StackRadar

GO-2026-5547

Medium

Advisory

Published 8 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
44
of 17,781 indexed, latest versions
Container images
53
deployed by those charts
Fix available
1 of 1
affected package

in-toto-golang and in-toto-python have inconsistent negation behavior

Carried by container images the latest versions of 44 of 17,781 indexed charts deploy, on 53 images.

Affected packageAffected versionsFixed inImages
github.com/in-toto/in-toto-golanggolangv0.2.1-0.20210627200632-886210ae2ab9, v0.3.4-0.20211211042327-af1f9fb822bf, v0.3.4-0.20220709202702-fa494aaa0add, v0.5.0+3 more0.11.053
OSV records
GHSA-pmwq-pjrm-6p5rGO-2026-5547

Charts affected

44 by stars
ChartLatestAffected imagesRadar Score
artifact-hubartifact-hubVerified publisher1.23.02 of 7See more

artifact-hub artifact-hub 1.23.0

2 of the 7 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
artifacthub/scanner:v1.23.02d8365601f0e
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

10,755
falcofalcosecurity9.1.02 of 3See more

falco falcosecurity 9.1.0

2 of the 3 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
falcosecurity/falco-driver-loader:0.44.17df783d5269a
github.com/in-toto/in-toto-golang@v0.10.0
0.11.0
falcosecurity/falcoctl:0.13.00eeb79adc580
github.com/in-toto/in-toto-golang@v0.10.0
0.11.0

Open the chart page →

5,227
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestd78cd113b2bc
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

3,997
policy-controllersigstoreVerified publisher0.10.71 of 2See more

policy-controller sigstore 0.10.7

1 of the 2 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
ghcr.io/sigstore/policy-controller/policy-controllerdigest-pinned0bcd60beb93f
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

911
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

28,534
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

2,898
finops-stackcert-managerVerified publisher0.0.56 of 12See more

finops-stack cert-manager 0.0.5

6 of the 12 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

12,562
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

5,598
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

2,576
dockyarddockyardVerified publisher0.4.01 of 1See more

dockyard dockyard 0.4.0

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
ghcr.io/kgma74/dockyard:0.4.0b40439329191
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

1,542
kubeseckubesecVerified publisher1.1.01 of 1See more

kubesec kubesec 1.1.0

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
kubesec/kubesec:latest025a365d9f18
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

1,075
kubeservice-cosign-webhookkubservice-chartsVerified publisher1.1.11 of 5See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

1 of the 5 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

7,087
lagoon-remotelagoon-chartsVerified publisher0.106.01 of 1See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

2,113
opikopikOfficialVerified publisher2.2.591 of 13See more

opik opik 2.2.59

1 of the 13 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
ghcr.io/comet-ml/opik/opik-python-backend:2.2.59269d0e55ea97
github.com/in-toto/in-toto-golang@v0.10.0
0.11.0

Open the chart page →

14,334
spirephilips-labsVerified publisher0.12.21 of 6See more

spire philips-labs 0.12.2

1 of the 6 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/in-toto/in-toto-golang@v0.3.4-0.20220709202702-fa494aaa0add
0.11.0

Open the chart page →

7,236
cosignedsigstoreVerified publisher0.1.232 of 2See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
gcr.io/projectsigstore/cosigneddigest-pinned784518ff3ee7
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
0.11.0
gcr.io/projectsigstore/policy-webhookdigest-pinned82940e8c3e0d
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
0.11.0

Open the chart page →

5,118
artifact-hubsoftonic1.19.02 of 8See more

artifact-hub softonic 1.19.0

2 of the 8 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
artifacthub/scanner:v1.19.0323d026e78c3
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

14,491
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

9,847
door-agentcnoVerified publisher3.0.152 of 15See more

door-agent cno 3.0.15

2 of the 15 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
library/docker:27-cli851f91d24121
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
library/docker:27-dindaa3df78ecf32
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

19,338
kyvernodevopstalesVerified publisher2.5.12 of 2See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
0.11.0
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
0.11.0

Open the chart page →

4,722
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

68,240
harborgpg-dev1.18.31 of 8See more

harbor gpg-dev 1.18.3

1 of the 8 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

3,376
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

2,590
appwritehelmforgeVerified publisher1.3.41 of 5See more

appwrite helmforge 1.3.4

1 of the 5 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.6adc7d0e7ec23
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

6,952
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

3,999
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

1,893
dockerdkarljorgensen0.1.01 of 1See more

dockerd karljorgensen 0.1.0

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
library/docker:28.5.2-dind2a232a42256f
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

2,034
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

3,507
lagoon-docker-hostlagoon-chartsVerified publisher0.7.01 of 1See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

2,113
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
github.com/in-toto/in-toto-golang@v0.3.4-0.20220709202702-fa494aaa0add
0.11.0

Open the chart page →

4,271
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

3,225
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

3,225
m9sweeperm9sweeperVerified publisher1.6.02 of 6See more

m9sweeper m9sweeper 1.6.0

2 of the 6 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
kubesec/kubesec:v2.13.0c0f3b0673578
github.com/in-toto/in-toto-golang@v0.7.0
0.11.0
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

9,774
agent-control-cdnewrelic1.0.01 of 3See more

agent-control-cd newrelic 1.0.0

1 of the 3 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

5,034
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

6,037
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

8,599
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/in-toto/in-toto-golang@v0.2.1-0.20210627200632-886210ae2ab9
0.11.0

Open the chart page →

29,227
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

68,240
teamcitysinextraVerified publisher1.0.21 of 3See more

teamcity sinextra 1.0.2

1 of the 3 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

2,429
harborsoftonic1.13.01 of 8See more

harbor softonic 1.13.0

1 of the 8 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

7,672
trivy-operatorsoftonic0.18.01 of 1See more

trivy-operator softonic 0.18.0

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

2,505
act-runnertektonops0.1.21 of 2See more

act-runner tektonops 0.1.2

1 of the 2 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
library/docker:23.0.6-dindafa5d5134900
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0

Open the chart page →

4,212
harbor-scanner-trivytrivy-operator0.31.21 of 1See more

harbor-scanner-trivy trivy-operator 0.31.2

1 of the 1 container images this version deploys carry GO-2026-5547.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0

Open the chart page →

2,477

Container images carrying it

53 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
3
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
2
1dev/server:11.9.0cd5b12fe5471
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
appwrite/appwrite:1.9.01aaa70127114
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
appwrite/appwrite:1.9.6adc7d0e7ec23
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
aquasec/trivy:0.43.1944a04445179
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
aquasec/trivy:0.32.0973d0df16189
github.com/in-toto/in-toto-golang@v0.3.4-0.20220709202702-fa494aaa0add
github.com/in-toto/in-toto-golang@v0.3.4-0.20220709202702-fa494aaa0add
0.11.0
0.11.0
1
aquasec/trivy:0.69.3bcc376de8d77
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
artifacthub/scanner:v1.23.02d8365601f0e
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
artifacthub/scanner:v1.19.0323d026e78c3
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
datadog/agent:6aad9994de6a7
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
devopstales/trivy-operator:2.575136aa7a26e
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
falcosecurity/falcoctl:0.13.00eeb79adc580
github.com/in-toto/in-toto-golang@v0.10.0
github.com/in-toto/in-toto-golang@v0.10.0
0.11.0
0.11.0
1
falcosecurity/falco-driver-loader:0.44.17df783d5269a
github.com/in-toto/in-toto-golang@v0.10.0
github.com/in-toto/in-toto-golang@v0.10.0
0.11.0
0.11.0
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
kubesec/kubesec:latest025a365d9f18
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
kubesec/kubesec:v2.13.0c0f3b0673578
github.com/in-toto/in-toto-golang@v0.7.0
github.com/in-toto/in-toto-golang@v0.7.0
0.11.0
0.11.0
1
library/docker:24.0.2-dind1d148deae16a
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
library/docker:28.5.2-dind2a232a42256f
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
library/docker:27-cli851f91d24121
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
library/docker:27-dindaa3df78ecf32
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
library/docker:23.0.6-dindafa5d5134900
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
library/docker:26.1-dinddd43b430341a
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
gcr.io/projectsigstore/cosigned784518ff3ee7
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
0.11.0
0.11.0
1
gcr.io/projectsigstore/policy-webhook82940e8c3e0d
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
0.11.0
0.11.0
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/comet-ml/opik/opik-python-backend:2.2.59269d0e55ea97
github.com/in-toto/in-toto-golang@v0.10.0
github.com/in-toto/in-toto-golang@v0.10.0
0.11.0
0.11.0
1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/kgma74/dockyard:0.4.0b40439329191
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
0.11.0
0.11.0
1
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
github.com/in-toto/in-toto-golang@v0.3.4-0.20211211042327-af1f9fb822bf
0.11.0
0.11.0
1
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/in-toto/in-toto-golang@v0.5.0
github.com/in-toto/in-toto-golang@v0.5.0
0.11.0
0.11.0
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/sigstore/policy-controller/policy-controller0bcd60beb93f
github.com/in-toto/in-toto-golang@v0.9.0
github.com/in-toto/in-toto-golang@v0.9.0
0.11.0
0.11.0
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/in-toto/in-toto-golang@v0.3.4-0.20220709202702-fa494aaa0add
github.com/in-toto/in-toto-golang@v0.3.4-0.20220709202702-fa494aaa0add
0.11.0
0.11.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.