tund/dashboard
dashboard@4bb78261c5e7
This is the linux/arm64 variant of a multi-arch index.
Pulling the index on a linux/arm64 machine fetches exactly this image.
It belongs to dashboard:0.9, dashboard:0.9.0, dashboard:latest, dashboard@d3ad063d093f, so it cannot be deleted on its own: removing it would break that index. Delete the tag or the index and the next prune untagged run (or a retention policy) removes this entry; garbage collection reclaims its bytes.
docker pull chicor.ee/tund/dashboard@sha256:4bb78261c5e72ba35b248e425e7cd02802de5db474c9fdae90a2d830678c2609- Digest
- 4bb78261c5e72ba35b24
- Media type
- application/vnd.oci.image.manifest.v1+json
- Platform
- linux/arm64
- Build attestations
- SLSA provenance v1
- Total size
- 81.6 MiB
- Pushed
- Oct 20, 2026byGitHub Actions · tund/github-ci
Cargo plan
8 layers81.6 MiB
| # | Instruction | Digest | Shared | Size |
|---|---|---|---|---|
| 1 | ADD alpine-minirootfs-3.24.2-aarch64.tar.gz / # buildkit | a9986cd6f37d | 4.0 MiB | |
| 2 | RUN /bin/sh -c addgroup -g 1000 node && adduser -u 1000 -G node -s /bin/sh -D node && apk add --no-cache libstdc++ && apk add --no-cache --virtual .build-deps curl && ARCH= OPENSSL_ARCH='linux*' && alpineArch="$(apk --print-arch)" && case "${alpineArch##*-}" in x86_64) ARCH='x64' CHECKSUM="9b177f0c140a82a3d247e8f54586a65dbdf91e5e3a01f04708dabfdc9e0e01c4" OPENSSL_ARCH=linux-x86_64;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; s390x) OPENSSL_ARCH=linux-s390x;; *) echo "unsupported architecture"; exit 1 ;; esac && if [ -n "${CHECKSUM}" ]; then set -eu; curl -fsSLO --compressed "https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz"; echo "$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz" | sha256sum -c - && tar -xJf "node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz" -C /usr/local --strip-components=1 --no-same-owner && ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo "Building from source" && apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 py-setuptools && export GNUPGHOME="$(mktemp -d)" && for key in 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A 655F3B5C1FB3FA8D1A0CA6BDE4A7D232B936D2FD A363A499291CBBC940DD62E41F10027AF002F8B0 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz" && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc && gpgconf --kill all && rm -rf "$GNUPGHOME" && grep " node-v$NODE_VERSION.tar.xz\$" SHASUMS256.txt | sha256sum -c - && tar -xf "node-v$NODE_VERSION.tar.xz" && cd "node-v$NODE_VERSION" && ./configure && make -j$(getconf _NPROCESSORS_ONLN) V= && make install && apk del .build-deps-full && cd .. && rm -Rf "node-v$NODE_VERSION" && rm "node-v$NODE_VERSION.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt; fi && rm -f "node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz" && find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name "$OPENSSL_ARCH" -exec rm -rf {} \; && apk del .build-deps && node --version && npm --version && rm -rf /tmp/* # buildkit | 87919ed734a3 | 53.0 MiB | |
| 3 | RUN /bin/sh -c apk add --no-cache --virtual .build-deps-yarn curl gnupg tar && export GNUPGHOME="$(mktemp -d)" && for key in 6A010C5166006599AA17F08146C2130DFD2497F5 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc" && gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && gpgconf --kill all && rm -rf "$GNUPGHOME" && mkdir -p /opt && tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ && ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn && ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg && rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && apk del .build-deps-yarn && yarn --version && rm -rf /tmp/* # buildkit | 74849c662da7 | 1.2 MiB | |
| 4 | COPY docker-entrypoint.sh /usr/local/bin/ # buildkit | 66fa63c7a061 | 444 B | |
| 5 | WORKDIR /app | 34ac5c5dc098 | 93 B | |
| 6 | RUN /bin/sh -c addgroup -S -g 1001 tund && adduser -S -u 1001 -G tund tund # buildkit | 2950c0c80d7d | 962 B | |
| 7 | COPY --chown=tund:tund /app/.next/standalone ./ # buildkit | 9fab9090421e | unique | 22.8 MiB |
| 8 | COPY --chown=tund:tund /app/.next/static ./.next/static # buildkit | 08bc3f99c01b | unique | 564 KiB |
H 12M 14L 228 findings · scanned 4d ago with Trivy 0.74.0
| Severity | Vulnerability | Package | Fixed in | Type |
|---|---|---|---|---|
| High | CVE-2026-102276brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns | brace-expansion 2.0.2fixed in 5.0.10, 3.0.7, 2.1.5, 1.1.19 | 5.0.10, 3.0.7, 2.1.5, 1.1.19 | library |
| High | CVE-2026-102278brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns | brace-expansion 2.0.2fixed in 5.0.11, 3.0.8, 2.1.6, 1.1.20 | 5.0.11, 3.0.8, 2.1.6, 1.1.20 | library |
| High | CVE-2026-13149brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity | brace-expansion 2.0.2fixed in 5.0.7, 1.1.16, 2.1.2 | 5.0.7, 1.1.16, 2.1.2 | library |
| High | CVE-2026-14257brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function | brace-expansion 2.0.2fixed in 5.0.8, 3.0.3, 2.1.3, 1.1.17 | 5.0.8, 3.0.3, 2.1.3, 1.1.17 | library |
| High | CVE-2026-69152brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation | brace-expansion 2.0.2fixed in 1.1.18, 2.1.4, 3.0.6, 5.0.9 | 1.1.18, 2.1.4, 3.0.6, 5.0.9 | library |
| High | CVE-2026-93748http-cache-semantics: http-cache-semantics: Information Disclosure via max-stale directive | http-cache-semantics 4.2.0no fix yet | no fix yet | library |
| High | CVE-2026-69192ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass | ip-address 10.1.0fixed in 10.3.1 | 10.3.1 | library |
| High | CVE-2026-94483next: Next.js: Information disclosure via SSRF in Image Optimization | next 16.3.7fixed in 16.3.8 | 16.3.8 | library |
| High | CVE-2026-9496pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function | pacote 19.0.2fixed in 21.5.1 | 21.5.1 | library |
| High | CVE-2026-9496pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function | pacote 20.0.1fixed in 21.5.1 | 21.5.1 | library |
| High | CVE-2026-33671picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns | picomatch 4.0.3fixed in 4.0.4, 3.0.2, 2.3.2 | 4.0.4, 3.0.2, 2.3.2 | library |
| High | CVE-2026-48815sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option | sigstore 3.1.0fixed in 4.1.1 | 4.1.1 | library |
| Medium | CVE-2026-48758sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding | @sigstore/core 2.0.0fixed in 3.2.1 | 3.2.1 | library |
| Medium | CVE-2026-102277brace-expansion: brace-expansion: Denial of Service via crafted brace patterns | brace-expansion 2.0.2fixed in 5.0.12, 3.0.9, 2.1.7, 1.1.21 | 5.0.12, 3.0.9, 2.1.7, 1.1.21 | library |
| Medium | CVE-2026-33750brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern | brace-expansion 2.0.2fixed in 5.0.5, 3.0.2, 2.0.3, 1.1.13 | 5.0.5, 3.0.2, 2.0.3, 1.1.13 | library |
| Medium | CVE-2026-101911ip-address: ip-address: Denial of Service via unbounded IPv6 address parsing | ip-address 10.1.0fixed in 10.7.1 | 10.7.1 | library |
| Medium | CVE-2026-101912ip-address: ip-address: Access control bypass via cross-family subnet comparison | ip-address 10.1.0fixed in 10.7.1 | 10.7.1 | library |
| Medium | CVE-2026-101913ip-address: ip-address: Security bypass via incomplete IPv6 link-local address validation | ip-address 10.1.0fixed in 10.5.1 | 10.5.1 | library |
| Medium | CVE-2026-42338ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input | ip-address 10.1.0fixed in 10.1.1 | 10.1.1 | library |
| Medium | CVE-2026-94484next: Next.js: Denial of Service via response cache poisoning | next 16.3.7fixed in 16.3.8, 15.5.27 | 16.3.8, 15.5.27 | library |
| Medium | CVE-2026-94485next: Next.js: Information disclosure via unrestricted cross-site requests on development server | next 16.3.7fixed in 16.3.8 | 16.3.8 | library |
| Medium | CVE-2026-94543next: Next.js: Response cache poisoning via improper route binding | next 16.3.7fixed in 15.5.27, 16.3.8 | 15.5.27, 16.3.8 | library |
| Medium | CVE-2026-94544next: Next.js: Information disclosure via shared cache fills in Draft Mode | next 16.3.7fixed in 16.3.8 | 16.3.8 | library |
| Medium | CVE-2026-33672picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions | picomatch 4.0.3fixed in 4.0.4, 3.0.2, 2.3.2 | 4.0.4, 3.0.2, 2.3.2 | library |
| Medium | CVE-2026-104844postcss-selector-parser: postcss-selector-parser: Denial of Service via crafted CSS selectors | postcss-selector-parser 7.1.1fixed in 7.1.6 | 7.1.6 | library |
| Medium | CVE-2026-85091zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ... | zlib 1.3.2-r0fixed in 1.3.2-r1 | 1.3.2-r1 | os |
| Low | CVE-2026-94486next: Next.js: Information disclosure via unrestricted cross-site requests | next 16.3.7fixed in 16.3.8 | 16.3.8 | library |
| Low | CVE-2026-9358postcss-selector-parser: Postcss: Denial of Service via uncontrolled recursion in AST Serialization | postcss-selector-parser 7.1.1fixed in 6.1.3, 7.1.3 | 6.1.3, 7.1.3 | library |
{
"schemaVersion": 2,
"mediaType": "application/vnd.oci.image.manifest.v1+json",
"config": {
"mediaType": "application/vnd.oci.image.config.v1+json",
"digest": "sha256:86742d911235c1b7929b34a76eb01aaa4486749856815e2f1cd4a6d6f527ee85",
"size": 8735
},
"layers": [
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:a9986cd6f37dbddae7862a6d4be71683472e7c2ea708e87db14f8a6393c00f00",
"size": 4187659
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:87919ed734a39bc185155d715bdcf2ce6c52d112ff642650d9e0e35502b481e9",
"size": 55602437
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:74849c662da757b89cfe8b5406d7beaaf491727ea6843cbba85b8889d1543956",
"size": 1262880
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:66fa63c7a061939c4346f9c3c1ada45434b276dd4e4274721d6bf13cb8adec6e",
"size": 444
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:34ac5c5dc098c8599b01b4a6dceb34c453a85e8a3745a47bb33baa1d72ad02c9",
"size": 93
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:2950c0c80d7dedee4bdb206cacd28780b25441dd12c98e79acfb28c1b4ddadd3",
"size": 962
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:9fab9090421eeedd2ecd0448f4b764a8fc0f2348e39b9c6610d96f0122c2ff41",
"size": 23887742
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:08bc3f99c01b46022b4885974afe14b9bf61ca8aa409a555c033944dbcf3f8bf",
"size": 577424
}
]
}