starboard

Starboard is joining Trivy. We've announced our plans to discontinue Starboard and merge it into Trivy. Starboard CLI has been reintroduced as trivy kubernetes command and starboard-operator with a focus on trivy capabilities is available as Trivy-Operator. We will not be accepting new...

trivy-operator

Kubernetes 原生安全工具包。（文档） 简介 Trivy Operator 利用 Trivy 持续扫描你的 Kubernetes 集群以发现安全问题。扫描结果以安全报告的形式汇总为 Kubernetes 自定义资源定义，可通过 Kubernetes API 访问。Operator 通过监视 Kubernetes 的状态变化并自动触发相应的安全扫描来实现这一点。例如，当创建新的 Pod 时会启动漏洞扫描。 这样，用户就可以以 Kubernetes 原生的方式查找和查看与不同资源相关的风险。 集群内安全扫描 Trivy Operator 自动生成并更新安全报告。这些报告是针对...

GO-2026-6597 vulnerabilities

Vulnerabilities for packages: docker-compose, skaffold, kubescape-operator, chartmuseum, helm-set-status, nerdctl, kube-arangodb, kubevela, neuvector-scanner, rancher-agent, trivy, falco-no-driver, tigera-operator, gatekeeper, k9s, k8sgpt, trivy-operator, k3s, helm-operator, kubescape, buildkitd,...

GO-2026-6162 vulnerabilities

Vulnerabilities for packages: skaffold, spire-server, flux-source-controller, trivy, kyverno-notation-aws, crossplane, kyverno, trivy-operator, kubescape, falcoctl, policy-controller, tekton-chains, tkn, zarf, zot, neuvector-sigstore-interface, aactl, goreleaser, ko...

GO-2026-5983 vulnerabilities

Vulnerabilities for packages: cloudbeat, trivy-operator, cloudbeat-fips, trivy-operator-fips...

GO-2025-3888 vulnerabilities

Vulnerabilities for packages: nova-fips, harbor-fips, k8ssandra-client-fips, k9s-fips, helm-docs, kots, trivy-operator-fips, flux-fips, k8ssandra-client, chart-testing-fips, envoy-gateway, zot, cluster-api-helm-controller, k9s, cluster-api-helm-controller-fips, headlamp, consul-k8s, trivy-operato...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: cloudbeat, cloudbeat-fips, buildah-fips, trivy-operator-fips, podman-fips, zot, skaffold-fips, osv-scanner, kubescape-server-fips, buildah, conftest-fips, trivy-operator, docker-fips, livekit-cli, docker-compose-fips, docker-cli-buildx-fips, guac, skaffold,...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: gitness, helm-exporter-fips, zarf-fips, envoy-gateway, oras, kyverno-fips, tigera-operator-fips, helm-mapkubeapis, ratify, helm-exporter, chartmuseum-fips, rancher-helm, commercial-kyverno, consul-k8s-fips, kubescape-server, rancher-agent, kube-mgmt-fips,...

GO-2025-4108 vulnerabilities

Vulnerabilities for packages: envoy-gateway, k3s, helm-mapkubeapis, helm-diff-fips, grype, wolfictl, flux-source-controller-fips, chartmuseum-fips, rancher-helm, skaffold, consul-k8s-fips, k8sgpt, rancher-agent, kubescape, helm-operator-fips, helm-fips, containerd, opa, xeol-fips, chartmuseum,...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: cloudbeat, grafana-alloy-fips, harvester, elastic-agent-fips, cloudbeat-fips, kubedock-fips, zot, kots, amazon-cloudwatch-agent-fips, ko, buildah-fips, trivy-operator-fips, commercial-grafana, opentelemetry-operator, chainloop-control-plane-fips, envoy-gateway,...

GO-2026-5668 vulnerabilities

Vulnerabilities for packages: cloudbeat, grafana-alloy-fips, harvester, elastic-agent-fips, cloudbeat-fips, kubedock-fips, zot, kots, amazon-cloudwatch-agent-fips, ko, buildah-fips, trivy-operator-fips, commercial-grafana, opentelemetry-operator, chainloop-control-plane-fips, envoy-gateway,...

GO-2025-3787 vulnerabilities

Vulnerabilities for packages: goreleaser, argo-workflows-fips, chart-testing-fips, envoy-gateway, grafana, tekton-chains-fips, kube-bench, dive, kyverno-fips, grafana-alloy, harbor-cli, witness, aws-otel-collector-fips, grype, wolfictl, flux-source-controller-fips, kyverno-policy-reporter,...

GO-2026-5851 vulnerabilities

Vulnerabilities for packages: cloudbeat, gitsign, goreleaser, crossplane-fips, aactl, tkn, tbot, trivy-operator-fips, zarf-fips, tekton-chains-fips, tflint, kubescape-server-fips, kyverno-fips, trivy-operator, chainctl, docker-fips, crossplane, ratify, tekton-chains, zarf, kyverno,...

GO-2026-5778 vulnerabilities

Vulnerabilities for packages: cloudbeat, gitsign, goreleaser, cloudbeat-fips, crossplane-fips, aactl, tkn, ko, tbot, trivy-operator-fips, zarf-fips, tekton-chains-fips, tflint, kubescape-server-fips, kyverno-fips, trivy-operator, docker-fips, ratify, crossplane, slsa-verifier, tekton-chains, zarf...

GO-2026-5038 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, kubedock-fips, kro, cass-operator, custom-pod-autoscaler-operator-fips, knative-eventing, crossplane-provider-azure-streamanalytics, crossplane-provider-aws-firehose, flux-image-reflector-controller, ansible-operator,...

GO-2026-5694 vulnerabilities

Vulnerabilities for packages: cloudbeat, commercial-chainloop-backend, cloudbeat-fips, crossplane-fips, aactl, trivy-operator-fips, zot, kubescape-server-fips, kyverno-fips, trivy-operator, chainctl, ratify, crossplane, slsa-verifier, commercial-chainloop-cli, kyverno, commercial-kyverno,...

GO-2026-4986 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, goreleaser, opencost, knative-eventing, crossplane-provider-azure-streamanalytics, ansible-operator, grafana-alloy, azure-aad-pod-identity-mic, kubernetes-csi-node-driver-registrar-fips, crossplane-provider-aws-elbv2-fips,...

GO-2026-4355 vulnerabilities

Vulnerabilities for packages: cloudbeat, gitsign, goreleaser, cg, cloudbeat-fips, crossplane-fips, aactl, kyverno-policy-reporter-plugins-kyverno, tkn, ko, trivy-operator-fips, zot, buildkitd, kyverno-policy-reporter-plugins-kyverno-fips, skaffold-fips, tekton-chains-fips, tflint, kyverno-fips,...

GO-2026-5983 vulnerabilities

Vulnerabilities for packages: trivy-operator...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: kubescape-operator, gptscript, vcluster, podman, tflint, gitleaks, trivy, rancher-fleet, opentofu, nuclei, k9s, trivy-operator, gitness, trufflehog, guac, undock, xeol, zarf, terragrunt, steampipe, grafana-alloy, envoy-gateway, filebrowser, zot, terraform, nsc...