v1.6.521

Server 1.6.521; Engine 0.183.337 canonical audit identifiers and key audit validation.

Prebuilt clean producer: d478d917f989903dafc6bb834b7f9017126a68bd; tree: a021132f9177e910b2d16fd1b183f117749342e6.
Merged PR: #271; merge: d0d1b417833c25e4a6b765e27e3a52f450d7c0e1.
Four required Analyze checks and the organization CodeQL check succeeded at the exact producer SHA.
Engine producer: ba041fe312dfe97fc1e5144af576ddcf1b573d8e; 32 audit and 10 MFA tests passed.
Image: ghcr.io/pasturestack/server@sha256:bd368b3ac58c7b161442906241aa7ef2a41360a164cb3ca181d0b84742fb2194.
Config: sha256:96b2315a48371e114e7bb4e75353c31b6feafaff7199e4640bf481522f10d5fe; 22 layers and 13 embedded hashes read back.
New image SBOM/scan/VEX policy evidence attached; 11 unchanged components reuse original manifest references.
No rebuild, component republication or deployment performed by this publisher.

SHA256:

• c5d8e4d0fd268554e94f30e9bed8ce3e319ded6fd18f594333b1f01a909dee91 server-v1.6.521-engine337.tar.gz
• 2ea61676545c15a85aaa561a1e474bc3a90d5660aca6d18ce567db58054c83d4 server-security-scan-raw.json
• 114992f2acff1156ce0a0c5154df2354399a7c018b5137c4bbb447a0af1669c1 server-security-scan.json
• ce152a69935561c14b4faf5cabbadaf7b0c9fba07799d4c2a63387fc7734e6fa server.cdx.json
• c8f38b42a833345da4c7ac8eaa91a4dbea864a27e3d9e2895f5023d8b9dcad7d server.openvex.json
• b5c9ce0e526a78987757f4965e6763abc13ac2bce504c8e6beb1fff521c36b38 server.vendor-pending.json
• 7a8efd991f56d4aae8f235126a71d1f4c67cd3399f060498b23cb50031961be5 receipt.json
• 0cc47a0d0845c728fb87a9f8c7a789b2c71d1b1773f38eba1c224c6c869b5d7e policy-receipt.json
• 1112b60b2a7f226af98b2ddaffd82f9b4a412f0aefcb86e89daf3d9cafc9a499 registry-publication-binding.json
• 910c19e67ef0c11e9450e5d4f006ed4b31a9c179a889ee303533e205693ef5b3 server-v1.6.521-engine337.tar.gz.sha256