ghcr.io/jkroepke/kube-webhook-certgen:1.8.9 container image
GitHub Container RegistryScanned 12 Oct 2026
Deployed by 9 of 18,104 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/jkroepke/kube-webhook-certgen
ghcr.io/jkroepke/kube-webhook-certgen:1.8.9 resolved to 58e4ac2e15bf, scanned 12 Oct 2026: 18 findings, 0 critical; deployed by 9 charts, among them kube-prometheus-stack, kube-prometheus-stack and lgtm.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest 58e4ac2e15bf as scanned on 12 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 12 Oct 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GO-2026-6612 | golang.org/ | 0.60.0 |
| Medium | GO-2026-6612 | stdlib | 1.27.2 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| kube-prometheus-stackprometheus-communityOfficialVerified publisher | 92.3.0, 92.2.0, 92.1.0, 92.0.0, 91.9.0, 91.8.2, 91.8.1, 91.6.0, 91.5.3 | 1.8.9 | 18 |
| kube-prometheus-stackkube-prometheus-stack-oci | 92.3.0, 92.2.0, 92.1.0, 92.0.0, 91.9.0, 91.8.2, 91.8.1, 91.8.0, 91.7.0, 91.5.3 | 1.8.9 | 20 |
| lgtmlgtmVerified publisher | 0.28.2, 0.28.1 | 1.8.9 | 4 |
| prometheus-operator-admission-webhookprometheus-communityVerified publisher | 0.44.2 | 1.8.9 | 2 |
| kube-prometheus-stackwenerme | 92.3.0, 92.2.0, 92.1.0, 92.0.0, 91.9.0, 91.8.2, 91.8.1, 91.8.0, 91.7.0, 91.5.3 | 1.8.9 | 20 |
| ceems-api-serverceemsVerified publisher | 0.10.1 | 1.8.9 | 2 |
| kube-ceemsceemsOfficialVerified publisher | 1.49.0, 1.48.0, 1.47.0, 1.45.0, 1.44.0, 1.43.0, 1.41.0 | 1.8.9 | 28 |
| pax-prometheuspaxtecnologia | 0.7.3 | 1.8.9 | 2 |
| kube-prometheus-stackwener | 92.3.0, 92.2.0, 92.1.0, 92.0.0, 91.9.0, 91.8.2, 91.8.1, 91.8.0, 91.7.0, 91.5.3 | 1.8.9 | 20 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.