{
  "schema_version": 1,
  "_meta": {
    "description": "Lab-side grype scan of published lane digests (non-gating, ADR 0002)",
    "generated_at": "2026-07-19T18:18:10Z",
    "status": "live"
  },
  "rows": [
    {
      "id": "bluefin-stable",
      "lane": "bluefin-stable",
      "image_ref": "ghcr.io/projectbluefin/bluefin:stable",
      "digest": "sha256:af5929bafcaaa693d2fa6626cb62a7ee5580eb724003502991aa5c28be2032c3",
      "scanner": "grype",
      "scanner_version": null,
      "severity_counts": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "negligible": 0,
        "unknown": 0
      },
      "fixable": 0,
      "total": 0,
      "top_cves": [],
      "source_url": "",
      "collected_at": "2026-07-19T18:18:10Z",
      "derivation": "grype scan of digest in ephemeral workflow pod",
      "state": "unavailable",
      "state_reason": "nightly-cve-scan CronWorkflow has not published its first scan yet"
    },
    {
      "id": "bluefin-testing",
      "lane": "bluefin-testing",
      "image_ref": "ghcr.io/projectbluefin/bluefin:testing",
      "digest": "sha256:3137b8a1afe9df7bf1ba1d5aee81a5c49d73fcdf342a173fce3b40f3bdcc8c15",
      "scanner": "grype",
      "scanner_version": null,
      "severity_counts": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "negligible": 0,
        "unknown": 0
      },
      "fixable": 0,
      "total": 0,
      "top_cves": [],
      "source_url": "",
      "collected_at": "2026-07-19T18:18:10Z",
      "derivation": "grype scan of digest in ephemeral workflow pod",
      "state": "unavailable",
      "state_reason": "nightly-cve-scan CronWorkflow has not published its first scan yet"
    },
    {
      "id": "bluefin-lts-stable",
      "lane": "bluefin-lts-stable",
      "image_ref": "ghcr.io/projectbluefin/bluefin-lts:stable",
      "digest": "sha256:53d9ae6c4274d1dd910a960cafbed038d0b1011cab4e4e8278b72949f176e28a",
      "scanner": "grype",
      "scanner_version": null,
      "severity_counts": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "negligible": 0,
        "unknown": 0
      },
      "fixable": 0,
      "total": 0,
      "top_cves": [],
      "source_url": "",
      "collected_at": "2026-07-19T18:18:10Z",
      "derivation": "grype scan of digest in ephemeral workflow pod",
      "state": "unavailable",
      "state_reason": "nightly-cve-scan CronWorkflow has not published its first scan yet"
    },
    {
      "id": "bluefin-lts-testing",
      "lane": "bluefin-lts-testing",
      "image_ref": "ghcr.io/projectbluefin/bluefin-lts:testing",
      "digest": "sha256:53d9ae6c4274d1dd910a960cafbed038d0b1011cab4e4e8278b72949f176e28a",
      "scanner": "grype",
      "scanner_version": null,
      "severity_counts": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "negligible": 0,
        "unknown": 0
      },
      "fixable": 0,
      "total": 0,
      "top_cves": [],
      "source_url": "",
      "collected_at": "2026-07-19T18:18:10Z",
      "derivation": "grype scan of digest in ephemeral workflow pod",
      "state": "unavailable",
      "state_reason": "nightly-cve-scan CronWorkflow has not published its first scan yet"
    },
    {
      "id": "dakota-testing",
      "lane": "dakota-testing",
      "image_ref": "ghcr.io/projectbluefin/dakota:testing",
      "digest": "sha256:d0f3f42a40b96223d8ed292c6f40d6f9cee4e456e447bed858b4563b8c3ced37",
      "scanner": "grype",
      "scanner_version": null,
      "severity_counts": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "negligible": 0,
        "unknown": 0
      },
      "fixable": 0,
      "total": 0,
      "top_cves": [],
      "source_url": "",
      "collected_at": "2026-07-19T18:18:10Z",
      "derivation": "grype scan of digest in ephemeral workflow pod",
      "state": "unavailable",
      "state_reason": "nightly-cve-scan CronWorkflow has not published its first scan yet"
    }
  ]
}