StackRadar

GHSA-pmwq-pjrm-6p5r

Medium

Advisory

Published 8 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
44
of 17,781 indexed, latest versions
Container images
53
deployed by those charts
Fix available
1 of 1
affected package

in-toto-golang and in-toto-python have inconsistent negation behavior

Carried by container images the latest versions of 44 of 17,781 indexed charts deploy, on 53 images.

Affected packageAffected versionsFixed inImages
github.com/in-toto/in-toto-golanggolangv0.2.1-0.20210627200632-886210ae2ab9, v0.3.4-0.20211211042327-af1f9fb822bf, v0.3.4-0.20220709202702-fa494aaa0add, v0.5.0+3 more0.11.053
OSV records
GHSA-pmwq-pjrm-6p5rGO-2026-5547

Charts affected

44 by stars
ChartLatestAffected imagesRadar Score
artifact-hubartifact-hubVerified publisher1.23.02 of 7See more

artifact-hub artifact-hub 1.23.0

2 of the 7 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
artifacthub/scanner:v1.23.02d8365601f0e
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

10,755
falcofalcosecurity9.1.02 of 3See more

falco falcosecurity 9.1.0

2 of the 3 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
falcosecurity/falco-driver-loader:0.44.17df783d5269a
github.com/in-toto/in-toto-golang@v0.10.0
0.11.0
falcosecurity/falcoctl:0.13.00eeb79adc580
github.com/in-toto/in-toto-golang@v0.10.0
0.11.0

Open the chart page →

5,227
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestd78cd113b2bc
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

3,997
policy-controllersigstoreVerified publisher0.10.71 of 2See more

policy-controller sigstore 0.10.7

1 of the 2 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
ghcr.io/sigstore/policy-controller/policy-controllerdigest-pinned0bcd60beb93f
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

911
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

28,534
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

2,898
finops-stackcert-managerVerified publisher0.0.56 of 12See more

finops-stack cert-manager 0.0.5

6 of the 12 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

12,562
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

5,598
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

2,576
dockyarddockyardVerified publisher0.4.01 of 1See more

dockyard dockyard 0.4.0

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
ghcr.io/kgma74/dockyard:0.4.0b40439329191
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

1,542
kubeseckubesecVerified publisher1.1.01 of 1See more

kubesec kubesec 1.1.0

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
kubesec/kubesec:latest025a365d9f18
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

1,075
kubeservice-cosign-webhookkubservice-chartsVerified publisher1.1.11 of 5See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

1 of the 5 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

7,087
lagoon-remotelagoon-chartsVerified publisher0.106.01 of 1See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

2,113
opikopikOfficialVerified publisher2.2.591 of 13See more

opik opik 2.2.59

1 of the 13 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
ghcr.io/comet-ml/opik/opik-python-backend:2.2.59269d0e55ea97
github.com/in-toto/in-toto-golang@v0.10.0
0.11.0

Open the chart page →

14,334
spirephilips-labsVerified publisher0.12.21 of 6See more

spire philips-labs 0.12.2

1 of the 6 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/in-toto/in-toto-golang@v0.3.4-0.20220709202702-fa494aaa0add
0.11.0

Open the chart page →

7,236
cosignedsigstoreVerified publisher0.1.232 of 2See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
gcr.io/projectsigstore/cosigneddigest-pinned784518ff3ee7
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
0.11.0
gcr.io/projectsigstore/policy-webhookdigest-pinned82940e8c3e0d
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
0.11.0

Open the chart page →

5,118
artifact-hubsoftonic1.19.02 of 8See more

artifact-hub softonic 1.19.0

2 of the 8 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
artifacthub/scanner:v1.19.0323d026e78c3
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

14,491
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

9,847
door-agentcnoVerified publisher3.0.152 of 15See more

door-agent cno 3.0.15

2 of the 15 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
library/docker:27-cli851f91d24121
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
library/docker:27-dindaa3df78ecf32
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

19,338
kyvernodevopstalesVerified publisher2.5.12 of 2See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
0.11.0
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
0.11.0

Open the chart page →

4,722
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

68,240
harborgpg-dev1.18.31 of 8See more

harbor gpg-dev 1.18.3

1 of the 8 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

3,376
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

2,590
appwritehelmforgeVerified publisher1.3.41 of 5See more

appwrite helmforge 1.3.4

1 of the 5 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.6adc7d0e7ec23
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

6,952
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

3,999
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

1,893
dockerdkarljorgensen0.1.01 of 1See more

dockerd karljorgensen 0.1.0

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
library/docker:28.5.2-dind2a232a42256f
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

2,034
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

3,507
lagoon-docker-hostlagoon-chartsVerified publisher0.7.01 of 1See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

2,113
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
github.com/in-toto/in-toto-golang@v0.3.4-0.20220709202702-fa494aaa0add
0.11.0

Open the chart page →

4,271
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

3,225
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

3,225
m9sweeperm9sweeperVerified publisher1.6.02 of 6See more

m9sweeper m9sweeper 1.6.0

2 of the 6 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
kubesec/kubesec:v2.13.0c0f3b0673578
github.com/in-toto/in-toto-golang@v0.7.0
0.11.0
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

9,774
agent-control-cdnewrelic1.0.01 of 3See more

agent-control-cd newrelic 1.0.0

1 of the 3 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

5,034
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

6,037
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

8,599
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/in-toto/in-toto-golang@v0.2.1-0.20210627200632-886210ae2ab9
0.11.0

Open the chart page →

29,227
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

68,240
teamcitysinextraVerified publisher1.0.21 of 3See more

teamcity sinextra 1.0.2

1 of the 3 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

2,429
harborsoftonic1.13.01 of 8See more

harbor softonic 1.13.0

1 of the 8 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

7,672
trivy-operatorsoftonic0.18.01 of 1See more

trivy-operator softonic 0.18.0

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

2,505
act-runnertektonops0.1.21 of 2See more

act-runner tektonops 0.1.2

1 of the 2 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
library/docker:23.0.6-dindafa5d5134900
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

4,212
harbor-scanner-trivytrivy-operator0.31.21 of 1See more

harbor-scanner-trivy trivy-operator 0.31.2

1 of the 1 container images this version deploys carry GHSA-pmwq-pjrm-6p5r.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

2,477

Container images carrying it

53 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
3
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
2
1dev/server:11.9.0cd5b12fe5471
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
appwrite/appwrite:1.9.01aaa70127114
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
appwrite/appwrite:1.9.6adc7d0e7ec23
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
aquasec/trivy:0.43.1944a04445179
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
aquasec/trivy:0.32.0973d0df16189
github.com/in-toto/in-toto-golang@v0.3.4-0.20220709202702-fa494aaa0add
github.com/in-toto/in-toto-golang@v0.3.4-0.20220709202702-fa494aaa0add
0.11.0
0.11.0
1
aquasec/trivy:0.69.3bcc376de8d77
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
artifacthub/scanner:v1.23.02d8365601f0e
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
artifacthub/scanner:v1.19.0323d026e78c3
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
datadog/agent:6aad9994de6a7
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
devopstales/trivy-operator:2.575136aa7a26e
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
falcosecurity/falcoctl:0.13.00eeb79adc580
github.com/in-toto/in-toto-golang@v0.10.0
github.com/in-toto/in-toto-golang@v0.10.0
0.11.0
0.11.0
1
falcosecurity/falco-driver-loader:0.44.17df783d5269a
github.com/in-toto/in-toto-golang@v0.10.0
github.com/in-toto/in-toto-golang@v0.10.0
0.11.0
0.11.0
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
kubesec/kubesec:latest025a365d9f18
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
kubesec/kubesec:v2.13.0c0f3b0673578
github.com/in-toto/in-toto-golang@v0.7.0
github.com/in-toto/in-toto-golang@v0.7.0
0.11.0
0.11.0
1
library/docker:24.0.2-dind1d148deae16a
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
library/docker:28.5.2-dind2a232a42256f
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
library/docker:27-cli851f91d24121
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
library/docker:27-dindaa3df78ecf32
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
library/docker:23.0.6-dindafa5d5134900
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
library/docker:26.1-dinddd43b430341a
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
gcr.io/projectsigstore/cosigned784518ff3ee7
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
0.11.0
0.11.0
1
gcr.io/projectsigstore/policy-webhook82940e8c3e0d
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
0.11.0
0.11.0
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/comet-ml/opik/opik-python-backend:2.2.59269d0e55ea97
github.com/in-toto/in-toto-golang@v0.10.0
github.com/in-toto/in-toto-golang@v0.10.0
0.11.0
0.11.0
1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/kgma74/dockyard:0.4.0b40439329191
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
0.11.0
0.11.0
1
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
0.11.0
0.11.0
1
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/sigstore/policy-controller/policy-controller0bcd60beb93f
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/in-toto/in-toto-golang@v0.3.4-0.20220709202702-fa494aaa0add
github.com/in-toto/in-toto-golang@v0.3.4-0.20220709202702-fa494aaa0add
0.11.0
0.11.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.