149 matches found
minimal
137 small, hardened container images. Free, MIT-licensed, signed, and rebuilt daily. Browse the catalog → Quick start docker pull ghcr.io/rtvkiz/minimal-python:latest No account needed. Every image has a :latest-dev companion with a shell and toolchain for debugging and multi-stage builds. docker...
slsa
SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...
trustlock
trustlock A Git-native dependency admission controller. Evaluates trust signals on every dependency change. How it works trustlock runs as a Git pre-commit hook advisory mode and a CI check enforce mode: Advisory pre-commit: warns on violations, exits 0, advances the trusted baseline when all...
scorecard
OpenSSF Scorecard Overview What Is Scorecard? Prominent Scorecard Users View a Project's Score Scorecard's Public Data Using Scorecard Scorecard GitHub Action Scorecard REST API Scorecard Badges Scorecard Command Line Interface Prerequisites Installation Authentication Basic Usage Checks Default...
slsa
SLSA "salsa" es Niveles de cadena de suministro para artefactos de software SLSA pronunciado "salsa" es un marco de seguridad desde el origen hasta el servicio, que brinda a cualquier persona que trabaje con software un lenguaje común para aumentar los niveles de seguridad del software y la...
minder v0.3.2
| | | | | Installation | Documentation | Releases What is Minder? Minder is an open source platform that helps development teams and open source communities build more secure software, and prove to others that what they’ve built is secure. Minder helps project owners proactively manage their...
GO-2024-3116 vulnerabilities
Vulnerabilities for packages: cosign-fips, cosign, gh, slsa-verifier...
GO-2026-4348 vulnerabilities
Vulnerabilities for packages: teleport-operator-fips, tekton-chains-fips, ratify-fips, kyverno-notation-aws, tkn-fips, trivy-fips, slsa-verifier, image-factory-fips, kyverno-notation-aws-fips, chainctl, docker, buildkitd, falcoctl-fips, kyverno-policy-reporter-plugins-kyverno-fips, kyverno-fips,...
GO-2024-3166 vulnerabilities
Vulnerabilities for packages: tekton-chains-fips, tkn-fips, trivy-fips, slsa-verifier, chainctl, falcoctl-fips, sigstore-scaffolding-fips, melange, cosign-fips, spire-server-fips, policy-controller-fips, gitsign, cosign, gh, kubescape, falcoctl, policy-controller, rekor, apko, vexctl,...
GO-2024-2719 vulnerabilities
Vulnerabilities for packages: tekton-chains-fips, tkn-fips, slsa-verifier, chainctl, falcoctl-fips, melange, spire-server-fips, ko-fips, policy-controller-fips, gitsign, skaffold, kubescape, falcoctl, policy-controller, apko, vexctl, goreleaser, tkn, flux-source-controller, zarf, aactl, wolfictl,...
GO-2024-3116 vulnerabilities
Vulnerabilities for packages: cosign, gh, slsa-verifier...
GO-2023-2181 vulnerabilities
Vulnerabilities for packages: flux-source-controller, policy-controller, kubescape, tekton-chains, melange, cosign, ko, tkn, slsa-verifier, aactl, skaffold, apko, spire-server...
GO-2026-5694 vulnerabilities
Vulnerabilities for packages: policy-controller, kyverno-notation-aws, kubescape, kyverno, zot, teleport, ratify, slsa-verifier, trivy, trivy-operator, aactl, crossplane...
GO-2026-5853 vulnerabilities
Vulnerabilities for packages: flux-source-controller, skopeo, witness, kyverno-notation-aws, gitsign, kots, kubescape, kyverno, tekton-chains, zarf, ratify, podman, falcoctl, undock, slsa-verifier, falco-no-driver, aactl, buildah...
GO-2026-4529 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, kyverno, tekton-chains, zot, teleport, ratify, ko, vexctl, slsa-verifier, trivy, trivy-operator, aactl, skaffold, tkn...
GO-2026-5778 vulnerabilities
Vulnerabilities for packages: tflint, policy-controller, kyverno, ratify, goreleaser, slsa-verifier, crossplane, spire-server, tekton-chains, teleport, kyverno-notation-aws, zarf, trivy-operator, aactl, neuvector-sigstore-interface, kubescape, falcoctl, ko, gitsign, tkn...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: rekor, cosign, slsa-verifier, spire-server, argo-workflows, fulcio, cloudflared, tekton-chains, flux-kustomize-controller, flux-source-controller, aactl, terragrunt, kots, kubescape, vexctl, dex, oauth2-proxy, gitsign, tkn, sops...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: tflint, policy-controller, opentofu, eksctl, crossplane-provider-azure-storage, snyk-cli, fscrypt, nerdctl, terraform-provider-azurerm, rancher, gh, flux-kustomize-controller, guac, rancher-machine, crossplane-provider-azure-authorization, prometheus, minio,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: tflint, policy-controller, gitsign, kyverno, ratify, cosign, goreleaser, slsa-verifier, trivy, crossplane, spire-server, witness, tekton-chains, zot, gh, teleport, flux-source-controller, kyverno-notation-aws, zarf, trivy-operator, aactl, skaffold,...