixedDigest": "sha256:051b217b585013c692006e238faa1067adc52f7ded972cbca3d944f5f9563d80", "fixedPushed": "2026-10-21T15:55:41.9628Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Alpine Linux v3.24): /usr/local/bin/node 2026c to 2026e or later (judged from its tz release label)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "node-red/node-red-docker" ], "window": [ "2026-09-08", "2026-10-22" ] }, "residual": [ "/usr/src/node-red/node_modules/moment-timezone/data/packed/latest.json (2025b; library's own copy (version label only))" ], "scanReceipt": { "defaultCopies": [ { "basis": "judged from its tz release label", "path": "/usr/local/bin/node", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:051b217b585013c692006e238faa1067adc52f7ded972cbca3d944f5f9563d80", "read": "20261024T0215Z", "tag": "latest" }, "who": "Node-RED" }, { "repository": "organizr/organizr", "fixedOn": "2026-10-22", "censusDigest": "sha256:980796e4b9fa5c19f3161accb867f8cf4f2198d148f7f8005bff95bdeba8798c", "censusPushed": "2023-12-02T21:10:37.641329Z", "evidence": "https://hub.docker.com/layers/organizr/organizr/latest/images/sha256-0c6d61661bb82ec8fd11872ca830eb2096079c03c8a833e5a2bdf93a87c1f791", "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-21T21:46:47.96783Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:19Z", "fixedDigest": "sha256:0c6d61661bb82ec8fd11872ca830eb2096079c03c8a833e5a2bdf93a87c1f791", "fixedPushed": "2026-10-21T21:46:47.96783Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Alpine Linux v3.24): /usr/bin/php81 older than 2026b, removed; /usr/sbin/php-fpm81 older than 2026b, removed; /usr/share/zoneinfo older than 2026b to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "Organizr/docker-organizr" ], "window": [ "2023-11-02", "2026-10-22" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/bin/php85", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/usr/sbin/php-fpm85", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:0c6d61661bb82ec8fd11872ca830eb2096079c03c8a833e5a2bdf93a87c1f791", "read": "20261024T0215Z", "tag": "latest" }, "who": "Organizr" }, { "repository": "requarks/wiki", "fixedOn": "2026-10-24", "censusDigest": "sha256:bc1eb046797745d74fd3b6cb98e45b3b4cd9308f2ca1fe492edcd0c6566ce904", "censusPushed": "2026-10-02T03:31:00.539617Z", "evidence": "https://hub.docker.com/layers/requarks/wiki/latest/images/sha256-1c7b37a0171577903883c50ffc8fcff98f6de323c80fb629061a4e06562dcf1d", "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-24T02:04:25.129946Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:19Z", "fixedDigest": "sha256:1c7b37a0171577903883c50ffc8fcff98f6de323c80fb629061a4e06562dcf1d", "fixedPushed": "2026-10-24T02:04:25.129946Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Alpine Linux v3.24): /usr/local/bin/node 2026c to 2026e or later (judged from its tz release label)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "requarks/wiki" ], "window": [ "2026-09-02", "2026-10-25" ] }, "residual": [ "/wiki/node_modules/moment-timezone/data/packed/latest.json (2025b; library's own copy (version label only))" ], "scanReceipt": { "defaultCopies": [ { "basis": "judged from its tz release label", "path": "/usr/local/bin/node", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:1c7b37a0171577903883c50ffc8fcff98f6de323c80fb629061a4e06562dcf1d", "read": "20261024T0215Z", "tag": "latest" }, "who": "Wiki.js (Requarks)" }, { "repository": "sonarsoftware/customerportal", "fixedOn": "2026-10-24", "censusDigest": "sha256:f48bdb9792ee90e4326624e0ba101e6a8f0897d048b8e46f5a4190fa8e04bed3", "censusPushed": "2026-06-11T20:43:46.929788Z", "evidence": "https://hub.docker.com/layers/sonarsoftware/customerportal/latest/images/sha256-71a98040a205551448a642bc99d5fba33ff3bac313be43919c23710a30df83c5", "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-23T19:45:18.335733Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:19Z", "fixedDigest": "sha256:71a98040a205551448a642bc99d5fba33ff3bac313be43919c23710a30df83c5", "fixedPushed": "2026-10-23T19:45:18.335733Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Ubuntu 22.04.1 LTS): /usr/share/zoneinfo-icu/44/be/zoneinfo64.res 2026a to 2026e or later (judged from its tz release label); /usr/share/zoneinfo-icu/44/le/zoneinfo64.res 2026a to 2026e or later (judged from its tz release label); /usr/share/zoneinfo older than 2026b to 2026e or later (offsets measured); release not determined, so not judged: /usr/lib/x86_64-linux-gnu/libicudata.so.70.1", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [], "window": [ "2026-05-12", "2026-10-24" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "judged from its tz release label", "path": "/usr/share/zoneinfo-icu/44/be/zoneinfo64.res", "release": "2026e or later", "verdict": "OK" }, { "basis": "judged from its tz release label", "path": "/usr/share/zoneinfo-icu/44/le/zoneinfo64.res", "release": "2026e or later", "verdict": "OK" }, { "basis": "not determined", "path": "/usr/lib/x86_64-linux-gnu/libicudata.so.70.1", "release": "UNKNOWN", "verdict": "UNKNOWN" }, { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:71a98040a205551448a642bc99d5fba33ff3bac313be43919c23710a30df83c5", "read": "20261024T0215Z", "tag": "latest" }, "who": "Sonar Software" }, { "repository": "splunk/universalforwarder", "fixedOn": "2026-10-20", "censusDigest": "sha256:dc72ddd0ec1e38b6f8cd35d8f1dd2ef05bb02da5f527fd4e9f2d4fd9d2ab2047", "censusPushed": "2026-10-01T23:30:03.685151Z", "evidence": "https://hub.docker.com/layers/splunk/universalforwarder/latest/images/sha256-40ea5f5d52fb9b3e30fba0e8a7eb7eacd47905794e11c313832335b18e240dd3", "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-20T00:21:55.579448Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:19Z", "fixedDigest": "sha256:40ea5f5d52fb9b3e30fba0e8a7eb7eacd47905794e11c313832335b18e240dd3", "fixedPushed": "2026-10-20T00:21:55.579448Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Red Hat Enterprise Linux 8.10 (Ootpa)): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "splunk/docker-splunk" ], "window": [ "2026-09-01", "2026-10-21" ] }, "residual": [ "/opt/splunkforwarder/share/postgresql/timezone (2026c; PostgreSQL's own copy (servers built without --with-system-tzdata))" ], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:40ea5f5d52fb9b3e30fba0e8a7eb7eacd47905794e11c313832335b18e240dd3", "read": "20261024T0215Z", "tag": "latest" }, "who": "Splunk" }, { "repository": "syncthing/syncthing", "fixedOn": "2026-10-22", "censusDigest": "sha256:92e9a8bf559062b955ab45c7a60bc33d0b97ebdb1e5e86959b40714b482f740a", "censusPushed": "2026-10-06T06:03:06.721488Z", "evidence": "https://hub.docker.com/layers/syncthing/syncthing/latest/images/sha256-c28e86f5173bacc429aef92af915b5c4fac56e1a9dcd3875855fd51f664d0414", "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-21T05:59:34.289136Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:19Z", "fixedDigest": "sha256:c28e86f5173bacc429aef92af915b5c4fac56e1a9dcd3875855fd51f664d0414", "fixedPushed": "2026-10-21T05:59:34.289136Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Alpine Linux v3.24): /usr/share/zoneinfo 2026d to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "syncthing/syncthing" ], "window": [ "2026-09-06", "2026-10-22" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:c28e86f5173bacc429aef92af915b5c4fac56e1a9dcd3875855fd51f664d0414", "read": "20261024T0215Z", "tag": "latest" }, "who": "Syncthing" }, { "repository": "sysdig/agent", "fixedOn": "2026-10-22", "censusDigest": "sha256:dfc5f94093a1beb1cc4cd9c036c4f92b520f90d96ae51c6872369580945ccc19", "censusPushed": "2026-10-07T10:32:04.477586Z", "evidence": "https://hub.docker.com/layers/sysdig/agent/latest/images/sha256-e14c031d908fc1c7717873fa631a4e8c860eecbc9dd4016fdeab058c2ee9bec3", "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-23T15:51:08.860247Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:19Z", "fixedDigest": "sha256:e14c031d908fc1c7717873fa631a4e8c860eecbc9dd4016fdeab058c2ee9bec3", "fixedPushed": "2026-10-23T15:51:08.860247Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Red Hat Enterprise Linux 9.8 (Plow)): /usr/share/javazi-1.8/tzdb.dat 2026c to 2026e or later (judged from its tz release label); /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [], "window": [ "2026-09-07", "2026-10-24" ] }, "residual": [ "/opt/draios/bin/host-scanner (older than 2026b; used by this Go program only when no zoneinfo directory is found ($ZONEINFO, /usr/share/zoneinfo, ...); this image has one, so this copy is a fallback)" ], "scanReceipt": { "defaultCopies": [ { "basis": "judged from its tz release label", "path": "/usr/share/javazi-1.8/tzdb.dat", "release": "2026e or later", "verdict": "OK" }, { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:e14c031d908fc1c7717873fa631a4e8c860eecbc9dd4016fdeab058c2ee9bec3", "read": "20261024T0215Z", "tag": "latest" }, "who": "Sysdig" }, { "repository": "verdaccio/verdaccio", "fixedOn": "2026-10-23", "censusDigest": "sha256:4026bc3dfe3dd1ce3cf9c9fc010d8e7a93c6b083eaae1930e3bcdde94d39a350", "censusPushed": "2026-10-18T15:11:26.315371Z", "evidence": "https://hub.docker.com/layers/verdaccio/verdaccio/latest/images/sha256-9c3a989517615204a59064784dbd2b959e2f95726c65e219b119974b1f30dbdf", "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-22T10:27:49.394082Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:19Z", "fixedDigest": "sha256:9c3a989517615204a59064784dbd2b959e2f95726c65e219b119974b1f30dbdf", "fixedPushed": "2026-10-22T10:27:49.394082Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Alpine Linux v3.24): /usr/local/bin/node 2026a to 2026e or later (judged from its tz release label)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "verdaccio/verdaccio" ], "window": [ "2026-09-18", "2026-10-23" ] }, "residual": [], "scanReceipt": { "defaultCopies": [ { "basis": "judged from its tz release label", "path": "/usr/local/bin/node", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:9c3a989517615204a59064784dbd2b959e2f95726c65e219b119974b1f30dbdf", "read": "20261024T0215Z", "tag": "latest" }, "who": "Verdaccio" }, { "repository": "zammad/zammad-docker-compose", "fixedOn": "2026-10-24", "censusDigest": "sha256:adb0f0dc055438631f3720b40226a5a60de06c190239c6ce0d017bdd61b0096c", "censusPushed": "2026-10-15T19:13:41.217816Z", "evidence": "https://hub.docker.com/layers/zammad/zammad-docker-compose/latest/images/sha256-ce7fbc3d9563887ae2ab316c0a5d50518d85d137d259238d57d6d424df3fc0ad", "evidenceCheck": { "checkedAt": "2026-10-24T18:19Z", "hubPageShowsDigest": true, "registryServesDigest": true, "tagPushedNow": "2026-10-23T10:02:31.746817Z" }, "evidenceNote": "Docker Hub showed this digest on 2026-10-24T18:19Z", "fixedDigest": "sha256:ce7fbc3d9563887ae2ab316c0a5d50518d85d137d259238d57d6d424df3fc0ad", "fixedPushed": "2026-10-23T10:02:31.746817Z", "how": "rebuilt image has no default copy the scanner recognises judged wrong (Debian GNU/Linux 13 (trixie)): /usr/share/zoneinfo 2026c to 2026e or later (offsets measured)", "kind": "rebuild", "kindCheck": { "candidates": 0, "relevant": [], "searchHits": 0, "searched": true, "sources": [ "zammad/zammad-docker-compose" ], "window": [ "2026-09-15", "2026-10-24" ] }, "residual": [ "/usr/local/bundle/ruby/3.4.0/gems/tzinfo-data-1.2026.3/lib/tzinfo/data/version.rb (2026c; library's own copy (version label only))" ], "scanReceipt": { "defaultCopies": [ { "basis": "offsets measured", "path": "/usr/share/zoneinfo", "release": "2026e or later", "verdict": "OK" } ], "digest": "sha256:ce7fbc3d9563887ae2ab316c0a5d50518d85d137d259238d57d6d424df3fc0ad", "read": "20261024T0215Z", "tag": "latest" }, "who": "Zammad" } ], "outcome": null, "method": { "summary": "Each repository's main tag is scanned for the time-zone copies our scanner recognises (OS zoneinfo, Java, ICU, PHP, Go and others). An image counts as wrong if any copy it uses by default is judged to give a wrong offset for Vancouver, Edmonton, Inuvik or Winnipeg: offsets are measured for zoneinfo-format copies and inferred from the tz release label for Java and ICU copies. Each wrong copy is given its published fix route; an image leaves the count only when its slowest copy is fixed and its tag is rebuilt after that. Shared events (Debian's update, base image rebuilds) are simulated once per run for all their children.", "url": "https://cybernative.ai/breakage-calendar/2026-11-01/method/" }, "provenance": { "frozenTraceSha256": "1ac990e220269d3e1d5f1c059592a4a085395f901c11ae344e97562db6c348c0", "freezeReceipt": "FREEZE-20261024T1800Z", "modelSeed": 14633, "modelSims": 20000, "modelInputSha256": { "rebuildHistories": "787312807d16efbbea18135200ef7d37130a0b2468e741f9e4947edc888eaefb", "routeTable": "9f7324694bf5f1f7599a1902c38a2292af35cb1556de2b496a48350edb74d317", "temurinLags": "ffad92ee421351f6081e8aa761815a5060b660f2c51731d2e20f6c8430b9b627", "archiveRefresh": "93d6aceb4b0c04c2ec13ed17b0a08bc4408c069b9ca8f8c401cdbec11e6f7c9e", "routeAmendments": "45bdc57486642edce90c266e9ca06b902b65cc2e86edbf261114ee9616e37db9" }, "note": "Hashes of the frozen internal forecast trace and of the model's input files, kept so the 2 November post-mortem can show they did not change. The files are not part of this file." } }