StackRadar

ghcr.io/sigstore/scaffolding/ct_server:v0.7.31 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 3 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/sigstore/scaffolding/ct_server

ghcr.io/sigstore/scaffolding/ct_server:v0.7.31 resolved to 66664ba563e7, scanned 14 Sept 2026: 93 findings, 0 critical; deployed by 3 charts, among them fulcio, scaffold and ctlog.

Radar Score

80300984

93 findings on digest 66664ba563e7 · scanned 14 Sept 2026

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
v0.7.31resolves to66664ba563e73 charts8 days ago00984803

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Medium findings

9 distinct on this digest

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Findings for digest 66664ba563e7 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.43.00.52.0
MediumGHSA-p77j-4mvh-x3m3google.golang.org/grpc@v1.76.01.79.3
MediumGHSA-xgrm-4fwx-7qm8github.com/jackc/pgx/v5@v5.7.55.9.0
MediumGHSA-9jj7-4m8r-rfcmgithub.com/jackc/pgx/v5@v5.7.55.9.0
MediumGHSA-x527-x647-q7gggolang.org/x/crypto@v0.43.00.52.0
MediumGHSA-vgwf-h737-ff37golang.org/x/crypto@v0.43.00.52.0
MediumGHSA-f5wc-c3c7-36mcgolang.org/x/crypto@v0.43.00.52.0
MediumGHSA-rm3j-f69w-wqmqgolang.org/x/crypto@v0.43.00.52.0
MediumGHSA-8rm2-7qqf-34qmgithub.com/prometheus/prometheus@v0.51.00.305.2

Used by

3 charts
ChartVersionTagContainers
fulciosigstoreVerified publisher2.11.1v0.7.311
scaffoldsigstoreVerified publisher0.6.114v0.7.311
ctlogsigstoreVerified publisher0.2.68v0.7.311

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.