apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "ImageDigestResolutionReceipt"
metadata:
  name: "prometheus-community-prometheus-server-only-ephemeral-image-digest-resolution"
spec:
  chart: "prometheus-community/prometheus"
  version: "29.8.0"
  variant: "server-only-ephemeral"
  resolvedAt: "2026-06-09T18:04:15.601Z"
  renderedObjectSet:
    path: "recipes/prometheus-community/prometheus/29.8.0/revisions/server-only-ephemeral/r001/rendered/release-objects.yaml"
    sha256: "174e1729753ef551fa059f86111cfd87653ea2380dc879238cf5cc4987e78812"
  sourceImageReview:
    path: "data/attack-plan-workdown/image-digest-review.csv"
    rows: 2
    uniqueImages: 2
  resolver:
    name: "docker-buildx-imagetools"
    commandTemplate: "docker buildx imagetools inspect <image>"
  images:
    -
      image: "quay.io/prometheus-operator/prometheus-config-reloader:v0.91.0"
      digest: "sha256:7d9e4eea5f1139e602508871f422b0116c60e87c662f3dcd234d5ab60cd0d8c1"
      digestReference: "quay.io/prometheus-operator/prometheus-config-reloader:v0.91.0@sha256:7d9e4eea5f1139e602508871f422b0116c60e87c662f3dcd234d5ab60cd0d8c1"
      mediaType: "application/vnd.docker.distribution.manifest.list.v2+json"
      resolverOutput:
        name: "quay.io/prometheus-operator/prometheus-config-reloader:v0.91.0"
      occurrences:
        -
          object: "apps/v1/Deployment/monitoring/prometheus-server"
          fieldPath: "spec.template.spec.containers.0.image"
    -
      image: "quay.io/prometheus/prometheus:v3.11.3"
      digest: "sha256:c0b857aead0d5793aa566adb8f49a9983d6f6031652098759d521a330cfa050f"
      digestReference: "quay.io/prometheus/prometheus:v3.11.3@sha256:c0b857aead0d5793aa566adb8f49a9983d6f6031652098759d521a330cfa050f"
      mediaType: "application/vnd.docker.distribution.manifest.list.v2+json"
      resolverOutput:
        name: "quay.io/prometheus/prometheus:v3.11.3"
      occurrences:
        -
          object: "apps/v1/Deployment/monitoring/prometheus-server"
          fieldPath: "spec.template.spec.containers.1.image"
  productionSupportUse:
    status: "digest-resolution-recorded"
    claim: "The mutable rendered image references for this Prometheus base were resolved to registry manifest digests at the recorded time."
    limits: "This receipt does not mean the rendered manifests are digest-pinned and does not by itself make the chart production-supported."
    nextRequired: "Choose a digest-pinned base, image override policy, or explicit mutable-image exception before broader production support."