{"environment":"staging","role":"scanner","image":"europe-west1-docker.pkg.dev/borehole-staging/borehole/cs-scanner","digest":"sha256:33918f415c394e58da266343195bd856d3049625d06664d8ac0d0370ff7212e8","image_family":"confidential-space","published_at":"2026-09-23","note":"The image that reads private repositories. Nothing else may decrypt a clone token or reach a repository access credential.","reads_repositories":true}