StackRadar

ghcr.io/sigstore/fulcio:v1.8.8 container image

GitHub Container Registry

Scanned 28 Sept 2026

Deployed by 2 of 17,926 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/sigstore/fulcio

ghcr.io/sigstore/fulcio:v1.8.8 resolved to ef72cf56c64b, scanned 28 Sept 2026: 23 findings, 0 critical; deployed by 2 charts, among them fulcio and scaffold.

Radar Score

16000221

23 findings on digest ef72cf56c64b · scanned 28 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v1.8.8resolves toef72cf56c64b2 chartstoday00221160

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

2 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest ef72cf56c64b as scanned on 28 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 28 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-2v4p-qf9q-27wjgoogle.golang.org/grpc@v1.81.11.82.2
MediumGHSA-vp52-pcj8-j9qcgoogle.golang.org/grpc@v1.81.11.83.1

Used by

2 charts
ChartVersionTagContainers
fulciosigstoreVerified publisher2.11.2, 2.11.1v1.8.82
scaffoldsigstoreVerified publisher0.6.115, 0.6.114v1.8.82

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 28 Sept 2026 · advisories as of 28 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.