StackRadar

trillian 0.3.22 Helm chart

sigstoreVerified publisher

Scored 12 Oct 2026

Trillian is a log that stores an accurate, immutable and verifiable history of activity.

Version 0.3.22 4 days agoapp version 1.8.0 (not verified against the render) 0Artifact Hub

trillian 0.3.22 deploys 5 container images: gcr.io/trillian-opensource-ci/db_server, library/busybox, ghcr.io/sigstore/scaffolding/trillian_log_server, ghcr.io/sigstore/scaffolding/trillian_log_signer and 1 more. Across them, 293 findings — 3 critical, 3 high — 2 on CISA KEV. The highest contribution is DSA-5570-1 in nghttp2 1.43.0-1, fixed in 1.43.0-1+deb11u1.

Radar Score

3,9163363224

293 findings over 5 of 5 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images
ImageTagVulnerabilitiesRadar Score
gcr.io/trillian-opensource-ci/db_serverdigest-pinned33511192,611
library/busybox×2digest-pinned00000
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned00219223
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned00219223
ghcr.io/sigstore/scaffolding/createdbdigest-pinned00867859

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

53 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGO-2022-0520stdlib@go1.18.21.17.12
MediumGO-2026-4601stdlib@go1.25.01.25.8
MediumGO-2026-4981stdlib@go1.25.01.25.10

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.3.22latest4 days ago1.8.033632243,916
0.3.2115 days ago1.7.333712604,440
0.3.2027 days ago1.7.333712604,440
0.3.171 month ago1.7.334712614,509

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/sigstore/trillian.svg)](https://charts.stackradar.io/charts/sigstore/trillian)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 9 Oct 2026 · scanned 12 Oct 2026 · advisories as of 12 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.