nixos-config

Lan Tian's NixOS Configuration This repository holds the configuration files for all my NixOS systems. Features Full system root-on-tmpfs, using impermanence Nftables instead of iptables Secret management with sops-nix QEMU user mode emulation for most architectures Nix Flakes with Nixpkgs patchi...

sops

SOPS: Secrets OPerationS SOPS is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age, and PGP. demo .. image:: https://i.imgur.com/X0TM5NI.gif .. image::...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi-fips, prometheus-alertmanager-fips, hubble-ui-backend-fips, mongodb-kubernetes-operator-fips, pulumi-language-java, oras-fips, yunikorn-web-fips, boring-registry, knative-operator-fips, azure-aad-pod-identity-mic, cloudbeat,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: sops, sops-fips, grafana, ksops, flux-kustomize-controller, flux-kustomize-controller-fips, grafana-fips, chezmoi, litestream, age, age-fips...

GO-2026-5026 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, mongodb-kubernetes-operator-fips, knative-operator-fips, keda-http-add-on-fips, gogatekeeper, mlrun-log-collector-fips, yunikorn-web, chainctl-fips, nginx-kubernetes-ingress-fips, crossplane-provider-aws-elasticsearch-fips, rook, grafana...

GO-2024-2611 vulnerabilities

Vulnerabilities for packages: prometheus-alertmanager-fips, hubble-ui-backend-fips, metallb, pulumi-language-java, boring-registry, sigstore-scaffolding-fips, azure-aad-pod-identity-mic, step-ca, trust-manager, cosign-fips, ferretdb, rook, oauth2-proxy, local-path-provisioner,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: minio, guac, k8sgpt-operator, pulumi-language-dotnet, opentelemetry-collector, falcosidekick, sigstore-scaffolding, vcluster, spegel, kubernetes-csi-driver-hostpath, restic, rqlite, kaniko, spire-server, zot, fulcio, cilium-cli, grpc-health-probe, gomplate, opa, temp...

GO-2026-4559 vulnerabilities

Vulnerabilities for packages: pluto, crossplane-provider-aws-route53, ollama, crossplane-provider-aws-sns, trivy-operator, external-dns, kube-vip, opentelemetry-collector-contrib, vertical-pod-autoscaler, grafana-mimir, ksops, datadog-agent, gitlab-runner, traefik, pulumi, linkerd2,...

GO-2026-4394 vulnerabilities

Vulnerabilities for packages: k8sgateway, grype, kubernetes-csi-external-health-monitor, podinfo, witness, fluent-operator, prometheus, restic, syft, argo-workflows, kaniko, spire-server, fulcio, docker-compose, migrate, cloud-provider-azure, cluster-api-helm-controller, metrics-server,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubernetes-csi-external-health-monitor, kubernetes-csi-driver-nfs, podinfo, sftpgo-plugin-auth, argo-rollouts, prometheus, secrets-store-csi-driver, kubernetes-csi-driver-hostpath, restic, syft, crossplane-provider-aws-route53, runc, sqlexporter,...

GO-2025-4015 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, sonobuoy, guac, kubeflow-katib, envconsul, kuberlr, oras, kbld, kapp, kubernetes-csi-external-health-monitor, renovate, kafkaexporter, iptables-wrappers, ko, argo-rollouts, podinfo, secrets-store-csi-driver, src-fingerprint,...

GO-2025-4013 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, sonobuoy, guac, kubeflow-katib, envconsul, kuberlr, oras, kbld, kapp, kubernetes-csi-external-health-monitor, renovate, kafkaexporter, iptables-wrappers, ko, argo-rollouts, podinfo, secrets-store-csi-driver, src-fingerprint,...

GO-2025-4011 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, sonobuoy, guac, kubeflow-katib, envconsul, kuberlr, oras, kbld, kapp, kubernetes-csi-external-health-monitor, renovate, kafkaexporter, iptables-wrappers, ko, argo-rollouts, podinfo, secrets-store-csi-driver, src-fingerprint,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, flyte, guac, pulumi, cortex, chezmoi, flux, opentelemetry-collector, sigstore-scaffolding, timestamp-authority, druid, restic, hugo, argo-workflows, kubescape, spire-server, tekton-chains, zot, fulcio, wal-g, velero, cosign, tempo, airflow,...

GO-2025-4010 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, sonobuoy, guac, kubeflow-katib, envconsul, kuberlr, oras, kbld, kapp, kubernetes-csi-external-health-monitor, renovate, kafkaexporter, iptables-wrappers, ko, argo-rollouts, podinfo, secrets-store-csi-driver, src-fingerprint,...

GO-2025-4012 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, sonobuoy, guac, kubeflow-katib, envconsul, kuberlr, oras, kbld, kapp, kubernetes-csi-external-health-monitor, renovate, kafkaexporter, iptables-wrappers, ko, argo-rollouts, podinfo, secrets-store-csi-driver, src-fingerprint,...

GO-2025-4008 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, sonobuoy, guac, kubeflow-katib, envconsul, kuberlr, oras, kbld, kapp, kubernetes-csi-external-health-monitor, renovate, kafkaexporter, iptables-wrappers, ko, argo-rollouts, podinfo, secrets-store-csi-driver, src-fingerprint,...

GO-2024-3344 vulnerabilities

Vulnerabilities for packages: age, flux-kustomize-controller, chezmoi, ksops, litestream, sops...

GO-2026-5026 vulnerabilities

Vulnerabilities for packages: trufflehog, xeol, grype, argo-rollouts, prometheus, restic, crossplane-provider-aws-route53, kubewatch, cloud-provider-azure, loki, nsc, kubernetes-csi-external-attacher, step-kms-plugin, ollama, kubernetes-replicator, trust-manager, external-dns,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: trufflehog, aws-nuke, guac, envconsul, kubeflow-katib, xeol, kbld, multus-cni, podinfo, sftpgo-plugin-auth, argo-rollouts, pinact, prometheus, secrets-store-csi-driver, src-fingerprint, witness, crossplane-provider-aws-route53, kaniko, runc, spire-server,...