trillian 0.4.1 Helm chart

Name: trillian Helm chart 0.4.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

sigstore

Scored 24 Oct 2026

Trillian is a log that stores an accurate, immutable and verifiable history of activity.

Version 0.4.1 yesterdayapp version 1.8.0 (not verified against the render) 0Artifact Hub

trillian 0.4.1 deploys 5 container images: gcr.io/trillian-opensource-ci/db_server, library/busybox, ghcr.io/sigstore/scaffolding/trillian_log_server, ghcr.io/sigstore/scaffolding/trillian_log_signer and 1 more. Across them, 298 findings — 3 critical, 3 high — 2 on CISA KEV. The highest contribution is DSA-5570-1 in nghttp2 1.43.0-1, fixed in 1.43.0-1+deb11u1. Chart.yaml declares kubeVersion >=1.29.0-0; rendered for Kubernetes 1.29.0.

Radar Score

4,0313365227

298 findings over 5 of 5 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
gcr.io/trillian-opensource-ci/db_server	digest-pinned	3351120	2,634
library/busybox×2	digest-pinned	0000	0
ghcr.io/sigstore/scaffolding/trillian_log_server	digest-pinned	00319	250
ghcr.io/sigstore/scaffolding/trillian_log_signer	digest-pinned	00319	250
ghcr.io/sigstore/scaffolding/createdb	digest-pinned	00869	897

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

197 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-4982	stdlib@go1.25.0	1.25.10
Low	GO-2026-5025	golang.org/x/net@v0.47.0	0.55.0
Low	DLA-4437-1	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3
Low	DLA-4195-1	krb5@1.18.3-6+deb11u4	1.18.3-6+deb11u7
Low	GO-2026-6091	stdlib@go1.25.0	1.25.13
Low	GO-2025-4008	stdlib@go1.25.0	1.24.8
Low	GO-2025-4010	stdlib@go1.25.0	1.24.8
Low	GO-2024-2888	stdlib@go1.18.2	1.21.11
Low	DLA-4031-1	git@1:2.30.2-1+deb11u2	1:2.30.2-1+deb11u4
Low	GO-2026-4865	stdlib@go1.25.0	1.25.9
Low	GO-2026-4976	stdlib@go1.25.0	1.25.10
Low	GO-2026-5039	stdlib@go1.25.0	1.25.11
Low	DLA-4490-1	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u5
Low	GO-2026-5856	stdlib@go1.25.0	1.25.12
Low	GO-2025-3750	stdlib@go1.18.2	1.23.10
Low	GO-2025-3955	stdlib@go1.25.0	1.25.1
Low	GO-2026-5027	golang.org/x/net@v0.47.0	0.55.0
Low	GO-2026-5029	golang.org/x/net@v0.47.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.47.0	0.55.0
Low	GO-2026-4340	stdlib@go1.25.0	1.24.12
Low	DLA-3875-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u6
Low	GO-2026-6599	stdlib@go1.25.0	1.26.9
Low	GO-2026-6600	stdlib@go1.25.0	1.26.9
Low	DLA-4492-1	gnutls28@3.7.1-5+deb11u3	3.7.1-5+deb11u9
Low	DLA-4176-1	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u3
Low	GO-2023-1682	github.com/opencontainers/runc@v1.1.0	1.1.5
Low	DLA-3930-1	libsepol@3.1-1	3.1-1+deb11u1
Low	GO-2025-3503	stdlib@go1.18.2	1.23.7
Low	GO-2022-0531	stdlib@go1.18.2	1.17.11
Low	GO-2026-4869	stdlib@go1.25.0	1.25.9
Low	DLA-4306-1	pam@1.4.0-9+deb11u1	1.4.0-9+deb11u2
Low	DLA-4130-1	shadow@1:4.8.1-1	1:4.8.1-1+deb11u1
Low	GO-2026-6809	stdlib@go1.25.0	1.26.10
Low	GO-2025-3447	stdlib@go1.18.2	1.22.12
Low	GHSA-jfvp-7x6p-h2pv	github.com/opencontainers/runc@v1.1.0	1.1.14
Low	GO-2026-4403	stdlib@go1.18.2	1.23.9
Low	GHSA-xjvp-4fhw-gc47	github.com/opencontainers/runc@v1.1.0	1.3.6
Low	DLA-3972-1	tzdata@2021a-1+deb11u10	2024b-0+deb11u1
Low	DLA-4085-1	tzdata@2021a-1+deb11u10	2025a-0+deb11u1
Low	DLA-4105-1	tzdata@2021a-1+deb11u10	2025b-0+deb11u1
Low	DLA-4213-1	curl@7.74.0-1.3+deb11u10	7.74.0-1.3+deb11u15
Low	DLA-4403-1	tzdata@2021a-1+deb11u10	2025b-0+deb11u2
Low	DLA-4485-1	ca-certificates@20210119	20230311+deb12u1~deb11u1
Low	GO-2026-5932	golang.org/x/crypto@v0.57.0	no fix listed
Low	GHSA-j88v-2chj-qfwx	github.com/jackc/pgx/v4@v4.18.3	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.39.0	0.44.0
Low	GO-2026-4602	stdlib@go1.25.0	1.25.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.4.1latest	yesterday	1.8.0	3365227	4,031
0.4.0	9 days ago	1.8.0	3365227	4,031
0.3.22	15 days ago	1.8.0	3365227	4,031
0.3.21	27 days ago	1.7.3	3371261	4,463
0.3.20	1 month ago	1.7.3	3371261	4,463
0.3.17	1 month ago	1.7.3	3471262	4,532

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/sigstore/trillian.svg)](https://charts.stackradar.io/charts/sigstore/trillian)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.