apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "ImageDigestResolutionReceipt"
metadata:
  name: "bitnami-rabbitmq-static-passwords-image-digest-resolution"
spec:
  chart: "bitnami/rabbitmq"
  version: "16.0.14"
  variant: "static-passwords"
  resolvedAt: "2026-06-09T18:43:21.633Z"
  renderedObjectSet:
    path: "recipes/bitnami/rabbitmq/16.0.14/revisions/static-passwords/r001/rendered/release-objects.yaml"
    sha256: "81187ce4367f5196ddbaa35ea55b972698f8a474d78a2cdc2908b12290c89f31"
  sourceImageReview:
    path: "data/attack-plan-workdown/image-digest-review.csv"
    rows: 2
    uniqueImages: 1
  resolver:
    name: "docker-buildx-imagetools"
    commandTemplate: "docker buildx imagetools inspect <image>"
  images:
    -
      image: "docker.io/bitnamilegacy/rabbitmq:4.1.3-debian-12-r1"
      digest: "sha256:9e635efba43143807c003fd52cd741e88ae1b45e4f5739105c8bf8f6f94912fe"
      digestReference: "docker.io/bitnamilegacy/rabbitmq:4.1.3-debian-12-r1@sha256:9e635efba43143807c003fd52cd741e88ae1b45e4f5739105c8bf8f6f94912fe"
      mediaType: "application/vnd.docker.distribution.manifest.list.v2+json"
      resolverOutput:
        name: "docker.io/bitnamilegacy/rabbitmq:4.1.3-debian-12-r1"
      occurrences:
        -
          object: "apps/v1/StatefulSet/rabbitmq/rabbitmq"
          fieldPath: "spec.template.spec.containers.0.image"
        -
          object: "apps/v1/StatefulSet/rabbitmq/rabbitmq"
          fieldPath: "spec.template.spec.initContainers.0.image"
  productionSupportUse:
    status: "digest-resolution-recorded"
    claim: "The mutable rendered image references for this RabbitMQ base were resolved to registry manifest digests at the recorded time."
    limits: "This receipt does not mean the rendered manifests are digest-pinned and does not by itself make the chart production-supported."
    nextRequired: "Choose a digest-pinned base, image override policy, or explicit mutable-image exception before broader production support."