trillian 0.3.21 Helm chart

Name: trillian Helm chart 0.3.21: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

sigstore

Scored 28 Sept 2026

Trillian is a log that stores an accurate, immutable and verifiable history of activity.

Version 0.3.21 yesterdayapp version 1.7.3 (not verified against the render) 0Artifact Hub

trillian 0.3.21 deploys 5 container images: gcr.io/trillian-opensource-ci/db_server, library/busybox, ghcr.io/sigstore/scaffolding/trillian_log_server, ghcr.io/sigstore/scaffolding/trillian_log_signer and 1 more. Across them, 326 findings — 0 critical, 3 high — 2 on CISA KEV. The highest contribution is GHSA-xr7r-f8xq-vfvv in github.com/opencontainers/runc v1.1.0, fixed in 1.1.12.

Radar Score

2,7860315308

326 findings over 5 of 5 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
gcr.io/trillian-opensource-ci/db_server	digest-pinned	037153	1,611
library/busybox×2	digest-pinned	0000	0
ghcr.io/sigstore/scaffolding/trillian_log_server	digest-pinned	00449	392
ghcr.io/sigstore/scaffolding/trillian_log_signer	digest-pinned	00449	392
ghcr.io/sigstore/scaffolding/createdb	digest-pinned	00057	391

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

197 distinct across the version’s images

Severity	Advisory	Package	Fixed in
High	GHSA-xr7r-f8xq-vfvv	github.com/opencontainers/runc@v1.1.0	1.1.12
High	DLA-4323-1KEV	git@1:2.30.2-1+deb11u2	1:2.30.2-1+deb11u5
High	DSA-5570-1KEV	nghttp2@1.43.0-1	1.43.0-1+deb11u1
Medium	DLA-3859-1	systemd@247.3-7+deb11u4	247.3-7+deb11u6
Medium	GO-2024-2687	stdlib@go1.18.2	1.21.9
Medium	DSA-5673-1	glibc@2.31-13+deb11u7	2.31-13+deb11u9
Medium	DLA-3898-1	nghttp2@1.43.0-1	1.43.0-1+deb11u2
Medium	DLA-3942-2	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u2
Medium	DLA-3867-1	git@1:2.30.2-1+deb11u2	1:2.30.2-1+deb11u3
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.82.0	1.82.2
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.82.0	1.83.1
Medium	GHSA-jqcq-xjh3-6g23	github.com/jackc/pgproto3/v2@v2.3.3	no fix listed
Medium	GHSA-8rm2-7qqf-34qm	github.com/prometheus/prometheus@v0.51.0	0.305.2
Medium	GO-2022-1144	stdlib@go1.18.2	1.18.9
Low	GHSA-9493-h29p-rfm2	github.com/opencontainers/runc@v1.1.0	1.2.8
Low	GO-2023-1571	stdlib@go1.18.2	1.19.6
Low	DLA-3907-1	sqlite3@3.34.1-3	3.34.1-3+deb11u1
Low	GO-2023-2102	stdlib@go1.18.2	1.20.10
Low	GHSA-qw9x-cqr3-wc7r	github.com/opencontainers/runc@v1.1.0	1.2.8
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/runc@v1.1.0	1.2.8
Low	GO-2022-0969	stdlib@go1.18.2	1.18.6
Low	GO-2023-2185	stdlib@go1.18.2	1.20.11
Low	GHSA-wg65-39gg-5wfj	github.com/prometheus/prometheus@v0.51.0	0.311.3
Low	GO-2022-0537	stdlib@go1.18.2	1.17.13
Low	GHSA-vpvm-3wq2-2wvm	github.com/opencontainers/runc@v1.1.0	1.1.5
Low	GO-2026-4341	stdlib@go1.25.0	1.24.12
Low	GO-2023-1703	stdlib@go1.18.2	1.19.8
Low	GO-2022-0521	stdlib@go1.18.2	1.17.12
Low	DSA-5650-1	util-linux@2.36.1-8+deb11u1	2.36.1-8+deb11u2
Low	GO-2022-0477	stdlib@go1.18.2	1.17.11
Low	GO-2022-0533	stdlib@go1.18.2	1.17.11
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.46.0	0.55.0
Low	GO-2022-0523	stdlib@go1.18.2	1.17.12
Low	GO-2024-2887	stdlib@go1.18.2	1.21.11
Low	GO-2022-0522	stdlib@go1.18.2	1.17.12
Low	GO-2022-0527	stdlib@go1.18.2	1.17.12
Low	GO-2022-0524	stdlib@go1.18.2	1.17.12
Low	GO-2023-1704	stdlib@go1.18.2	1.19.8
Low	DSA-5726-1	krb5@1.18.3-6+deb11u4	1.18.3-6+deb11u5
Low	DLA-3893-1	expat@2.2.10-2+deb11u5	2.2.10-2+deb11u6
Low	GHSA-fw7p-63qq-7hpr	filippo.io/edwards25519@v1.1.0	1.1.1
Low	GO-2022-0526	stdlib@go1.18.2	1.17.12
Low	DSA-5587-1	curl@7.74.0-1.3+deb11u10	7.74.0-1.3+deb11u11
Low	GO-2023-1568	stdlib@go1.18.2	1.19.6
Low	GO-2022-1037	stdlib@go1.18.2	1.18.7
Low	GO-2023-1987	stdlib@go1.18.2	1.19.12
Low	GO-2023-1752	stdlib@go1.18.2	1.19.9
Low	DLA-4321-1	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4
Low	DLA-3926-1	perl@5.32.1-4+deb11u2	5.32.1-4+deb11u4
Low	GO-2023-1705	stdlib@go1.18.2	1.19.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.3.21latest	yesterday	1.7.3	0315308	2,786
0.3.20	13 days ago	1.7.3	0315308	2,786
0.3.17	1 month ago	1.7.3	0415309	2,855

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/sigstore/trillian.svg)](https://charts.stackradar.io/charts/sigstore/trillian)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.