29 matches found
tfsec
📣 Migración de tfsec a Trivy Como parte de nuestro objetivo de ofrecer una solución integral de seguridad de código abierto para todos, hemos estado consolidando todos nuestros esfuerzos relacionados con el escaneo en un solo lugar, y ese lugar es Trivy. Durante el último año, tfsec ha sentado la...
GHSA-76P8-FHRM-VPC7 vulnerabilities
Vulnerabilities for packages: argo-cd, container-object-storage-interface, crossplane-provider-aws-ssoadmin, kubernetes-replicator-fips, multicluster-controlplane-fips, crossplane-provider-aws-sfn-fips, crossplane-provider-aws-dataexchange, falcosidekick, rke2-runtime-fips, knative-operator,...
GO-2024-2948 vulnerabilities
Vulnerabilities for packages: kots, terraform, trivy-fips, tflint, terragrunt, tfsec, trivy, wolfictl, kubescape, zarf, zot, snyk-cli, grype, conftest, k9s, conftest-fips...
GO-2024-2800 vulnerabilities
Vulnerabilities for packages: terraform, tflint, tfsec, kubescape, zarf, zot, conftest, k9s, conftest-fips...
GO-2024-3141 vulnerabilities
Vulnerabilities for packages: policy-controller, zarf, cosign, tfsec, kots, k8sgpt, snyk-cli, kubescape, spire-server, opa, conftest, zot...
GO-2024-2800 vulnerabilities
Vulnerabilities for packages: zarf, k9s, tflint, kubescape, terraform, tfsec, conftest, zot...
GO-2025-3660 vulnerabilities
Vulnerabilities for packages: policy-controller, cosign, kyverno-notation-aws, trivy, witness, kots, spire-server, tfsec, conftest...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, osv-scanner, flux, chezmoi, src-fingerprint, argo-events, syft, trivy, snyk-cli, apko, flux-source-controller, zarf, go-licenses, argo-workflows, pulumi-language-yaml, k9s, task, grafana-alloy, k8sgpt, gitsign, dagger, kubescape, gptscript, zot,...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, osv-scanner, flux, chezmoi, src-fingerprint, argo-events, syft, trivy, snyk-cli, apko, flux-source-controller, zarf, go-licenses, argo-workflows, pulumi-language-yaml, k9s, task, grafana-alloy, k8sgpt, gitsign, dagger, kubescape, gptscript, zot,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, osv-scanner, trivy-operator, flux, chezmoi, src-fingerprint, nfpm, argo-events, syft, trivy, snyk-cli, apko, flux-source-controller, steampipe, zarf, pulumi-language-yaml, argo-workflows, rancher-fleet, k9s, kyverno, grafana-alloy, gitsign,...
CVE-2026-33814 vulnerabilities
Vulnerabilities for packages: dagdotdev, amazon-cloudwatch-agent-operator, crane, regclient, cortex, emissary, croc, q, crossplane-provider-aws-dynamodb, headlamp, tekton-chains, vault-secrets-webhook, nova, litestream, libnvidia-container, rook, node-feature-discovery, timoni, cloud-provider-aws...
GHSA-92MM-2PJQ-R785 vulnerabilities
Vulnerabilities for packages: opentofu, trivy-operator, syft, trivy, snyk-cli, steampipe, zarf, k9s, task, tflint, kubescape, terraform, zot, xeol, grype, wolfictl, tfsec, conftest, terragrunt, kots...
CVE-2026-4660 vulnerabilities
Vulnerabilities for packages: opentofu, trivy-operator, syft, trivy, snyk-cli, steampipe, zarf, k9s, task, tflint, kubescape, terraform, zot, xeol, grype, wolfictl, tfsec, conftest, terragrunt, kots...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: apko, gitsign, terraform-provider-pagerduty, vcluster, dagger, ksops, q, crossplane-provider-aws-kms, zot, crossplane-provider-aws-dynamodb, gitlab-runner, kyverno-notation-aws, terraform-provider-azurerm, cluster-api, cerbos, pulumi-language-java, argo-cd, aactl,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: apko, gitsign, terraform-provider-pagerduty, vcluster, dagger, ksops, q, crossplane-provider-aws-kms, zot, crossplane-provider-aws-dynamodb, gitlab-runner, kyverno-notation-aws, terraform-provider-azurerm, cluster-api, cerbos, pulumi-language-java, argo-cd, aactl,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: argo-cd, hydra-fips, kubevela-fips, kyverno-notation-aws-fips, kyverno-policy-reporter-plugins-kyverno-fips, flux-helm-controller, flux-kustomize-controller, grafana-fips, trufflehog-fips, gitness, actions-runner-controller-fips, cg, hydra,...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: opentofu, trivy-operator, syft, trivy, snyk-cli, steampipe, zarf, rancher-fleet, k9s, tflint, kubescape, terraform, zot, xeol, grype, wolfictl, tfsec, conftest, terragrunt, kots...
GHSA-WJRX-6529-HCJ3 vulnerabilities
Vulnerabilities for packages: opentofu, trivy-operator, syft, trivy, snyk-cli, steampipe, zarf, rancher-fleet, k9s, tflint, kubescape, terraform, zot, xeol, grype, wolfictl, tfsec, conftest, terragrunt, kots...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: trivy-fips, trivy-operator-fips, zot, grype, conftest, tflint, cloudbeat-fips, kots, trivy, xeol, rancher-fleet-fips, syft, cloudbeat, wolfictl, conftest-fips, chainctl, terraform-fips, terraform, k9s-fips, kubescape, xeol-fips, opentofu-fips, tfsec, grype-db,...