hoppr-cop

Hoppr-Cop 用于监管您的SBOM漏洞 Hoppr Cop 是一个 CLI 和 Python 库，它通过聚合多个漏洞数据库的数据，从 cyclone-dx 软件物料清单（SBOM）中生成高质量的漏洞信息。该项目是 hoppr 生态系统的一部分，但也可以作为独立的 CLI 或 Python 库完全使用。 更多信息请参阅项目文档 要求 Hoppr Cop 支持 CycloneDX 规范版本 1.3、1.4 和 1.5 扫描工具（如需使用则必备） grype -- 版本 0.73.0 或更高 trivy -- 版本 0.46.0 或更高 项目状态 初始版本 功能特点...

grype

Grype 一款用于容器镜像和文件系统的漏洞扫描器。 特性 扫描容器镜像 、文件系统 和SBOM 以发现已知漏洞（查看文档了解完整的支持的扫描目标列表） 支持主流操作系统软件包生态系统（Alpine、Debian、Ubuntu、RHEL、Oracle Linux、Amazon Linux 以及更多） 支持特定语言的软件包（Ruby、Java、JavaScript、Python、.NET、Go、PHP、Rust 以及更多） 支持 Docker、OCI 和 Singularity 镜像格式 通过 EPSS 、KEV 和 风险评分 进行威胁与风险优先级排序（参见解读结果文档） OpenVEX...

GO-2024-2490 vulnerabilities

Vulnerabilities for packages: wolfictl, grype, k9s, syft, kubescape, zarf...

GO-2024-2948 vulnerabilities

Vulnerabilities for packages: kots, terragrunt, tfsec, snyk-cli, wolfictl, tflint, trivy-fips, grype, conftest, k9s, kubescape, terraform, conftest-fips, trivy, zarf, zot...

GO-2026-4809 vulnerabilities

Vulnerabilities for packages: xeol-fips, grype-db, wolfictl, syft-fips, kubescape-operator-fips, kubescape-server-fips, kubescape-server, xeol, kubescape-operator, k9s-fips, zarf-fips, guac, k9s, kubescape, chainctl-fips, zarf, cg, chainctl...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: kots, trufflehog, wolfictl, gitleaks, k9s-fips, kubescape, undock, grype-fips, cg, nuclei, k9s, filebrowser, chezmoi, gptscript, chainctl, syft-fips, trufflehog-fips, gotenberg, mattermost-fips, mattermost, grype-db, grype, syft, zarf...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: kots, skopeo, cadvisor, wolfictl, kubescape, kubernetes, zot, k3d, newrelic-infrastructure-agent, nerdctl, k9s, ctop, docker, k3s, kaniko, runc, buildkitd, grype, podman, syft, skaffold, zarf, trivy...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: cadvisor, eks-distro, k8s-device-plugin, opentelemetry-collector-contrib-fips, kubernetes, cluster-autoscaler, ctop, opentelemetry-collector-contrib, gosu, neuvector-scanner-fips, eks-distro-fips, grafana-alloy, docker, neuvector, kubernetes-fips, k3s,...

GO-2024-2791 vulnerabilities

Vulnerabilities for packages: cadvisor, wolfictl, grype, neuvector-scanner, opentelemetry-collector-contrib-fips, ctop, opentelemetry-collector-contrib, kubernetes, buildah, cadvisor-fips...

GO-2025-3528 vulnerabilities

Vulnerabilities for packages: kots, cilium-cli, consul-k8s, wolfictl, trivy, rancher, rancher-agent, consul-k8s-fips, beats-fips, docker-fips, kaniko-fips, kubescape, grype-fips, zot, docker-compose-fips, envoy-gateway, xeol-fips, flux-source-controller-fips, xeol, opa-fips-envoy,...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: trufflehog, kubescape-operator-fips, gitleaks, prometheus-podman-exporter, k9s-fips, k8s-image-swapper, trivy-operator, undock, grype-fips, google-osconfig-agent, cg, zot, gitea-fips, cloudbeat-fips, envoy-gateway, regclient-fips, drone-fips, vcluster, xeol-fips, xeo...

GO-2026-5758 vulnerabilities

Vulnerabilities for packages: amazon-ecs-agent, headlamp, chartmuseum-fips, manifest-tool, skaffold-fips, xeol-fips, helm-exporter-fips, newrelic-infrastructure-agent, cluster-api-helm-controller-fips, cloudbeat, gitlab-rails-ce, docker, kgateway-fips, linkerd2, helm-operator, chartmuseum,...

GO-2024-2490 vulnerabilities

Vulnerabilities for packages: kubescape, zarf, wolfictl, syft, grype, k9s...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: filebrowser, kubescape, zarf, kots, trufflehog, wolfictl, gitleaks, undock, syft, nuclei, grype, k9s, chezmoi, gptscript...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: syft, grype, k9s, kubernetes, k3d, newrelic-infrastructure-agent, k3s, cadvisor, wolfictl, kaniko, podman, kots, buildkitd, runc, skaffold, skopeo, nerdctl, kubescape, trivy, zarf, ctop, docker, zot...

GO-2023-2412 vulnerabilities

Vulnerabilities for packages: helm-push, grype, k3d, kubevela, newrelic-infrastructure-agent, gitness, kaniko, eksctl, cilium-cli, helm, kots, buildkitd, fuse-overlayfs-snapshotter, flux-source-controller, skaffold, melange, kubescape, trivy, ctop, flux-helm-controller, up, k8sgpt, zot...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: k3s, neuvector-scanner, ctop, grype, cadvisor, docker, podman, grafana-alloy, runc, syft, opentelemetry-collector-contrib, buildah, k8s-device-plugin, kubernetes...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, cri-tools, helm-push, buf, grype, wolfictl, dagger, docker, kaniko, syft, harbor-scanner-trivy, docker-compose, policy-controller, k3d, melange...

GO-2024-2791 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, ctop, grype, cadvisor, wolfictl, opentelemetry-collector-contrib, buildah, kubernetes...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, flux-kustomize-controller, src-fingerprint, goreleaser, flux, syft, grype, k9s, tfsec, kubevela, flux-image-automation-controller, pulumi, wolfictl, zot, dagger, pulumi-language-java, kaniko, argo-events, grafana-alloy, argo-workflows,...