scaffold 0.6.115 Helm chart

Name: scaffold Helm chart 0.6.115: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

sigstore

Not scored yet

Scaffolding the components of the sigstore architecture

Version 0.6.115 todayApp version not verified against the render 1Artifact Hub

scaffold 0.6.115 deploys 15 container images: ghcr.io/sigstore/scaffolding/ct_server, ghcr.io/sigstore/fulcio, library/redis, curlimages/curl and 9 more. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.3.3-r0, fixed in 3.3.6-r0.

Radar Score

Not yet scored

The daily scoring run has not folded the 15 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

15 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/sigstore/scaffolding/ct_server	v0.7.31	00984	803
ghcr.io/sigstore/fulcio	v1.8.8	00020	140
library/redis	digest-pinned	0111124	1,288
curlimages/curl	digest-pinned	011934	753
ghcr.io/sigstore/rekor/rekor-server	v1.5.4	00018	124
gcr.io/trillian-opensource-ci/db_server	digest-pinned	037153	1,608
library/busybox×2	digest-pinned	0000	0
ghcr.io/sigstore/scaffolding/trillian_log_server	digest-pinned	00151	372
ghcr.io/sigstore/scaffolding/trillian_log_signer	digest-pinned	00151	372
curlimages/curl	8.17.0	011934	753
ghcr.io/sigstore/scaffolding/createctconfig	v0.7.31	00680	730
ghcr.io/sigstore/scaffolding/createtree	v0.7.31	00161	443
ghcr.io/sigstore/scaffolding/createcerts	digest-pinned	00571	622
ghcr.io/sigstore/scaffolding/createtree	digest-pinned	00161	443
ghcr.io/sigstore/scaffolding/createdb	digest-pinned	00057	387

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

280 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2023-1571	stdlib@go1.18.2	1.19.6
Low	ALPINE-CVE-2026-63072	openssl@3.5.4-r0	3.5.8-r0
Low	GHSA-78h2-9frx-2jm8	github.com/go-jose/go-jose/v4@v4.1.3	4.1.4
Low	GHSA-jqcq-xjh3-6g23	github.com/jackc/pgproto3/v2@v2.3.3	no fix listed
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.76.0	1.83.1
Low	ALPINE-CVE-2026-45445	openssl@3.5.4-r0	3.5.7-r0
Low	DLA-3907-1	sqlite3@3.34.1-3	3.34.1-3+deb11u1
Low	GO-2023-2102	stdlib@go1.18.2	1.20.10
Low	ALPINE-CVE-2026-31789	openssl@3.3.3-r0	3.3.7-r0
Low	ALPINE-CVE-2025-69419	openssl@3.3.3-r0	3.3.6-r0
Low	ALPINE-CVE-2026-54874	openssl@3.5.4-r0	3.5.8-r0
Low	GHSA-qw9x-cqr3-wc7r	github.com/opencontainers/runc@v1.1.0	1.2.8
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/runc@v1.1.0	1.2.8
Low	ALPINE-CVE-2026-42766	openssl@3.5.4-r0	3.5.7-r0
Low	GO-2022-0969	stdlib@go1.18.2	1.18.6
Low	ALPINE-CVE-2026-63075	openssl@3.5.4-r0	3.5.8-r0
Low	ALPINE-CVE-2026-22184	zlib@1.3.1-r2	1.3.2-r0
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.43.0	0.52.0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.43.0	0.52.0
Low	GO-2023-2185	stdlib@go1.18.2	1.20.11
Low	ALPINE-CVE-2026-75803	openssl@3.5.4-r0	3.5.8-r0
Low	ALPINE-CVE-2025-15468	openssl@3.3.3-r0	3.3.6-r0
Low	GO-2022-0537	stdlib@go1.18.2	1.17.13
Low	GHSA-vpvm-3wq2-2wvm	github.com/opencontainers/runc@v1.1.0	1.1.5
Low	ALPINE-CVE-2026-7598	libssh2@1.11.1-r0	1.11.1-r1
Low	GHSA-wg65-39gg-5wfj	github.com/prometheus/prometheus@v0.51.0	0.311.3
Low	GO-2023-1703	stdlib@go1.18.2	1.19.8
Low	GO-2022-0521	stdlib@go1.18.2	1.17.12
Low	DSA-5650-1	util-linux@2.36.1-8+deb11u1	2.36.1-8+deb11u2
Low	GO-2022-0477	stdlib@go1.18.2	1.17.11
Low	GO-2026-4341	stdlib@go1.25.0	1.24.12
Low	GO-2022-0533	stdlib@go1.18.2	1.17.11
Low	GO-2022-0523	stdlib@go1.18.2	1.17.12
Low	GO-2024-2887	stdlib@go1.18.2	1.21.11
Low	GO-2022-0522	stdlib@go1.18.2	1.17.12
Low	GO-2022-0527	stdlib@go1.18.2	1.17.12
Low	GO-2022-0524	stdlib@go1.18.2	1.17.12
Low	GO-2023-1704	stdlib@go1.18.2	1.19.8
Low	ALPINE-CVE-2026-2673	openssl@3.5.4-r0	3.5.6-r0
Low	DSA-5726-1	krb5@1.18.3-6+deb11u4	1.18.3-6+deb11u5
Low	DLA-3893-1	expat@2.2.10-2+deb11u5	2.2.10-2+deb11u6
Low	GHSA-f5mr-q85p-6hh6	github.com/sigstore/fulcio@v1.7.1	1.8.6
Low	ALPINE-CVE-2026-42767	openssl@3.5.4-r0	3.5.7-r0
Low	GO-2022-0526	stdlib@go1.18.2	1.17.12
Low	DSA-5587-1	curl@7.74.0-1.3+deb11u10	7.74.0-1.3+deb11u11
Low	GO-2023-1568	stdlib@go1.18.2	1.19.6
Low	GO-2022-1037	stdlib@go1.18.2	1.18.7
Low	ALPINE-CVE-2026-63074	openssl@3.5.4-r0	3.5.8-r0
Low	GO-2023-1987	stdlib@go1.18.2	1.19.12
Low	GO-2023-1752	stdlib@go1.18.2	1.19.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.6.115latest	today	—	—	—
0.6.114	13 days ago	—	0660805	7,711

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/sigstore/scaffold.svg)](https://charts.stackradar.io/charts/sigstore/scaffold)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.