bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

syft

Syft Una herramienta CLI y una biblioteca de Go para generar una Lista de Materiales de Software SBOM a partir de imágenes de contenedores y sistemas de archivos. Excepcional para la detección de vulnerabilidades cuando se usa con un escáner comoGrype...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: syft: syft-1.51.1-0.1.hum1 aarch64, x8664 syft-1.51.1-0.1.hum1.src src...

GO-2024-2490 vulnerabilities

Vulnerabilities for packages: wolfictl, syft, zarf, k9s, grype, kubescape...

GO-2026-5058 vulnerabilities

Vulnerabilities for packages: chainctl, kubescape-server, terragrunt, tfsec, cg, packer-fips, zarf-fips, k9s-fips, grype-db, kubescape, cloudbeat, terraform, terragrunt-fips, tflint-fips, xeol, grype-fips, trivy, tflint, wolfictl, syft, trivy-fips, cloudbeat-fips,...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: chainctl, mattermost-fips, trufflehog, nuclei, cg, chezmoi, undock, k9s-fips, grype-db, kubescape, grype-fips, gptscript, wolfictl, syft, zarf, syft-fips, gotenberg, trufflehog-fips, mattermost, k9s, grype, gitleaks, filebrowser, kots...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: buildkitd, skopeo, runc, cadvisor, newrelic-infrastructure-agent, kubescape, nerdctl, k3s, trivy, kaniko, wolfictl, syft, zarf, kubernetes, zot, podman, k9s, grype, docker, kots, skaffold, k3d, ctop...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, eks-distro-fips, runc, cadvisor, gosu, grafana-alloy-fips, cluster-autoscaler-fips, k8s-device-plugin, k3s, opentelemetry-collector-contrib, syft, kubernetes-fips, neuvector, kubernetes, buildah, cluster-autoscaler, podman, eks-distro, grype,...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy, neuvector-scanner, policy-controller, helm-push, policy-controller-fips, kaniko, wolfictl, k3d, syft, dagger, melange, docker-compose, grype, harbor-scanner-trivy-fips, cri-tools, buf...

GO-2025-3528 vulnerabilities

Vulnerabilities for packages: buildkitd, chainctl, eksctl, neuvector-scanner, opa, fuse-overlayfs-snapshotter, cluster-api-helm-controller, kubevela, flux-helm-controller, docker-cli-buildx-fips, spegel, flux-source-controller, cert-manager-cmctl, dagger, kaniko-fips, newrelic-infrastructure-agen...

GO-2026-5758 vulnerabilities

Vulnerabilities for packages: kgateway, neuvector-scanner, fuse-overlayfs-snapshotter, kubevela, docker-cli-buildx-fips, kubescape-server, kaniko-fips, datadog-agent-fips, newrelic-infrastructure-agent, amazon-ecs-agent-fips, helm-exporter-fips, chartmuseum, kube-mgmt, grype-fips, helm, kaniko,...

GO-2024-2490 vulnerabilities

Vulnerabilities for packages: zarf, k9s, wolfictl, grype, kubescape, syft...

GO-2026-5058 vulnerabilities

Vulnerabilities for packages: trivy, zot, grype, steampipe, terraform, kots, terragrunt, zarf, task, conftest, syft, trivy-operator, xeol, tfsec, wolfictl, opentofu, k9s, snyk-cli, tflint, kubescape...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: undock, zarf, filebrowser, gptscript, kubescape, k9s, trufflehog, chezmoi, grype, nuclei, wolfictl, kots, gitleaks, syft...

GO-2025-4098 vulnerabilities

Vulnerabilities for packages: buildah, dagger, skopeo, trivy, zot, kubescape-operator, grype, podman, kots, sriov-network-device-plugin, zarf, k3s, checksec, nvidia-container-toolkit, syft, trivy-operator, kubernetes, neuvector-scanner, falco-no-driver, grafana-alloy, undock, xeol,...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: skopeo, trivy, zot, grype, podman, kots, buildkitd, zarf, k3s, syft, kubernetes, docker, runc, wolfictl, skaffold, nerdctl, k3d, ctop, newrelic-infrastructure-agent, k9s, cadvisor, kaniko, kubescape...

GO-2025-3528 vulnerabilities

Vulnerabilities for packages: kubevela, opa, chartmuseum, dagger, helm, trivy, docker-compose, docker-cli-buildx, zot, k8sgpt, grype, k8ssandra-client, buildkitd, kots, flux-helm-controller, zarf, opa-envoy, k3s, cluster-api-helm-controller, melange, linkerd2, syft, cert-manager-cmctl,...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: kubernetes, buildah, neuvector-scanner, opentelemetry-collector-contrib, ctop, grafana-alloy, k3s, syft, docker, grype, runc, cadvisor, podman, k8s-device-plugin...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: buf, harbor-scanner-trivy, neuvector-scanner, cri-tools, policy-controller, dagger, docker-compose, k3d, helm-push, grype, kaniko, melange, wolfictl, syft...

GO-2025-3368 vulnerabilities

Vulnerabilities for packages: bom, argocd-image-updater, kubevela, scorecard, dagger, trivy, zot, gitea, flux-kustomize-controller, k8sgpt, flux-image-automation-controller, grype, guac, argo-events, kots, zarf, timoni, task, src-fingerprint, crossplane, nuclei, melange, syft, apko, kargo,...