Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

Studies LH023

A Drupal image is published; its base resolution remains unseen

The answer so far. The known drupal:10.6-php8.3-fpm production tag had a published linux/amd64 image at this observation. Its exact manifest and config hashes verified, and the config declares PHP_VERSION=8.3.36, the fixed 8.3 source version. The production Dockerfile's literal base instruction is FROM php:8.3-fpm-trixie. No selected public source Actions run after the PHP image publication at the frozen heads exposed a resolved PHP base digest, and the config has no ancestry label. This does not prove when or from which base digest the derivative was built, that it was deployed, or that an executable was independently patched.

Write-up studies/LH023/LH023.md

From studies/LH023/ in the repository, last changed 9 November 2026.