147 matches found
slsa
SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...
trustlock
trustlock A Git-native dependency admission controller. Evaluates trust signals on every dependency change. How it works trustlock runs as a Git pre-commit hook advisory mode and a CI check enforce mode: Advisory pre-commit: warns on violations, exits 0, advances the trusted baseline when all...
minimal
132 small, hardened container images. Free, MIT-licensed, signed, and rebuilt every six hours. Browse the catalog → Quick start docker pull ghcr.io/rtvkiz/minimal-python:latest No account needed. Every image has a :latest-dev companion with a shell and toolchain for debugging and multi-stage...
scorecard
OpenSSF Scorecard 개요 Scorecard란 무엇인가? 주요 Scorecard 사용자 프로젝트의 점수 보기 Scorecard의 공개 데이터 Scorecard 사용하기 Scorecard GitHub Action Scorecard REST API Scorecard 배지 Scorecard 명령줄 인터페이스 사전 요구 사항 설치 인증 기본 사용법 점검 사항 Checks 기본 Scorecard 점검 사항 상세 점검 문서 점수 기준, 위험 및 해결 방법 Scorecard 점검 초보자 가이드 기타 중요한 권장 사항 이중 인증...
slsa
SLSA "살사"로 발음는 소프트웨어 아티팩트를 위한 공급망 수준Supply-chain Levels for Software Artifacts입니다. SLSA "salsa"로 발음는 소스에서 서비스까지의 보안 프레임워크로, 소프트웨어 관련 작업자 누구나 소프트웨어 보안 및 공급망 무결성을 높이기 위한 공통 언어를 제공합니다. 이는 체인의 어느 링크에서든 안전한 수준에서 최대한 탄력적으로 전환할 수 있는 방법입니다. SLSA에 대해 알아보기 SLSA에 대해 알아보려면 https://slsa.dev 를 방문하세요. 이 저장소에는 무...
minder v0.3.2
| | | | | Installation | Documentation | Releases What is Minder? Minder is an open source platform that helps development teams and open source communities build more secure software, and prove to others that what they’ve built is secure. Minder helps project owners proactively manage their...
GO-2024-3116 vulnerabilities
Vulnerabilities for packages: gh, cosign, slsa-verifier, cosign-fips...
GO-2026-4348 vulnerabilities
Vulnerabilities for packages: sigstore-scaffolding, trivy-operator, cg, flux-source-controller, kyverno-fips, rekor, crossplane-fips, kyverno-notation-aws, aactl, ratify, crossplane, cloudbeat, trivy-operator-fips, docker, trivy, zarf, cosign-fips, rekor-fips, spire-server-fips, tkn-fips,...
GO-2024-3166 vulnerabilities
Vulnerabilities for packages: sigstore-scaffolding, flux-source-controller, rekor, apko, aactl, trivy, zarf, cosign-fips, spire-server-fips, tkn-fips, wolfictl, falcoctl, kubescape, falcoctl-fips, tekton-chains-fips, tkn, zot, melange, tekton-chains, slsa-verifier, trivy-fips,...
GO-2024-2719 vulnerabilities
Vulnerabilities for packages: flux-source-controller, apko, aactl, zarf, spire-server-fips, tkn-fips, wolfictl, falcoctl, kubescape, falcoctl-fips, tekton-chains-fips, tkn, zot, melange, tekton-chains, slsa-verifier, neuvector-sigstore-interface, ko, vexctl, gitsign, spire-server, chainctl,...
GO-2024-3116 vulnerabilities
Vulnerabilities for packages: gh, cosign, slsa-verifier...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: rekor, kubescape, gitsign, tkn, cloudflared, dex, spire-server, slsa-verifier, sops, kots, terragrunt, fulcio, flux-kustomize-controller, oauth2-proxy, aactl, flux-source-controller, tekton-chains, argo-workflows, cosign, vexctl...
GO-2026-5694 vulnerabilities
Vulnerabilities for packages: kyverno, ratify, policy-controller, aactl, teleport, zot, kubescape, crossplane, slsa-verifier, trivy-operator, kyverno-notation-aws, trivy...
GO-2026-5853 vulnerabilities
Vulnerabilities for packages: skopeo, kyverno, ratify, zarf, kots, falcoctl, undock, falco-no-driver, aactl, flux-source-controller, witness, tekton-chains, kubescape, kyverno-notation-aws, slsa-verifier, podman, gitsign, buildah...
GO-2026-5778 vulnerabilities
Vulnerabilities for packages: kyverno, goreleaser, falcoctl, tflint, kubescape, gitsign, zarf, neuvector-sigstore-interface, spire-server, slsa-verifier, ko, kyverno-notation-aws, policy-controller, crossplane, ratify, aactl, teleport, tekton-chains, trivy-operator, tkn...
GO-2026-4529 vulnerabilities
Vulnerabilities for packages: kyverno, ratify, skaffold, aactl, teleport, tekton-chains, zot, kyverno-notation-aws, slsa-verifier, trivy-operator, ko, vexctl, tkn, trivy...
GO-2023-2181 vulnerabilities
Vulnerabilities for packages: melange, skaffold, policy-controller, aactl, flux-source-controller, apko, tekton-chains, kubescape, spire-server, slsa-verifier, ko, tkn, cosign...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: falcoctl, rancher-machine, rootlesskit, pulumi-kubernetes-operator, crossplane-provider-aws-cloudfront, cloud-provider-aws, grype, docker-compose, apko, kaf, minio, external-dns, spire-server, kine, act, argo-cd, gh, k8sgpt, sops, kots, terraform-provider-tls,...