minimal

小的、加固的容器镜像，免费且采用MIT许可证。 使用 Chainguard 的 apko 和 Wolfi 包从源代码构建，每六小时重建一次。 每个镜像都经过 cosign 签名，附带 SPDX SBOM 证明，并携带 SLSA Level 3 构建来源。您无需账户即可验证所有内容。 🌐 在 minimalcontainers.com 浏览完整目录 → 镜像目录 · 验证镜像 · 全部57个镜像 · HN讨论 30秒内拉取并验证 这些镜像的意义在于您无需信任我。拉取一个，然后亲自检查来源：bash Pull. It's public — no login, no rate limit...

trivy-plugin-attest

trivy-plugin-attest Publish SBOM attestation Install root@kitploit: $ trivy plugin install github.com/aquasecurity/trivy-plugin-attest Usage root@kitploit: A Trivy plugin that publish SBOM attestation Usage: attest flags Examples: trivy attest --type PREDICATETYPE --predicate PREDICATEPATH BLOBPA...

CVE-2023-24827

syft is a a CLI tool and Go library for generating a Software Bill of Materials SBOM from container images and filesystems. A password disclosure flaw was found in Syft versions v0.69.0 and v0.69.1. This flaw leaks the password stored in the SYFTATTESTPASSWORD environment variable. The...

PT-2023-19808 · Syft · Syft

Name of the Vulnerable Software and Affected Versions: syft versions v0.69.0 through v0.69.1 Description: A password disclosure flaw was found in syft, which leaks the password stored in the SYFT ATTEST PASSWORD environment variable. This variable is used to decrypt the private key during the...

Security update for trivy (moderate)

openSUSE Security Update: Security update for trivy Announcement ID: openSUSE-SU-2022:10081-1 Rating: moderate References: Cross-References: CVE-2022-1996 CVSS scores: CVE-2022-1996 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2022-1996 SUSE: 7.5...