maf-extensions / Security evidence
Know which image you use.
This report shows release delivery and known High/Critical vulnerabilities for exact container digests. It checks the deployed catalogue against GitHub's immutable release history and latest monitor attempt when you open or refresh it. A clean scan does not prove the absence of malware, backdoors, or unknown vulnerabilities.
Monitoring status unavailable until current evidence is checked.
Historical monitoring status unavailable until current evidence is checked.
No live verification yet.
| Image / version | Release delivery | Monitoring | Latest assessment | Latest attempt | Database identity | Monitoring ends | Known findings and fixes | Release scope / replacement |
|---|
Monitoring runs daily, assessments expire after 48 hours, and superseded completed releases remain monitored for 90 days. Historical findings appear as warnings separately from current-release health. Incomplete or abandoned public candidates and missing monitoring evidence still need attention. Previously known findings remain listed even if a later scan cannot complete.
Release contract and consumer verification · Monitor runs · Deployed catalogue snapshot
Release identity and current monitoring are separate checks. This page does not verify image signatures or authorize execution.