trivy

📖 Документация Trivy произношение — это комплексный и универсальный сканер безопасности. Trivy имеет сканеры , которые ищут проблемы безопасности, и цели , в которых эти проблемы могут быть найдены. Цели что может сканировать Trivy: Образ контейнера Файловая система Git-репозиторий удалённый Обра...

whoc

whoc A container image that extracts the underlying container runtime and sends it to a remote server. Poke at the underlying container runtime of your favorite CSP container platform! WhoC at Defcon 29 Cloud Village Azurescape - whoc-powered research, the first cross-account container takeover i...

whoc

whoc Une image conteneur qui extrait le runtime conteneur sous-jacent et l'envoie à un serveur distant. Interrogez le runtime conteneur sous-jacent de votre plateforme conteneur CSP préférée ! WhoC au Defcon 29 Cloud Village Azurescape - recherche propulsée par whoc, la première prise de contrôle...

dockle

Dockle - Linter d'images conteneur pour la sécurité, aidant à construire une image Docker selon les meilleures pratiques, facile à démarrer Dockle vous aide à : 1. Construire des images Docker selon les meilleures pratiques 2. Construire des images Docker sécurisées Les points de contrôle incluen...

trivy-java-db

trivy-java-db Overview trivy-java-db builds a SQLite database from maven-index repository data, storing ArtifactID, GroupID, Version and sha1 for jar files. The DB is used in Trivy to discover information about jars without GAV inside them. Update interval Every day at 00:00 Download the java...

GitLeaks

Image conteneur GitLeaks Build gitleaks opinionné pour la détection de secrets dans les workflows locaux et les pipelines. Fonctionnalités Construit gitleaks à partir de la source amont taguée avec des chaînes Go épinglées pour des binaires reproductibles. Composant GitLab CI chez...

nginx-cve-fix

Correction de CVE Nginx - Remplacement Construit à partir des Sources pour nginx:1.25-bookworm Une image de conteneur nginx 1.25.5 construite à partir des sources qui corrige deux CVE présentes dans l'image officielle nginx:1.25-bookworm tout en préservant le comportement d'exécution en amont. CV...

cve-2016-7434

CVE-2016-7434 Это часть Cved: инструмент для управления уязвимыми docker-контейнерами. Cved: https://github.com/git-rep-src/cved Источник образа: https://github.com/cved-sources/cve-2016-7434 Автор образа: https://github.com/opsxcq/exploit-CVE-2016-7434...

CVE-2026-100103

Perforce P4 Search container images prior to version 2026.4.2 are vulnerable to an authentication bypass because the service authentication token is reset to a publicly documented default value . An unauthenticated attacker with network access can exploit this to obtain the highest application pr...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana within Instana Agent container image build 1.0.326 Vulnerability Details CVEID:CVE-2026-63383 DESCRIPTION: Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent can read beyond a...

dasel-melange-apko

dasel v3.3.1 — Сборка Melange + apko, исправление для CVE-2026-33320 Этот репозиторий упаковывает CLI-утилиту dasel v3.3.1 как APK-пакет с помощью Melange , собирает минимальный образ контейнера с помощью apko и применяет исправление для CVE-2026-33320 , оставаясь на кодовой базе v3.3.1 патч, а н...

cve-2018-17207

CVE-2018-17207 이것은 Cved의 일부입니다: 취약한 도커 컨테이너를 관리하는 도구입니다. Cved: https://github.com/git-rep-src/cved 이미지 출처: https://github.com/cved-sources/cve-2018-17207 이미지 저자: https://github.com/cved-sources/cve-2018-17207...

anchore-engine

Anchore Engine NOTE IMPORTANTE Depuis 2023, Anchore Engine n'est plus maintenu. Aucune future version ne sera publiée. Il est conseillé aux utilisateurs d'utiliser Syft et Grype. Pour les utilisateurs intéressés par une solution commerciale prise en charge pour l'analyse des conteneurs et la...

Important: Red Hat Security Advisory: General availability of the satellite/iop-advisor-backend-rhel9 container image

A new satellite/iop-advisor-backend-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services,...

Important: Red Hat Security Advisory: satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview

A new satellite/iop-vulnerability-engine-rhel9 container image is now available as a Technology Preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages...

Important: Red Hat Security Advisory: General availability of the satellite/iop-advisor-backend-rhel9 container image

A new satellite/iop-advisor-backend-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services,...

Important: Red Hat Security Advisory: Technical preview of the satellite/iop-vulnerability-frontend-rhel9 container image

A new satellite/iop-vulnerability-frontend-rhel9 container image is now available as a technical preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed package...

Important: Red Hat Security Advisory: Technical preview of the satellite/iop-vmaas-rhel9 container image

A new satellite/iop-vmaas-rhel9 container image is now available as a technical preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running...

Important: Red Hat Security Advisory: Technical preview of the satellite/iop-vulnerability-frontend-rhel9 container image

A new satellite/iop-vulnerability-frontend-rhel9 container image is now available as a technical preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed package...

CVE-2026-87114

A flaw in kube-compare allows a remote attacker to achieve arbitrary code execution on an operator's workstation. When processing a container:// reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of extracting data from a stopped container. This vulner...