tund/dashboard
dashboard@f3603e234eb6
This is the linux/amd64 variant of a multi-arch index.
Pulling the index on a linux/amd64 machine fetches exactly this image.
It belongs to dashboard:0.4.2, so it cannot be deleted on its own: removing it would break that index. Delete the tag or the index and the next prune untagged run (or a retention policy) removes this entry; garbage collection reclaims its bytes.
docker pull chicor.ee/tund/dashboard@sha256:f3603e234eb6ba51f79cdb2183ee170a8e0fa3d21f5c1f072fb0968fa65f2f48- Digest
- f3603e234eb6ba51f79c
- Media type
- application/vnd.oci.image.manifest.v1+json
- Platform
- linux/amd64
- Build attestations
- SLSA provenance v1
- Total size
- 80.2 MiB
- Pushed
- Oct 6, 2026by
ruohki
Cargo plan
8 layers80.2 MiB
| # | Instruction | Digest | Shared | Size |
|---|---|---|---|---|
| 1 | ADD alpine-minirootfs-3.24.2-x86_64.tar.gz / # buildkit | e2de96513ba9 | 3.7 MiB | |
| 2 | RUN /bin/sh -c addgroup -g 1000 node && adduser -u 1000 -G node -s /bin/sh -D node && apk add --no-cache libstdc++ && apk add --no-cache --virtual .build-deps curl && ARCH= OPENSSL_ARCH='linux*' && alpineArch="$(apk --print-arch)" && case "${alpineArch##*-}" in x86_64) ARCH='x64' CHECKSUM="9b177f0c140a82a3d247e8f54586a65dbdf91e5e3a01f04708dabfdc9e0e01c4" OPENSSL_ARCH=linux-x86_64;; aarch64) OPENSSL_ARCH=linux-aarch64;; arm*) OPENSSL_ARCH=linux-armv4;; s390x) OPENSSL_ARCH=linux-s390x;; *) echo "unsupported architecture"; exit 1 ;; esac && if [ -n "${CHECKSUM}" ]; then set -eu; curl -fsSLO --compressed "https://unofficial-builds.nodejs.org/download/release/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz"; echo "$CHECKSUM node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz" | sha256sum -c - && tar -xJf "node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz" -C /usr/local --strip-components=1 --no-same-owner && ln -s /usr/local/bin/node /usr/local/bin/nodejs; else echo "Building from source" && apk add --no-cache --virtual .build-deps-full binutils-gold g++ gcc gnupg libgcc linux-headers make python3 py-setuptools && export GNUPGHOME="$(mktemp -d)" && for key in 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A 655F3B5C1FB3FA8D1A0CA6BDE4A7D232B936D2FD A363A499291CBBC940DD62E41F10027AF002F8B0 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz" && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc && gpgconf --kill all && rm -rf "$GNUPGHOME" && grep " node-v$NODE_VERSION.tar.xz\$" SHASUMS256.txt | sha256sum -c - && tar -xf "node-v$NODE_VERSION.tar.xz" && cd "node-v$NODE_VERSION" && ./configure && make -j$(getconf _NPROCESSORS_ONLN) V= && make install && apk del .build-deps-full && cd .. && rm -Rf "node-v$NODE_VERSION" && rm "node-v$NODE_VERSION.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt; fi && rm -f "node-v$NODE_VERSION-linux-$ARCH-musl.tar.xz" && find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name "$OPENSSL_ARCH" -exec rm -rf {} \; && apk del .build-deps && node --version && npm --version && rm -rf /tmp/* # buildkit | f7f2d304681a | 53.0 MiB | |
| 3 | RUN /bin/sh -c apk add --no-cache --virtual .build-deps-yarn curl gnupg tar && export GNUPGHOME="$(mktemp -d)" && for key in 6A010C5166006599AA17F08146C2130DFD2497F5 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc" && gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && gpgconf --kill all && rm -rf "$GNUPGHOME" && mkdir -p /opt && tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ && ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn && ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg && rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && apk del .build-deps-yarn && yarn --version && rm -rf /tmp/* # buildkit | e554276b05e6 | 1.2 MiB | |
| 4 | COPY docker-entrypoint.sh /usr/local/bin/ # buildkit | d39db1cf9caa | 447 B | |
| 5 | WORKDIR /app | 885eaa677206 | 93 B | |
| 6 | RUN /bin/sh -c addgroup -S -g 1001 tund && adduser -S -u 1001 -G tund tund # buildkit | 94c088044af6 | 963 B | |
| 7 | COPY --chown=tund:tund /app/.next/standalone ./ # buildkit | 95e9c9c44eca | unique | 21.8 MiB |
| 8 | COPY --chown=tund:tund /app/.next/static ./.next/static # buildkit | ade093709d3e | unique | 521 KiB |
H 11M 9L 121 findings · scanned 18d ago with Trivy 0.74.0
| Severity | Vulnerability | Package | Fixed in | Type |
|---|---|---|---|---|
| High | CVE-2026-102276brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns | brace-expansion 2.0.2fixed in 5.0.10, 3.0.7, 2.1.5, 1.1.19 | 5.0.10, 3.0.7, 2.1.5, 1.1.19 | library |
| High | CVE-2026-102278brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns | brace-expansion 2.0.2fixed in 5.0.11, 3.0.8, 2.1.6, 1.1.20 | 5.0.11, 3.0.8, 2.1.6, 1.1.20 | library |
| High | CVE-2026-13149brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity | brace-expansion 2.0.2fixed in 5.0.7, 1.1.16, 2.1.2 | 5.0.7, 1.1.16, 2.1.2 | library |
| High | CVE-2026-14257brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function | brace-expansion 2.0.2fixed in 5.0.8, 3.0.3, 2.1.3, 1.1.17 | 5.0.8, 3.0.3, 2.1.3, 1.1.17 | library |
| High | CVE-2026-69152brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation | brace-expansion 2.0.2fixed in 1.1.18, 2.1.4, 3.0.6, 5.0.9 | 1.1.18, 2.1.4, 3.0.6, 5.0.9 | library |
| High | CVE-2026-93748http-cache-semantics: http-cache-semantics: Information Disclosure via max-stale directive | http-cache-semantics 4.2.0no fix yet | no fix yet | library |
| High | CVE-2026-69192ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass | ip-address 10.1.0fixed in 10.3.1 | 10.3.1 | library |
| High | CVE-2026-9496pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function | pacote 19.0.2fixed in 21.5.1 | 21.5.1 | library |
| High | CVE-2026-9496pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function | pacote 20.0.1fixed in 21.5.1 | 21.5.1 | library |
| High | CVE-2026-33671picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns | picomatch 4.0.3fixed in 4.0.4, 3.0.2, 2.3.2 | 4.0.4, 3.0.2, 2.3.2 | library |
| High | CVE-2026-48815sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option | sigstore 3.1.0fixed in 4.1.1 | 4.1.1 | library |
| Medium | CVE-2026-48758sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding | @sigstore/core 2.0.0fixed in 3.2.1 | 3.2.1 | library |
| Medium | CVE-2026-102277brace-expansion: brace-expansion: Denial of Service via crafted brace patterns | brace-expansion 2.0.2fixed in 5.0.12, 3.0.9, 2.1.7, 1.1.21 | 5.0.12, 3.0.9, 2.1.7, 1.1.21 | library |
| Medium | CVE-2026-33750brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern | brace-expansion 2.0.2fixed in 5.0.5, 3.0.2, 2.0.3, 1.1.13 | 5.0.5, 3.0.2, 2.0.3, 1.1.13 | library |
| Medium | CVE-2026-101911ip-address: ip-address: Denial of Service via unbounded IPv6 address parsing | ip-address 10.1.0fixed in 10.7.1 | 10.7.1 | library |
| Medium | CVE-2026-101912ip-address: ip-address: Access control bypass via cross-family subnet comparison | ip-address 10.1.0fixed in 10.7.1 | 10.7.1 | library |
| Medium | CVE-2026-101913ip-address: ip-address: Security bypass via incomplete IPv6 link-local address validation | ip-address 10.1.0fixed in 10.5.1 | 10.5.1 | library |
| Medium | CVE-2026-42338ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input | ip-address 10.1.0fixed in 10.1.1 | 10.1.1 | library |
| Medium | CVE-2026-33672picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions | picomatch 4.0.3fixed in 4.0.4, 3.0.2, 2.3.2 | 4.0.4, 3.0.2, 2.3.2 | library |
| Medium | CVE-2026-104844postcss-selector-parser: postcss-selector-parser: Denial of Service via crafted CSS selectors | postcss-selector-parser 7.1.1fixed in 7.1.6 | 7.1.6 | library |
| Low | CVE-2026-9358postcss-selector-parser: Postcss: Denial of Service via uncontrolled recursion in AST Serialization | postcss-selector-parser 7.1.1fixed in 6.1.3, 7.1.3 | 6.1.3, 7.1.3 | library |
{
"schemaVersion": 2,
"mediaType": "application/vnd.oci.image.manifest.v1+json",
"config": {
"mediaType": "application/vnd.oci.image.config.v1+json",
"digest": "sha256:f31bd88624f5ef02731f176f7290e61999a32746c70c9dd45f4f977af77cce5e",
"size": 8734
},
"layers": [
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:e2de96513ba9eb53b431787ec8a65cdde380ac4772a3e4c4b714dcfde2a102b5",
"size": 3849738
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:f7f2d304681aaa935c9cfd180850cf616ae843efce7682873d6521ded7268937",
"size": 55585204
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:e554276b05e6306c5ad33cd85bfa7f0693083e21f6114db5abf60a20fb413039",
"size": 1262001
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:d39db1cf9caa4f49c5a2e67111fbe6e0d5eea8ede550cb82f3dc2b79712688d6",
"size": 447
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:885eaa6772060eb71b589a9c478bee80412302fcee858ca10ecb1120118be9bc",
"size": 93
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:94c088044af6e50e954460fd3fd6a8a30a7861fa0a87f56baf8a140eeadf68ff",
"size": 963
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:95e9c9c44eca197878d580f1d1a975245c282598488b29e41a5fadfbe29ea1fa",
"size": 22824051
},
{
"mediaType": "application/vnd.oci.image.layer.v1.tar+gzip",
"digest": "sha256:ade093709d3eace931fadb8180878283974ddb175e2ce6df8457d4b9a8499732",
"size": 533195
}
]
}