trustlock

trustlock एक Git-नेटिव डिपेंडेंसी एडमिशन कंट्रोलर। हर डिपेंडेंसी बदलाव पर विश्वास संकेतों का मूल्यांकन करता है। यह कैसे काम करता है trustlock एक Git प्री-कमिट हुक सलाहकार मोड और एक CI जाँच लागू मोड के रूप में चलता है: सलाहकार प्री-कमिट: उल्लंघनों पर चेतावनी देता है, exit 0 करता है, जब सभी पैकेज...

scorecard

OpenSSF Scorecard...

js-x-ray

!slsa स्तर...

minimal

छोटे, कठोर कंटेनर इमेजेस, मुफ्त और MIT-लाइसेंस प्राप्त। Chainguard के apko और Wolfi पैकेजों के साथ स्रोत से निर्मित, हर छह घंटे में पुनर्निर्मित। हर इमेज cosign-signed है, एक SPDX SBOM प्रमाणन भेजता है, और SLSA स्तर 3 बिल्ड प्रोवनेंस रखता है। आप बिना किसी खाते के यह सब सत्यापित कर सकते हैं। 🌐...

slsa

SLSA "salsa" सॉफ्टवेयर आर्टिफैक्ट्स के लिए आपूर्ति श्रृंखला स्तर है SLSA उच्चारण "salsa" स्रोत से सेवा तक एक सुरक्षा ढांचा है, जो सॉफ्टवेयर के साथ काम करने वाले किसी भी व्यक्ति को सॉफ्टवेयर सुरक्षा और आपूर्ति श्रृंखला अखंडता के बढ़ते स्तरों के लिए एक सामान्य भाषा प्रदान करता है। यह आपको श्रृंखला ...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: gh, cosign, cosign-fips, slsa-verifier...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: reports-server, cosign-fips, spire-server, tflint-fips, tekton-chains-fips, image-factory, ratify-fips, kyverno-notation-aws, tekton-chains, teleport-operator-fips, falcoctl, flux-source-controller-fips, gitsign, flux-source-controller, gh, image-factory-fips,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: spire-server, cosign-fips, tekton-chains-fips, melange, tekton-chains, falcoctl, flux-source-controller-fips, gitsign, flux-source-controller, gh, slsa-verifier, policy-controller-fips, tkn-fips, rekor, chainctl, wolfictl, falcoctl-fips, aactl, trivy-fips, vexctl,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: spire-server, tekton-chains-fips, melange, tekton-chains, falcoctl, gitsign, ko-fips, flux-source-controller, goreleaser, slsa-verifier, policy-controller-fips, tkn-fips, wolfictl, ko, falcoctl-fips, aactl, vexctl, zarf, apko, skaffold, zot, kubescape,...

GO-2024-3116 vulnerabilities

Vulnerabilities for packages: cosign, gh, slsa-verifier...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: fulcio, flux-kustomize-controller, kots, oauth2-proxy, slsa-verifier, dex, sops, cosign, spire-server, vexctl, flux-source-controller, rekor, gitsign, aactl, tekton-chains, tkn, kubescape, terragrunt, argo-workflows, cloudflared...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: trivy-operator, kyverno-notation-aws, ratify, kubescape, trivy, policy-controller, teleport, zot, slsa-verifier, aactl, kyverno, crossplane...

GO-2026-5853 vulnerabilities

Vulnerabilities for packages: buildah, zarf, kyverno-notation-aws, ratify, falcoctl, kubescape, skopeo, podman, flux-source-controller, slsa-verifier, kots, gitsign, undock, aactl, kyverno, witness, tekton-chains...

GO-2023-2181 vulnerabilities

Vulnerabilities for packages: melange, apko, cosign, spire-server, tkn, kubescape, skaffold, policy-controller, flux-source-controller, ko, aactl, slsa-verifier, tekton-chains...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: zarf, ko, kyverno, kyverno-notation-aws, neuvector-sigstore-interface, goreleaser, slsa-verifier, trivy-operator, spire-server, falcoctl, policy-controller, teleport, tflint, gitsign, aactl, crossplane, tekton-chains, ratify, tkn, kubescape...

GO-2026-4529 vulnerabilities

Vulnerabilities for packages: trivy-operator, kyverno-notation-aws, ratify, tkn, trivy, skaffold, teleport, vexctl, zot, ko, slsa-verifier, aactl, kyverno, crossplane, tekton-chains...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: zarf, crossplane-provider-family-azure, cilium-cli, crossplane-provider-aws-cloudfront, prometheus-operator, act, crossplane-provider-aws-iam, neuvector-sigstore-interface, src, kots, crossplane-provider-aws-kms, slsa-verifier, crossplane-provider-aws-cloudwatchlogs,...

GO-2026-4311 vulnerabilities

Vulnerabilities for packages: zarf, cosign, skopeo, falcoctl, kubescape, vexctl, sigstore-scaffolding, kots, falco-no-driver, gitsign, aactl, slsa-verifier, witness, tekton-chains...

GO-2026-5763 vulnerabilities

Vulnerabilities for packages: zarf, buildkitd, ko, sigstore-scaffolding, kyverno, kyverno-notation-aws, neuvector-sigstore-interface, goreleaser, slsa-verifier, trivy-operator, cosign, spire-server, falcoctl, policy-controller, teleport, flux-source-controller, tflint, vexctl, zot, gitsign, gh,...