StackRadar

ghcr.io/sigstore/scaffolding/createctconfig:v0.7.33 container image

GitHub Container Registry

Scanned 9 Oct 2026

Deployed by 3 of 18,071 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/sigstore/scaffolding/createctconfig

ghcr.io/sigstore/scaffolding/createctconfig:v0.7.33 resolved to e591f98e3899, scanned 9 Oct 2026: 94 findings, 0 critical; deployed by 3 charts, among them fulcio, scaffold and ctlog.

Radar Score

974001381

94 findings on digest e591f98e3899 · scanned 9 Oct 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v0.7.33resolves toe591f98e38993 chartstoday001381974

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

13 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest e591f98e3899 as scanned on 9 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 9 Oct 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGO-2026-4341stdlib@go1.25.01.24.12
MediumGO-2026-4337stdlib@go1.25.01.24.13
MediumGO-2026-5026golang.org/x/net@v0.47.00.55.0
MediumGO-2026-5026stdlib@go1.25.01.25.13
MediumGHSA-f5wc-c3c7-36mcgolang.org/x/crypto@v0.46.00.52.0
MediumGHSA-x527-x647-q7gggolang.org/x/crypto@v0.46.00.52.0
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.46.00.52.0
MediumGHSA-rm3j-f69w-wqmqgolang.org/x/crypto@v0.46.00.52.0
MediumGHSA-vgwf-h737-ff37golang.org/x/crypto@v0.46.00.52.0
MediumGHSA-89gr-r52h-f8rxgolang.org/x/crypto@v0.46.00.52.0
MediumGHSA-jppx-rxg9-jmrxgolang.org/x/crypto@v0.46.00.52.0
MediumGO-2026-4601stdlib@go1.25.01.25.8
MediumGO-2026-4981stdlib@go1.25.01.25.10

Used by

3 charts
ChartVersionTagContainers
fulciosigstoreVerified publisher2.11.4v0.7.331
scaffoldsigstoreVerified publisher0.6.117v0.7.331
ctlogsigstoreVerified publisher0.2.69v0.7.331

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 9 Oct 2026 · advisories as of 9 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.