apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "ImageDigestResolutionReceipt"
metadata:
  name: "bitnami-mysql-static-passwords-image-digest-resolution"
spec:
  chart: "bitnami/mysql"
  version: "14.0.3"
  variant: "static-passwords"
  resolvedAt: "2026-06-09T18:36:51.905Z"
  renderedObjectSet:
    path: "recipes/bitnami/mysql/14.0.3/revisions/static-passwords/r001/rendered/release-objects.yaml"
    sha256: "04e856bfa75859dc9d8e45c61d49ad566494a7f66c257da9113ad26ca1696380"
  sourceImageReview:
    path: "data/attack-plan-workdown/image-digest-review.csv"
    rows: 2
    uniqueImages: 1
  resolver:
    name: "docker-buildx-imagetools"
    commandTemplate: "docker buildx imagetools inspect <image>"
  images:
    -
      image: "docker.io/bitnamilegacy/mysql:9.4.0-debian-12-r1"
      digest: "sha256:ec13e229247a737f7149b7f255d8f2d9c72da861f8bf263b22091bf131540da3"
      digestReference: "docker.io/bitnamilegacy/mysql:9.4.0-debian-12-r1@sha256:ec13e229247a737f7149b7f255d8f2d9c72da861f8bf263b22091bf131540da3"
      mediaType: "application/vnd.docker.distribution.manifest.list.v2+json"
      resolverOutput:
        name: "docker.io/bitnamilegacy/mysql:9.4.0-debian-12-r1"
      occurrences:
        -
          object: "apps/v1/StatefulSet/mysql/mysql"
          fieldPath: "spec.template.spec.containers.0.image"
        -
          object: "apps/v1/StatefulSet/mysql/mysql"
          fieldPath: "spec.template.spec.initContainers.0.image"
  productionSupportUse:
    status: "digest-resolution-recorded"
    claim: "The mutable rendered image references for this MySQL base were resolved to registry manifest digests at the recorded time."
    limits: "This receipt does not mean the rendered manifests are digest-pinned and does not by itself make the chart production-supported."
    nextRequired: "Choose a digest-pinned base, image override policy, or explicit mutable-image exception before broader production support."