StackRadar

registry.gitlab.com/xrow-public/ci-tools/tools:main container image

GitLab Container Registry

Scanned 15 Sept 2026

Deployed by 1 of 17,787 indexed charts (latest versions) at this tag.all tags of registry.gitlab.com/xrow-public/ci-tools/tools

registry.gitlab.com/xrow-public/ci-tools/tools:main resolved to 9b9d1ed86b6a, scanned 15 Sept 2026: 207 findings, 0 critical, 1 on KEV; deployed by 1 chart, among them rancher-auto-register.

Radar Score

1,8550115191

207 findings on digest 9b9d1ed86b6a · scanned 15 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest
TagDigestUsed byLast seenVulnerabilitiesRadar Score
mainresolves to9b9d1ed86b6a1 chart2 days ago01151911,855

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

207 distinct on this digest

Findings for digest 9b9d1ed86b6a as scanned on 15 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 15 Sept 2026. Other architectures may differ.

SeverityAdvisoryPackageFixed in
LowGO-2026-6094github.com/google/cel-go@v0.23.20.30.0
LowGO-2026-6225github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589no fix listed
LowGHSA-4vq8-7jfc-9cvpgithub.com/docker/docker@v27.5.0+incompatible28.0.0
LowGHSA-m7cr-m3pv-hgrpgithub.com/go-git/go-git/v5@v5.16.25.19.1
LowGHSA-gm2x-2g9h-ccm8github.com/go-git/go-git/v5@v5.16.25.17.1
LowGHSA-6vgw-5pg2-w6jppip@23.3.226.0
LowGHSA-xf85-363p-868woras.land/oras-go/v2@v2.6.02.6.1

Used by

1 chart
ChartVersionTagContainers
rancher-auto-registerrancher-auto-registerVerified publisher0.1.0main1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.

syft 1.42.1 · scanned 15 Sept 2026 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.