grafana/agent
Rebuilt 8mo ago8 critical CVEs4 archs
$
docker pull grafana/agent Image metadata
PULL COUNT
—
repository-level (not per-tag)
SIZE (COMPRESSED)
170 MB
ARCHITECTURES
4
RUNS AS
root
image config.User
LAST PUSHED
8mo ago
2026-03-25 08:21:00
MANIFEST DIGEST
sha256:473928c1cace…
from registry manifest
Latest scan
2026-10-09 19:27:46 UTC · 1mo agoOPEN CVES BY SEVERITY
8
CRITICAL
52
HIGH
230
MEDIUM
75
LOW/NEG
Grype DB
2026-10-09T06:32:32.000Z
· rubric cerodeo-v1 RUBRIC BREAKDOWN (5 signals that moved the score)
-200 · Critical CVEs (fixable) -480 · High CVEs (fixable) -498 · Medium CVEs (fixable) -12 · High CVEs (no fix) +3 · Multi-arch
Raw data
Every signal above decomposes to arithmetic from inputs you can verify. Nothing in these downloads is derived or massaged — they're the raw grype matches and the raw snapshot history exactly as our scanner wrote them.
Reproduce this score yourself
We don't use judgement to score — every signal is deterministic from the image, the manifest, and a pinned CVE DB.
Run the script below on any host with skopeo, syft,
grype, cosign, and jq installed — it fetches the versioned rubric spec, computes the same breakdown, and prints the same grade. Pin the Grype DB with --grype-db to reproduce bit-for-bit identical results.
curl -fsSLO https://ce.rodeo/verify-score.sh && chmod +x verify-score.sh
./verify-score.sh grafana/agent \
--rubric cerodeo-v1 \
--grype-db 2026-10-09T06:32:32.000Z
All open CVEs (385)
sorted by severity, then CVSS score CVE ID SEV CVSS PACKAGE FIX
GHSA-m5gv-m5f9-wgv4 MEDIUM 7.3 github.com/grafana/agent v0.23.1-0.20260325080931-372611b64f2c+dirty fixed in 0.43.3
GHSA-rfxf-mf63-cpqv MEDIUM 6.5 github.com/open-telemetry/opentelemetry-collector-contrib/extension/bearertokenauthextension v0.96.0 fixed in 0.107.0
GHSA-xmrv-pmrh-hhx2 MEDIUM 5.9 github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.2 fixed in 1.7.8
GHSA-grj5-8x6q-hc9q MEDIUM 5.3 github.com/grafana/loki v1.6.2-0.20240510183741-cef4c2826b4b fixed in 2.3.0
GHSA-w8rr-5gcm-pp58 MEDIUM 5.3 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.24.0 fixed in 1.43.0
GHSA-w8rr-5gcm-pp58 MEDIUM 5.3 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.24.0 fixed in 1.43.0
GO-2026-5115 MEDIUM 5.3 github.com/grafana/loki v1.6.2-0.20240510183741-cef4c2826b4b no fix available
+ 185 more in the raw JSON
Scan history
29 total · first 1mo ago SCANNED AT GRADE SCORE CRIT HIGH MED GRYPE DB
1mo ago F 0 8 52 230 2026-10-09T06:32:32.000Z · (same SBOM)
1mo ago F 0 8 52 230 2026-10-09T06:32:32.000Z · (same SBOM)
1mo ago F 0 8 52 230 2026-10-09T06:32:32.000Z · (same SBOM)
1mo ago F 0 8 52 230 2026-10-09T06:32:32.000Z · (same SBOM)
1mo ago F 0 8 52 230 2026-10-09T06:32:32.000Z · (same SBOM)
1mo ago F 0 8 52 230 2026-10-09T06:32:32.000Z · (same SBOM)
1mo ago F 0 8 52 230 2026-10-09T06:32:32.000Z · (same SBOM)
1mo ago F 0 8 52 230 2026-10-09T06:32:32.000Z · (same SBOM)
1mo ago F 0 8 52 230 2026-10-09T06:32:32.000Z · (same SBOM)
1mo ago F 0 8 52 230 2026-10-09T06:32:32.000Z · (same SBOM)
1mo ago F 0 8 52 230 2026-10-09T06:32:32.000Z · (same SBOM)
1mo ago F 0 8 52 230 2026-10-09T06:32:32.000Z
1mo ago F 0 8 51 230 2026-10-08T06:33:47.000Z · (same SBOM)
1mo ago F 0 8 51 230 2026-10-08T06:33:47.000Z · (same SBOM)
1mo ago F 0 8 51 230 2026-10-08T06:33:47.000Z · (same SBOM)
1mo ago F 0 8 51 230 2026-10-08T06:33:47.000Z · (same SBOM)
1mo ago F 0 8 51 230 2026-10-08T06:33:47.000Z · (same SBOM)
1mo ago F 0 8 51 230 2026-10-08T06:33:47.000Z · (same SBOM)
1mo ago F 0 8 51 230 2026-10-08T06:33:47.000Z · (same SBOM)
1mo ago F 0 8 51 230 2026-10-08T06:33:47.000Z · (same SBOM)
1mo ago F 0 8 51 230 2026-10-08T06:33:47.000Z · (same SBOM)
1mo ago F 0 8 51 230 2026-10-08T06:33:47.000Z · (same SBOM)
1mo ago F 0 8 51 230 2026-10-08T06:33:47.000Z · (same SBOM)
1mo ago F 0 8 51 230 2026-10-08T06:33:47.000Z · (same SBOM)
1mo ago F 0 8 51 230 2026-10-08T06:33:47.000Z · (same SBOM)
1mo ago F 0 8 51 230 2026-10-08T06:33:47.000Z · (same SBOM)
1mo ago F 0 8 51 230 2026-10-08T06:33:47.000Z · (same SBOM)
1mo ago F 0 8 51 230 2026-10-08T06:33:47.000Z
1mo ago F 0 8 51 230 2026-10-06T06:32:14.000Z
Discussion
No comments yet. Be the first.