29 matches found
tfsec
📣 tfsec 到 Trivy 的迁移 作为我们为所有人提供全面开源安全解决方案的目标的一部分，我们一直在将所有与扫描相关的工作整合到一个地方，那就是 Trivy。 在过去一年中，tfsec 为 Trivy 的 IaC 与错误配置扫描能力奠定了基础，包括 Terraform 扫描，而 Trivy 早已原生支持这些功能。 今后，我们希望鼓励 tfsec 社区迁移到 Trivy。迁移到 Trivy 后，你将获得同样出色的 Terraform 扫描引擎，并享有额外的好处： 1. 在同一工具中可使用更多语言和功能。 2. 通过 Trivy 丰富的生态系统，可集成更多工具和服务。 3. 由 Aqu...
GHSA-76P8-FHRM-VPC7 vulnerabilities
Vulnerabilities for packages: aws-nuke, crossplane-provider-azure-securityinsights, cluster-api-azure-controller, cloud-provider-vsphere, backup-restore-operator-fips, atlas-fips, helm, crossplane-provider-aws-appconfig, longhorn-cli-fips, descheduler-fips, crossplane-provider-aws-datapipeline,...
GO-2024-2800 vulnerabilities
Vulnerabilities for packages: tfsec, k9s, zot, tflint, conftest-fips, zarf, conftest, kubescape, terraform...
GO-2024-2948 vulnerabilities
Vulnerabilities for packages: wolfictl, terragrunt, tfsec, kots, k9s, zot, tflint, conftest-fips, zarf, conftest, trivy, trivy-fips, kubescape, terraform, grype, snyk-cli...
GO-2024-3141 vulnerabilities
Vulnerabilities for packages: zarf, opa, conftest, k8sgpt, zot, spire-server, kubescape, cosign, snyk-cli, policy-controller, kots, tfsec...
GO-2025-3660 vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws, conftest, trivy, spire-server, cosign, policy-controller, kots, witness, tfsec...
GO-2024-2800 vulnerabilities
Vulnerabilities for packages: zarf, conftest, zot, kubescape, k9s, terraform, tflint, tfsec...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: task, osv-scanner, flux-source-controller, guac, k8sgpt, src-fingerprint, kubescape, pulumi-kubernetes-operator, snyk-cli, pulumi-language-yaml, zarf, flux-image-automation-controller, chezmoi, flux, grype, apko, flux-kustomize-controller, trivy, zot, melange, gitsig...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: task, osv-scanner, flux-source-controller, guac, k8sgpt, src-fingerprint, kubescape, pulumi-kubernetes-operator, snyk-cli, pulumi-language-yaml, zarf, flux-image-automation-controller, chezmoi, flux, grype, apko, flux-kustomize-controller, trivy, zot, melange, gitsig...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: xeol, osv-scanner, flux-source-controller, guac, src-fingerprint, gitaly, gitlab-runner, kubescape, pulumi-kubernetes-operator, snyk-cli, gomplate, steampipe, pulumi-language-yaml, zarf, flux-image-automation-controller, chezmoi, flux, grype, apko, trivy, zot, melang...
CVE-2026-33814 vulnerabilities
Vulnerabilities for packages: cilium, crossplane-provider-sql, node-feature-discovery, flux, falco-no-driver, spire-controller-manager, metrics-agent, wal-g, karpenter, addon-resizer, kots, harbor-registry, cloud-provider-azure, kube-bench, vertical-pod-autoscaler,...
GHSA-92MM-2PJQ-R785 vulnerabilities
Vulnerabilities for packages: xeol, task, kubescape, tflint, snyk-cli, steampipe, zarf, conftest, grype, zot, trivy, terragrunt, tfsec, terraform, wolfictl, kots, trivy-operator, syft, opentofu, k9s...
CVE-2026-4660 vulnerabilities
Vulnerabilities for packages: xeol, task, kubescape, tflint, snyk-cli, steampipe, zarf, conftest, grype, zot, trivy, terragrunt, tfsec, terraform, wolfictl, kots, trivy-operator, syft, opentofu, k9s...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sqs, flux-source-controller, docker, gitaly, terraform-provider-pagerduty, policy-controller, terraform-provider-azurerm, flux, flux-kustomize-controller, gitsign, tfsec, wal-g, atlantis, pulumi-language-java, crossplane-provider-keycloak,...
GHSA-Q9HV-HPM4-HJ6X vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sqs, flux-source-controller, docker, gitaly, terraform-provider-pagerduty, policy-controller, terraform-provider-azurerm, flux, flux-kustomize-controller, gitsign, tfsec, wal-g, atlantis, pulumi-language-java, crossplane-provider-keycloak,...
CVE-2026-1229 vulnerabilities
Vulnerabilities for packages: terraform-provider-databricks, argo-events-fips, amazon-ssm-agent-fips, helm, crossplane-provider-aws-sqs, crossplane-provider-aws-cloudwatchlogs, gitlab-runner-fips, databricks-cli, openbao-fips, terraform, apko-fips, crossplane, argo-cd, image-factory, sops-fips,...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: xeol, kubescape, tflint, snyk-cli, steampipe, zarf, conftest, grype, zot, trivy, terragrunt, tfsec, terraform, wolfictl, kots, trivy-operator, syft, opentofu, k9s, rancher-fleet...
GHSA-WJRX-6529-HCJ3 vulnerabilities
Vulnerabilities for packages: xeol, kubescape, tflint, snyk-cli, steampipe, zarf, conftest, grype, zot, trivy, terragrunt, tfsec, terraform, wolfictl, kots, trivy-operator, syft, opentofu, k9s, rancher-fleet...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: k9s, xeol-fips, tflint, conftest-fips, conftest, cloudbeat-fips, trivy, trivy-operator-fips, terraform, grype, chainctl, wolfictl, terragrunt, trivy-operator, syft, rancher-fleet-fips, rancher-fleet, opentofu, k9s-fips, tfsec, opentofu-fips, terraform-fips, syft-fips...