{
  "repository": "coollabsio/coolify",
  "commit_source": "git_rev_parse",
  "commit_sha": "914d7e0b50505bc1fd56c34974fca09ad354e92a",
  "submitted_target": {
    "target_kind": "release_tag",
    "commit_sha": "575b0766d12bad2a78febff72ab59c017772bcf7",
    "version": "4.0.0-beta.470",
    "ref": "v4.0.0-beta.470",
    "display": "ghcr.io/coollabsio/coolify:4.0.0-beta.470 (tag commit 575b0766d)"
  },
  "variant_target": {
    "target_kind": "release_tag",
    "commit_sha": "914d7e0b50505bc1fd56c34974fca09ad354e92a",
    "version": "4.0.0-beta.471",
    "ref": "v4.0.0-beta.471",
    "display": "ghcr.io/coollabsio/coolify:4.0.0-beta.471 (tag commit 914d7e0b5, fix merge 9e96a20a4, fix branch commit 3d1b9f53a)"
  },
  "fix_identity": {
    "pr": 9228,
    "merge_commit": "9e96a20a49f32e46d7a31e66e1aa6338b029f284",
    "branch_commit": "3d1b9f53a0aec74468be75675bcaaaed0fd41d46",
    "released_in": "4.0.0-beta.471"
  },
  "tested_images": {
    "vulnerable": "ghcr.io/coollabsio/coolify:4.0.0-beta.470",
    "fixed": "ghcr.io/coollabsio/coolify:4.0.0-beta.471"
  },
  "resolution_method": "Official GitHub Container Registry images resolved to release tags; underlying git commits resolved via the project-cache repo mirror (git rev-list -n1 v4.0.0-beta.470 / v4.0.0-beta.471). Runtime-tested via the official Docker images; the fixed build's blocking exception (setNetworkAttribute at StandaloneDocker.php:37) was captured from the running beta.471 container's laravel.log, corroborating the exact fixed source.",
  "notes": "Both the vulnerable and fixed official images were exercised end-to-end. The repo mirror HEAD remained at 575b0766d (beta.470); only read-only git show/log/rev-parse was used. No checkout was performed."
}