-
We have an automated system that rebuilds our Docker images whenever that results in a known vulnerability having get patched. This allows us to publish new development release of the Helm chart that …
-
**What happened**:
Findings for `GHSA-xrx6-fmxq-rjj2` are rated as HIGH (CVSS3 Score=7.5) in grype DB, which is incorrect.
**What you expected to happen**:
`GHSA-xrx6-fmxq-rjj2` should be rated a…
-
Parent issue: #221
Attackers that want to escape the Dangerzone container, first need to find a vulnerability in the conversion software. Ensuring that no such vulnerabilities exist is the first la…
-
I don't know if this is a bug or intended behavior, but I did not found any similar report in github issues. Feel free to close if this working as expected.
**What happened**:
grype shows many mes…
-
**What happened**:
Scanning `almalinux:latest` image with various tools to compare the generated SBOM. At first sight Syft sounds better as total number of identified components was greater. But...…
-
**What happened**:
Attempting to create a template that uses Sprig fundtions such as "now", "date" and "env".
Getting error message such as:
` unable to parse template: template: csv.tpl:2: functio…
-
**What happened**:
Running Grype on a CycloneDX 1.4 JSON SBOM with a dependencies section with the "-o cyclonedx-json" option results in the entries in the dependencies section becoming reversed or…
-
Do each instance in matchDetails need to be converted into separate occurrences?
-
Rebuilding with the latest `golang:1.20-alpine` should utilize 1.20.5 instead of 1.20.2 which will address most of these go related vulnerabilities, particularly the critical ones.
```
> grype go…
-
- [x] I have read the [SECURITY.md](https://github.com/GoogleContainerTools/distroless/blob/main/SECURITY.md)
- [x] I understand that this repo tracks debian package releases and cannot fix debian CV…