pandora/trivy.woodpecker
3
0
Fork 0
Code Issues 2 Pull requests Projects Releases 14 Packages 1 Wiki Activity Actions

Vulnerability dashboard #10

New issue
Open
opened 2026-03-22 23:22:54 +00:00 by bot-ci · 0 comments
bot-ci commented 2026-03-22 23:22:54 +00:00
Owner
Copy link

This issue list updates about vulnerabilites that are detected by trivy.woodpecker plugin.

Summary

Severity Count
CRITICAL 0
HIGH 0
MEDIUM 0
LOW 0
UNKNOWN 0

Detected packages and vulnerabilites

Packages

code.thinkaboutit.tech/pandora/trivy.woodpecker:latest (debian 13.4):

Name Version
base-files 13.8+deb13u4
media-types 13.0.0
netbase 6.5
tzdata 2026a
tzdata-legacy 2026a

go.mod:

Name Version
code.thinkaboutit.tech/pandora/trivy.woodpecker
code.thinkaboutit.tech/pandora/woodpecker-utils.gopack v1.2.0
github.com/davecgh/go-spew v1.1.1
github.com/pmezard/go-difflib v1.0.0
github.com/stretchr/testify v1.11.1
gopkg.in/yaml.v3 v3.0.1

usr/local/bin/trivy:

Name Version
github.com/aquasecurity/trivy v0.70.0
stdlib v1.25.9
cel.dev/expr v0.25.1
cloud.google.com/go v0.123.0
cloud.google.com/go/auth v0.18.2
cloud.google.com/go/auth/oauth2adapt v0.2.8
cloud.google.com/go/compute/metadata v0.9.0
cloud.google.com/go/iam v1.5.3
cloud.google.com/go/monitoring v1.24.3
cloud.google.com/go/storage v1.61.3
dario.cat/mergo v1.0.2
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1
github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry v0.2.3
github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2
github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0
github.com/BurntSushi/toml v1.6.0
github.com/CycloneDX/cyclonedx-go v0.10.0
github.com/GoogleCloudPlatform/docker-credential-gcr/v2 v2.1.32
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.55.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.55.0
github.com/Intevation/gval v1.3.0
github.com/Intevation/jsonpath v0.2.1
github.com/MakeNowJust/heredoc v1.0.0
github.com/Masterminds/goutils v1.1.1
github.com/Masterminds/semver/v3 v3.4.0
github.com/Masterminds/sprig/v3 v3.3.0
github.com/Masterminds/squirrel v1.5.4
github.com/NYTimes/gziphandler v1.1.1
github.com/ProtonMail/go-crypto v1.3.0
github.com/VividCortex/ewma v1.2.0
github.com/agext/levenshtein v1.2.3
github.com/agnivade/levenshtein v1.2.1
github.com/alecthomas/chroma v0.10.0
github.com/anchore/go-struct-converter v0.1.0
github.com/apparentlymart/go-cidr v1.1.0
github.com/apparentlymart/go-textseg/v15 v15.0.0
github.com/aquasecurity/go-gem-version v0.0.0-20201115065557-8eed6fe000ce
github.com/aquasecurity/go-npm-version v0.0.2
github.com/aquasecurity/go-pep440-version v0.0.1
github.com/aquasecurity/go-version v0.0.1
github.com/aquasecurity/iamgo v0.0.10
github.com/aquasecurity/jfather v0.0.8
github.com/aquasecurity/table v1.11.0
github.com/aquasecurity/tml v0.6.1
github.com/aquasecurity/trivy-checks v1.12.2-0.20251219190323-79d27547baf5
github.com/aquasecurity/trivy-db v0.0.0-20251222105351-a833f47f8f0d
github.com/aquasecurity/trivy-java-db v0.0.0-20240109071736-184bd7481d48
github.com/aquasecurity/trivy-kubernetes v0.9.1
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2
github.com/aws/aws-sdk-go-v2 v1.41.5
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.8
github.com/aws/aws-sdk-go-v2/config v1.32.12
github.com/aws/aws-sdk-go-v2/credentials v1.19.12
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.20
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.21
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.21
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.6
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.22
github.com/aws/aws-sdk-go-v2/service/ebs v1.22.1
github.com/aws/aws-sdk-go-v2/service/ec2 v1.290.0
github.com/aws/aws-sdk-go-v2/service/ecr v1.55.2
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.7
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.13
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.21
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.21
github.com/aws/aws-sdk-go-v2/service/s3 v1.97.3
github.com/aws/aws-sdk-go-v2/service/signin v1.0.8
github.com/aws/aws-sdk-go-v2/service/sso v1.30.13
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.17
github.com/aws/aws-sdk-go-v2/service/sts v1.41.9
github.com/aws/smithy-go v1.24.2
github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d
github.com/bitnami/go-version v0.0.0-20231130084017-bb00604d650c
github.com/blang/semver v3.5.1+incompatible
github.com/blang/semver/v4 v4.0.0
github.com/bmatcuk/doublestar/v4 v4.10.0
github.com/briandowns/spinner v1.23.0
github.com/cenkalti/backoff/v4 v4.3.0
github.com/cenkalti/backoff/v5 v5.0.3
github.com/cespare/xxhash/v2 v2.3.0
github.com/chai2010/gettext-go v1.0.2
github.com/cheggaaa/pb/v3 v3.1.7
github.com/cloudflare/circl v1.6.3
github.com/cncf/xds/go v0.0.0-20251210132809-ee656c7534f5
github.com/containerd/containerd v1.7.30
github.com/containerd/containerd/api v1.10.0
github.com/containerd/containerd/v2 v2.2.2
github.com/containerd/continuity v0.4.5
github.com/containerd/errdefs v1.0.0
github.com/containerd/errdefs/pkg v0.3.0
github.com/containerd/fifo v1.1.0
github.com/containerd/log v0.1.0
github.com/containerd/platforms v1.0.0-rc.4
github.com/containerd/plugin v1.0.0
github.com/containerd/stargz-snapshotter/estargz v0.18.2
github.com/containerd/ttrpc v1.2.8
github.com/containerd/typeurl/v2 v2.2.3
github.com/coreos/go-oidc/v3 v3.17.0
github.com/cyberphone/json-canonicalization v0.0.0-20241213102144-19d51d7fe467
github.com/cyphar/filepath-securejoin v0.6.1
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f
github.com/digitorus/pkcs7 v0.0.0-20230818184609-3a137a874352
github.com/digitorus/timestamp v0.0.0-20231217203849-220c5c2851b7
github.com/distribution/reference v0.6.0
github.com/dlclark/regexp2 v1.11.0
github.com/docker/cli v29.4.0+incompatible
github.com/docker/distribution v2.8.3+incompatible
github.com/docker/docker-credential-helpers v0.9.5
github.com/docker/go-connections v0.6.0
github.com/docker/go-units v0.5.0
github.com/dsnet/compress v0.0.2-0.20230904184137-39efe44ab707
github.com/dustin/go-humanize v1.0.1
github.com/emicklei/go-restful/v3 v3.13.0
github.com/emirpasic/gods v1.18.1
github.com/envoyproxy/go-control-plane/envoy v1.36.0
github.com/envoyproxy/protoc-gen-validate v1.3.0
github.com/evanphx/json-patch v5.9.11+incompatible
github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f
github.com/fatih/color v1.19.0
github.com/felixge/httpsnoop v1.0.4
github.com/fsnotify/fsnotify v1.9.0
github.com/fvbommel/sortorder v1.1.0
github.com/fxamacker/cbor/v2 v2.9.0
github.com/go-chi/chi/v5 v5.2.5
github.com/go-errors/errors v1.4.2
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376
github.com/go-git/go-billy/v5 v5.8.0
github.com/go-git/go-git/v5 v5.17.2
github.com/go-gorp/gorp/v3 v3.1.0
github.com/go-ini/ini v1.67.0
github.com/go-jose/go-jose/v4 v4.1.4
github.com/go-logr/logr v1.4.3
github.com/go-logr/stdr v1.2.2
github.com/go-openapi/analysis v0.24.3
github.com/go-openapi/errors v0.22.7
github.com/go-openapi/jsonpointer v0.22.5
github.com/go-openapi/jsonreference v0.21.5
github.com/go-openapi/loads v0.23.3
github.com/go-openapi/runtime v0.29.3
github.com/go-openapi/spec v0.22.4
github.com/go-openapi/strfmt v0.26.1
github.com/go-openapi/swag v0.25.5
github.com/go-openapi/swag/cmdutils v0.25.5
github.com/go-openapi/swag/conv v0.25.5
github.com/go-openapi/swag/fileutils v0.25.5
github.com/go-openapi/swag/jsonname v0.25.5
github.com/go-openapi/swag/jsonutils v0.25.5
github.com/go-openapi/swag/loading v0.25.5
github.com/go-openapi/swag/mangling v0.25.5
github.com/go-openapi/swag/netutils v0.25.5
github.com/go-openapi/swag/stringutils v0.25.5
github.com/go-openapi/swag/typeutils v0.25.5
github.com/go-openapi/swag/yamlutils v0.25.5
github.com/go-openapi/validate v0.25.2
github.com/go-redis/redis/v8 v8.11.5
github.com/go-viper/mapstructure/v2 v2.5.0
github.com/gobwas/glob v0.2.3
github.com/gocsaf/csaf/v3 v3.5.1
github.com/gogo/protobuf v1.3.2
github.com/golang-jwt/jwt/v5 v5.3.1
github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8
github.com/golang/snappy v0.0.4
github.com/google/btree v1.1.3
github.com/google/certificate-transparency-go v1.3.2
github.com/google/gnostic-models v0.7.0
github.com/google/go-cmp v0.7.0
github.com/google/go-containerregistry v0.21.2
github.com/google/go-github/v62 v62.0.0
github.com/google/go-querystring v1.1.0
github.com/google/licenseclassifier/v2 v2.0.0
github.com/google/s2a-go v0.1.9
github.com/google/uuid v1.6.0
github.com/googleapis/enterprise-certificate-proxy v0.3.14
github.com/googleapis/gax-go/v2 v2.19.0
github.com/gosuri/uitable v0.0.4
github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.7
github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.72
github.com/hashicorp/errwrap v1.1.0
github.com/hashicorp/go-cleanhttp v0.5.2
github.com/hashicorp/go-getter v1.8.6
github.com/hashicorp/go-multierror v1.1.1
github.com/hashicorp/go-retryablehttp v0.7.8
github.com/hashicorp/go-uuid v1.0.3
github.com/hashicorp/go-version v1.9.0
github.com/hashicorp/golang-lru/v2 v2.0.7
github.com/hashicorp/hcl/v2 v2.24.0
github.com/huandu/xstrings v1.5.0
github.com/in-toto/attestation v1.1.2
github.com/in-toto/in-toto-golang v0.10.0
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99
github.com/jedisct1/go-minisign v0.0.0-20230811132847-661be99b8267
github.com/jmoiron/sqlx v1.4.0
github.com/josephburnett/jd/v2 v2.3.0
github.com/json-iterator/go v1.1.12
github.com/kevinburke/ssh_config v1.2.0
github.com/klauspost/compress v1.18.5
github.com/knqyf263/go-apk-version v0.0.0-20200609155635-041fdbb8563f
github.com/knqyf263/go-deb-version v0.0.0-20241115132648-6f4aee6ccd23
github.com/knqyf263/go-rpm-version v0.0.0-20220614171824-631e686d1075
github.com/knqyf263/go-rpmdb v0.1.1
github.com/knqyf263/nested v0.0.1
github.com/kylelemons/godebug v1.1.0
github.com/lann/builder v0.0.0-20180802200727-47ae307949d0
github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0
github.com/lestrrat-go/blackmagic v1.0.4
github.com/lestrrat-go/dsig v1.0.0
github.com/lestrrat-go/httpcc v1.0.1
github.com/lestrrat-go/httprc/v3 v3.0.2
github.com/lestrrat-go/jwx/v3 v3.0.13
github.com/lestrrat-go/option/v2 v2.0.0
github.com/letsencrypt/boulder v0.20260223.0
github.com/lib/pq v1.10.9
github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de
github.com/lunixbochs/struc v0.0.0-20200707160740-784aaebc1d40
github.com/masahiro331/go-disk v0.0.0-20240625071113-56c933208fee
github.com/masahiro331/go-ebs-file v0.0.0-20240917043618-e6d2bea5c32e
github.com/masahiro331/go-ext4-filesystem v0.0.0-20240620024024-ca14e6327bbd
github.com/masahiro331/go-mvn-version v0.0.0-20250131095131-f4974fa13b8a
github.com/masahiro331/go-vmdk-parser v0.0.0-20221225061455-612096e4bbbd
github.com/masahiro331/go-xfs-filesystem v0.0.0-20231205045356-1b22259a6c44
github.com/mattn/go-colorable v0.1.14
github.com/mattn/go-isatty v0.0.20
github.com/mattn/go-runewidth v0.0.16
github.com/mattn/go-shellwords v1.0.12
github.com/mitchellh/copystructure v1.2.0
github.com/mitchellh/go-homedir v1.1.0
github.com/mitchellh/go-wordwrap v1.0.1
github.com/mitchellh/hashstructure/v2 v2.0.2
github.com/mitchellh/mapstructure v1.5.1-0.20231216201459-8508981c8b6c
github.com/mitchellh/reflectwalk v1.0.2
github.com/moby/buildkit v0.29.0
github.com/moby/docker-image-spec v1.3.1
github.com/moby/locker v1.0.1
github.com/moby/moby/api v1.54.1
github.com/moby/moby/client v0.4.0
github.com/moby/sys/atomicwriter v0.1.0
github.com/moby/sys/mountinfo v0.7.2
github.com/moby/sys/sequential v0.6.0
github.com/moby/sys/signal v0.7.1
github.com/moby/sys/user v0.4.0
github.com/moby/sys/userns v0.1.0
github.com/moby/term v0.5.2
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee
github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00
github.com/morikuni/aec v1.1.0
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
github.com/nikolalohinski/gonja/v2 v2.7.0
github.com/nozzle/throttler v0.0.0-20180817012639-2ea982251481
github.com/oklog/ulid/v2 v2.1.1
github.com/open-policy-agent/opa v1.15.2
github.com/opencontainers/go-digest v1.0.0
github.com/opencontainers/image-spec v1.1.1
github.com/opencontainers/runtime-spec v1.3.0
github.com/opencontainers/selinux v1.13.1
github.com/openvex/discovery v0.1.1-0.20240802171711-7c54efc57553
github.com/openvex/go-vex v0.2.7
github.com/owenrumney/go-sarif/v2 v2.3.3
github.com/owenrumney/squealer v1.2.12
github.com/package-url/packageurl-go v0.1.5
github.com/pandatix/go-cvss v0.6.2
github.com/pelletier/go-toml/v2 v2.2.4
github.com/peterbourgon/diskv v2.0.1+incompatible
github.com/pjbgf/sha1cd v0.3.2
github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c
github.com/pkg/errors v0.9.1
github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
github.com/rcrowley/go-metrics v0.0.0-20250401214520-65e299d6c5c9
github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec
github.com/rivo/uniseg v0.4.7
github.com/rubenv/sql-migrate v1.8.1
github.com/russross/blackfriday/v2 v2.1.0
github.com/rust-secure-code/go-rustaudit v0.0.0-20250226111315-e20ec32e963c
github.com/sagikazarmark/locafero v0.11.0
github.com/samber/lo v1.53.0
github.com/samber/oops v1.18.1
github.com/santhosh-tekuri/jsonschema/v6 v6.0.2
github.com/sassoftware/go-rpmutils v0.4.0
github.com/sassoftware/relic v7.2.1+incompatible
github.com/secure-systems-lab/go-securesystemslib v0.10.0
github.com/sergi/go-diff v1.4.0
github.com/shibumi/go-pathspec v1.3.0
github.com/shopspring/decimal v1.4.0
github.com/sigstore/cosign/v2 v2.6.2
github.com/sigstore/protobuf-specs v0.5.0
github.com/sigstore/rekor v1.5.1
github.com/sigstore/rekor-tiles/v2 v2.0.1
github.com/sigstore/sigstore v1.10.5
github.com/sigstore/sigstore-go v1.1.4
github.com/sigstore/timestamp-authority/v2 v2.0.6
github.com/sirupsen/logrus v1.9.4
github.com/skeema/knownhosts v1.3.1
github.com/sourcegraph/conc v0.3.1-0.20240121214520-5f936abd7ae8
github.com/spdx/tools-golang v0.5.7
github.com/spf13/afero v1.15.0
github.com/spf13/cast v1.10.0
github.com/spf13/cobra v1.10.2
github.com/spf13/pflag v1.0.10
github.com/spf13/viper v1.21.0
github.com/spiffe/go-spiffe/v2 v2.6.0
github.com/stretchr/objx v0.5.3
github.com/stretchr/testify v1.11.1
github.com/subosito/gotenv v1.6.0
github.com/syndtr/goleveldb v1.0.1-0.20220721030215-126854af5e6d
github.com/tchap/go-patricia/v2 v2.3.3
github.com/tetratelabs/wazero v1.11.0
github.com/theupdateframework/go-tuf v0.7.0
github.com/theupdateframework/go-tuf/v2 v2.4.1
github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399
github.com/tonistiigi/go-csvvalue v0.0.0-20240814133006-030d3b2625d0
github.com/toqueteos/webbrowser v1.2.0
github.com/transparency-dev/formats v0.0.0-20251017110053-404c0d5b696c
github.com/transparency-dev/merkle v0.0.2
github.com/twitchtv/twirp v8.1.3+incompatible
github.com/ulikunitz/xz v0.5.15
github.com/valyala/fastjson v1.6.7
github.com/vbatts/tar-split v0.12.2
github.com/vektah/gqlparser/v2 v2.5.32
github.com/vmihailenco/msgpack/v5 v5.4.1
github.com/vmihailenco/tagparser/v2 v2.0.0
github.com/x448/float16 v0.8.4
github.com/xanzy/ssh-agent v0.3.3
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415
github.com/xeipuuv/gojsonschema v1.2.0
github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8
github.com/xlab/treeprint v1.2.0
github.com/yashtewari/glob-intersection v0.2.0
github.com/zclconf/go-cty v1.18.0
github.com/zclconf/go-cty-yaml v1.2.0
go.etcd.io/bbolt v1.4.3
go.opentelemetry.io/auto/sdk v1.2.1
go.opentelemetry.io/contrib/detectors/gcp v1.39.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.63.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.65.0
go.opentelemetry.io/otel v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.40.0
go.opentelemetry.io/otel/metric v1.43.0
go.opentelemetry.io/otel/sdk v1.43.0
go.opentelemetry.io/otel/sdk/metric v1.43.0
go.opentelemetry.io/otel/trace v1.43.0
go.opentelemetry.io/proto/otlp v1.9.0
go.uber.org/multierr v1.11.0
go.uber.org/zap v1.27.1
go.yaml.in/yaml/v2 v2.4.3
go.yaml.in/yaml/v3 v3.0.4
go.yaml.in/yaml/v4 v4.0.0-rc.3
golang.org/x/crypto v0.50.0
golang.org/x/exp v0.0.0-20251023183803-a4bb9ffd2546
golang.org/x/mod v0.34.0
golang.org/x/net v0.53.0
golang.org/x/oauth2 v0.36.0
golang.org/x/sync v0.20.0
golang.org/x/sys v0.43.0
golang.org/x/term v0.42.0
golang.org/x/text v0.36.0
golang.org/x/time v0.15.0
golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da
google.golang.org/api v0.272.0
google.golang.org/genproto v0.0.0-20260316180232-0b37fe3546d5
google.golang.org/genproto/googleapis/api v0.0.0-20260316180232-0b37fe3546d5
google.golang.org/genproto/googleapis/rpc v0.0.0-20260316180232-0b37fe3546d5
google.golang.org/grpc v1.79.3
google.golang.org/protobuf v1.36.11
gopkg.in/evanphx/json-patch.v4 v4.13.0
gopkg.in/inf.v0 v0.9.1
gopkg.in/warnings.v0 v0.1.2
gopkg.in/yaml.v3 v3.0.1
helm.sh/helm/v3 v3.20.2
k8s.io/api v0.35.3
k8s.io/apiextensions-apiserver v0.35.1
k8s.io/apimachinery v0.35.3
k8s.io/apiserver v0.35.1
k8s.io/cli-runtime v0.35.1
k8s.io/client-go v0.35.1
k8s.io/component-base v0.35.1
k8s.io/klog/v2 v2.130.1
k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912
k8s.io/kubectl v0.35.1
k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
modernc.org/libc v1.70.0
modernc.org/mathutil v1.7.1
modernc.org/memory v1.11.0
modernc.org/sqlite v1.48.2
mvdan.cc/sh/v3 v3.12.0
oras.land/oras-go/v2 v2.6.0
sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730
sigs.k8s.io/kustomize/api v0.20.1
sigs.k8s.io/kustomize/kyaml v0.20.1
sigs.k8s.io/randfill v1.0.0
sigs.k8s.io/structured-merge-diff/v6 v6.3.0
sigs.k8s.io/yaml v1.6.0

usr/local/bin/trivy.woodpecker:

Name Version
code.thinkaboutit.tech/pandora/trivy.woodpecker 1.2.3-SNAPSHOT-0978e9a
stdlib v1.26.2
code.thinkaboutit.tech/pandora/woodpecker-utils.gopack v1.2.0
Vulnerabilities
This issue list updates about vulnerabilites that are detected by [trivy.woodpecker](https://code.thinkaboutit.tech/pandora/trivy.woodpecker) plugin. ## Summary | Severity | Count | | -------- | ----- | | CRITICAL | 0 | | HIGH | 0 | | MEDIUM | 0 | | LOW | 0 | | UNKNOWN | 0 | ## Detected packages and vulnerabilites <details><summary>Packages</summary> **code.thinkaboutit.tech/pandora/trivy.woodpecker:latest (debian 13.4)**: | Name | Version | | ---- | ------- | | base-files | 13.8+deb13u4 | | media-types | 13.0.0 | | netbase | 6.5 | | tzdata | 2026a | | tzdata-legacy | 2026a | **go.mod**: | Name | Version | | ---- | ------- | | code.thinkaboutit.tech/pandora/trivy.woodpecker | | | code.thinkaboutit.tech/pandora/woodpecker-utils.gopack | v1.2.0 | | github.com/davecgh/go-spew | v1.1.1 | | github.com/pmezard/go-difflib | v1.0.0 | | github.com/stretchr/testify | v1.11.1 | | gopkg.in/yaml.v3 | v3.0.1 | **usr/local/bin/trivy**: | Name | Version | | ---- | ------- | | github.com/aquasecurity/trivy | v0.70.0 | | stdlib | v1.25.9 | | cel.dev/expr | v0.25.1 | | cloud.google.com/go | v0.123.0 | | cloud.google.com/go/auth | v0.18.2 | | cloud.google.com/go/auth/oauth2adapt | v0.2.8 | | cloud.google.com/go/compute/metadata | v0.9.0 | | cloud.google.com/go/iam | v1.5.3 | | cloud.google.com/go/monitoring | v1.24.3 | | cloud.google.com/go/storage | v1.61.3 | | dario.cat/mergo | v1.0.2 | | github.com/Azure/azure-sdk-for-go/sdk/azcore | v1.21.0 | | github.com/Azure/azure-sdk-for-go/sdk/azidentity | v1.13.1 | | github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry | v0.2.3 | | github.com/Azure/azure-sdk-for-go/sdk/internal | v1.11.2 | | github.com/AzureAD/microsoft-authentication-library-for-go | v1.6.0 | | github.com/BurntSushi/toml | v1.6.0 | | github.com/CycloneDX/cyclonedx-go | v0.10.0 | | github.com/GoogleCloudPlatform/docker-credential-gcr/v2 | v2.1.32 | | github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp | v1.30.0 | | github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric | v0.55.0 | | github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping | v0.55.0 | | github.com/Intevation/gval | v1.3.0 | | github.com/Intevation/jsonpath | v0.2.1 | | github.com/MakeNowJust/heredoc | v1.0.0 | | github.com/Masterminds/goutils | v1.1.1 | | github.com/Masterminds/semver/v3 | v3.4.0 | | github.com/Masterminds/sprig/v3 | v3.3.0 | | github.com/Masterminds/squirrel | v1.5.4 | | github.com/NYTimes/gziphandler | v1.1.1 | | github.com/ProtonMail/go-crypto | v1.3.0 | | github.com/VividCortex/ewma | v1.2.0 | | github.com/agext/levenshtein | v1.2.3 | | github.com/agnivade/levenshtein | v1.2.1 | | github.com/alecthomas/chroma | v0.10.0 | | github.com/anchore/go-struct-converter | v0.1.0 | | github.com/apparentlymart/go-cidr | v1.1.0 | | github.com/apparentlymart/go-textseg/v15 | v15.0.0 | | github.com/aquasecurity/go-gem-version | v0.0.0-20201115065557-8eed6fe000ce | | github.com/aquasecurity/go-npm-version | v0.0.2 | | github.com/aquasecurity/go-pep440-version | v0.0.1 | | github.com/aquasecurity/go-version | v0.0.1 | | github.com/aquasecurity/iamgo | v0.0.10 | | github.com/aquasecurity/jfather | v0.0.8 | | github.com/aquasecurity/table | v1.11.0 | | github.com/aquasecurity/tml | v0.6.1 | | github.com/aquasecurity/trivy-checks | v1.12.2-0.20251219190323-79d27547baf5 | | github.com/aquasecurity/trivy-db | v0.0.0-20251222105351-a833f47f8f0d | | github.com/aquasecurity/trivy-java-db | v0.0.0-20240109071736-184bd7481d48 | | github.com/aquasecurity/trivy-kubernetes | v0.9.1 | | github.com/asaskevich/govalidator | v0.0.0-20230301143203-a9d515a09cc2 | | github.com/aws/aws-sdk-go-v2 | v1.41.5 | | github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream | v1.7.8 | | github.com/aws/aws-sdk-go-v2/config | v1.32.12 | | github.com/aws/aws-sdk-go-v2/credentials | v1.19.12 | | github.com/aws/aws-sdk-go-v2/feature/ec2/imds | v1.18.20 | | github.com/aws/aws-sdk-go-v2/internal/configsources | v1.4.21 | | github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 | v2.7.21 | | github.com/aws/aws-sdk-go-v2/internal/ini | v1.8.6 | | github.com/aws/aws-sdk-go-v2/internal/v4a | v1.4.22 | | github.com/aws/aws-sdk-go-v2/service/ebs | v1.22.1 | | github.com/aws/aws-sdk-go-v2/service/ec2 | v1.290.0 | | github.com/aws/aws-sdk-go-v2/service/ecr | v1.55.2 | | github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding | v1.13.7 | | github.com/aws/aws-sdk-go-v2/service/internal/checksum | v1.9.13 | | github.com/aws/aws-sdk-go-v2/service/internal/presigned-url | v1.13.21 | | github.com/aws/aws-sdk-go-v2/service/internal/s3shared | v1.19.21 | | github.com/aws/aws-sdk-go-v2/service/s3 | v1.97.3 | | github.com/aws/aws-sdk-go-v2/service/signin | v1.0.8 | | github.com/aws/aws-sdk-go-v2/service/sso | v1.30.13 | | github.com/aws/aws-sdk-go-v2/service/ssooidc | v1.35.17 | | github.com/aws/aws-sdk-go-v2/service/sts | v1.41.9 | | github.com/aws/smithy-go | v1.24.2 | | github.com/bgentry/go-netrc | v0.0.0-20140422174119-9fd32a8b3d3d | | github.com/bitnami/go-version | v0.0.0-20231130084017-bb00604d650c | | github.com/blang/semver | v3.5.1+incompatible | | github.com/blang/semver/v4 | v4.0.0 | | github.com/bmatcuk/doublestar/v4 | v4.10.0 | | github.com/briandowns/spinner | v1.23.0 | | github.com/cenkalti/backoff/v4 | v4.3.0 | | github.com/cenkalti/backoff/v5 | v5.0.3 | | github.com/cespare/xxhash/v2 | v2.3.0 | | github.com/chai2010/gettext-go | v1.0.2 | | github.com/cheggaaa/pb/v3 | v3.1.7 | | github.com/cloudflare/circl | v1.6.3 | | github.com/cncf/xds/go | v0.0.0-20251210132809-ee656c7534f5 | | github.com/containerd/containerd | v1.7.30 | | github.com/containerd/containerd/api | v1.10.0 | | github.com/containerd/containerd/v2 | v2.2.2 | | github.com/containerd/continuity | v0.4.5 | | github.com/containerd/errdefs | v1.0.0 | | github.com/containerd/errdefs/pkg | v0.3.0 | | github.com/containerd/fifo | v1.1.0 | | github.com/containerd/log | v0.1.0 | | github.com/containerd/platforms | v1.0.0-rc.4 | | github.com/containerd/plugin | v1.0.0 | | github.com/containerd/stargz-snapshotter/estargz | v0.18.2 | | github.com/containerd/ttrpc | v1.2.8 | | github.com/containerd/typeurl/v2 | v2.2.3 | | github.com/coreos/go-oidc/v3 | v3.17.0 | | github.com/cyberphone/json-canonicalization | v0.0.0-20241213102144-19d51d7fe467 | | github.com/cyphar/filepath-securejoin | v0.6.1 | | github.com/davecgh/go-spew | v1.1.2-0.20180830191138-d8f796af33cc | | github.com/dgryski/go-rendezvous | v0.0.0-20200823014737-9f7001d12a5f | | github.com/digitorus/pkcs7 | v0.0.0-20230818184609-3a137a874352 | | github.com/digitorus/timestamp | v0.0.0-20231217203849-220c5c2851b7 | | github.com/distribution/reference | v0.6.0 | | github.com/dlclark/regexp2 | v1.11.0 | | github.com/docker/cli | v29.4.0+incompatible | | github.com/docker/distribution | v2.8.3+incompatible | | github.com/docker/docker-credential-helpers | v0.9.5 | | github.com/docker/go-connections | v0.6.0 | | github.com/docker/go-units | v0.5.0 | | github.com/dsnet/compress | v0.0.2-0.20230904184137-39efe44ab707 | | github.com/dustin/go-humanize | v1.0.1 | | github.com/emicklei/go-restful/v3 | v3.13.0 | | github.com/emirpasic/gods | v1.18.1 | | github.com/envoyproxy/go-control-plane/envoy | v1.36.0 | | github.com/envoyproxy/protoc-gen-validate | v1.3.0 | | github.com/evanphx/json-patch | v5.9.11+incompatible | | github.com/exponent-io/jsonpath | v0.0.0-20210407135951-1de76d718b3f | | github.com/fatih/color | v1.19.0 | | github.com/felixge/httpsnoop | v1.0.4 | | github.com/fsnotify/fsnotify | v1.9.0 | | github.com/fvbommel/sortorder | v1.1.0 | | github.com/fxamacker/cbor/v2 | v2.9.0 | | github.com/go-chi/chi/v5 | v5.2.5 | | github.com/go-errors/errors | v1.4.2 | | github.com/go-git/gcfg | v1.5.1-0.20230307220236-3a3c6141e376 | | github.com/go-git/go-billy/v5 | v5.8.0 | | github.com/go-git/go-git/v5 | v5.17.2 | | github.com/go-gorp/gorp/v3 | v3.1.0 | | github.com/go-ini/ini | v1.67.0 | | github.com/go-jose/go-jose/v4 | v4.1.4 | | github.com/go-logr/logr | v1.4.3 | | github.com/go-logr/stdr | v1.2.2 | | github.com/go-openapi/analysis | v0.24.3 | | github.com/go-openapi/errors | v0.22.7 | | github.com/go-openapi/jsonpointer | v0.22.5 | | github.com/go-openapi/jsonreference | v0.21.5 | | github.com/go-openapi/loads | v0.23.3 | | github.com/go-openapi/runtime | v0.29.3 | | github.com/go-openapi/spec | v0.22.4 | | github.com/go-openapi/strfmt | v0.26.1 | | github.com/go-openapi/swag | v0.25.5 | | github.com/go-openapi/swag/cmdutils | v0.25.5 | | github.com/go-openapi/swag/conv | v0.25.5 | | github.com/go-openapi/swag/fileutils | v0.25.5 | | github.com/go-openapi/swag/jsonname | v0.25.5 | | github.com/go-openapi/swag/jsonutils | v0.25.5 | | github.com/go-openapi/swag/loading | v0.25.5 | | github.com/go-openapi/swag/mangling | v0.25.5 | | github.com/go-openapi/swag/netutils | v0.25.5 | | github.com/go-openapi/swag/stringutils | v0.25.5 | | github.com/go-openapi/swag/typeutils | v0.25.5 | | github.com/go-openapi/swag/yamlutils | v0.25.5 | | github.com/go-openapi/validate | v0.25.2 | | github.com/go-redis/redis/v8 | v8.11.5 | | github.com/go-viper/mapstructure/v2 | v2.5.0 | | github.com/gobwas/glob | v0.2.3 | | github.com/gocsaf/csaf/v3 | v3.5.1 | | github.com/gogo/protobuf | v1.3.2 | | github.com/golang-jwt/jwt/v5 | v5.3.1 | | github.com/golang/groupcache | v0.0.0-20241129210726-2c02b8208cf8 | | github.com/golang/snappy | v0.0.4 | | github.com/google/btree | v1.1.3 | | github.com/google/certificate-transparency-go | v1.3.2 | | github.com/google/gnostic-models | v0.7.0 | | github.com/google/go-cmp | v0.7.0 | | github.com/google/go-containerregistry | v0.21.2 | | github.com/google/go-github/v62 | v62.0.0 | | github.com/google/go-querystring | v1.1.0 | | github.com/google/licenseclassifier/v2 | v2.0.0 | | github.com/google/s2a-go | v0.1.9 | | github.com/google/uuid | v1.6.0 | | github.com/googleapis/enterprise-certificate-proxy | v0.3.14 | | github.com/googleapis/gax-go/v2 | v2.19.0 | | github.com/gosuri/uitable | v0.0.4 | | github.com/gregjones/httpcache | v0.0.0-20190611155906-901d90724c79 | | github.com/grpc-ecosystem/grpc-gateway/v2 | v2.27.7 | | github.com/hashicorp/aws-sdk-go-base/v2 | v2.0.0-beta.72 | | github.com/hashicorp/errwrap | v1.1.0 | | github.com/hashicorp/go-cleanhttp | v0.5.2 | | github.com/hashicorp/go-getter | v1.8.6 | | github.com/hashicorp/go-multierror | v1.1.1 | | github.com/hashicorp/go-retryablehttp | v0.7.8 | | github.com/hashicorp/go-uuid | v1.0.3 | | github.com/hashicorp/go-version | v1.9.0 | | github.com/hashicorp/golang-lru/v2 | v2.0.7 | | github.com/hashicorp/hcl/v2 | v2.24.0 | | github.com/huandu/xstrings | v1.5.0 | | github.com/in-toto/attestation | v1.1.2 | | github.com/in-toto/in-toto-golang | v0.10.0 | | github.com/jbenet/go-context | v0.0.0-20150711004518-d14ea06fba99 | | github.com/jedisct1/go-minisign | v0.0.0-20230811132847-661be99b8267 | | github.com/jmoiron/sqlx | v1.4.0 | | github.com/josephburnett/jd/v2 | v2.3.0 | | github.com/json-iterator/go | v1.1.12 | | github.com/kevinburke/ssh_config | v1.2.0 | | github.com/klauspost/compress | v1.18.5 | | github.com/knqyf263/go-apk-version | v0.0.0-20200609155635-041fdbb8563f | | github.com/knqyf263/go-deb-version | v0.0.0-20241115132648-6f4aee6ccd23 | | github.com/knqyf263/go-rpm-version | v0.0.0-20220614171824-631e686d1075 | | github.com/knqyf263/go-rpmdb | v0.1.1 | | github.com/knqyf263/nested | v0.0.1 | | github.com/kylelemons/godebug | v1.1.0 | | github.com/lann/builder | v0.0.0-20180802200727-47ae307949d0 | | github.com/lann/ps | v0.0.0-20150810152359-62de8c46ede0 | | github.com/lestrrat-go/blackmagic | v1.0.4 | | github.com/lestrrat-go/dsig | v1.0.0 | | github.com/lestrrat-go/httpcc | v1.0.1 | | github.com/lestrrat-go/httprc/v3 | v3.0.2 | | github.com/lestrrat-go/jwx/v3 | v3.0.13 | | github.com/lestrrat-go/option/v2 | v2.0.0 | | github.com/letsencrypt/boulder | v0.20260223.0 | | github.com/lib/pq | v1.10.9 | | github.com/liggitt/tabwriter | v0.0.0-20181228230101-89fcab3d43de | | github.com/lunixbochs/struc | v0.0.0-20200707160740-784aaebc1d40 | | github.com/masahiro331/go-disk | v0.0.0-20240625071113-56c933208fee | | github.com/masahiro331/go-ebs-file | v0.0.0-20240917043618-e6d2bea5c32e | | github.com/masahiro331/go-ext4-filesystem | v0.0.0-20240620024024-ca14e6327bbd | | github.com/masahiro331/go-mvn-version | v0.0.0-20250131095131-f4974fa13b8a | | github.com/masahiro331/go-vmdk-parser | v0.0.0-20221225061455-612096e4bbbd | | github.com/masahiro331/go-xfs-filesystem | v0.0.0-20231205045356-1b22259a6c44 | | github.com/mattn/go-colorable | v0.1.14 | | github.com/mattn/go-isatty | v0.0.20 | | github.com/mattn/go-runewidth | v0.0.16 | | github.com/mattn/go-shellwords | v1.0.12 | | github.com/mitchellh/copystructure | v1.2.0 | | github.com/mitchellh/go-homedir | v1.1.0 | | github.com/mitchellh/go-wordwrap | v1.0.1 | | github.com/mitchellh/hashstructure/v2 | v2.0.2 | | github.com/mitchellh/mapstructure | v1.5.1-0.20231216201459-8508981c8b6c | | github.com/mitchellh/reflectwalk | v1.0.2 | | github.com/moby/buildkit | v0.29.0 | | github.com/moby/docker-image-spec | v1.3.1 | | github.com/moby/locker | v1.0.1 | | github.com/moby/moby/api | v1.54.1 | | github.com/moby/moby/client | v0.4.0 | | github.com/moby/sys/atomicwriter | v0.1.0 | | github.com/moby/sys/mountinfo | v0.7.2 | | github.com/moby/sys/sequential | v0.6.0 | | github.com/moby/sys/signal | v0.7.1 | | github.com/moby/sys/user | v0.4.0 | | github.com/moby/sys/userns | v0.1.0 | | github.com/moby/term | v0.5.2 | | github.com/modern-go/concurrent | v0.0.0-20180306012644-bacd9c7ef1dd | | github.com/modern-go/reflect2 | v1.0.3-0.20250322232337-35a7c28c31ee | | github.com/monochromegane/go-gitignore | v0.0.0-20200626010858-205db1a8cc00 | | github.com/morikuni/aec | v1.1.0 | | github.com/munnerz/goautoneg | v0.0.0-20191010083416-a7dc8b61c822 | | github.com/nikolalohinski/gonja/v2 | v2.7.0 | | github.com/nozzle/throttler | v0.0.0-20180817012639-2ea982251481 | | github.com/oklog/ulid/v2 | v2.1.1 | | github.com/open-policy-agent/opa | v1.15.2 | | github.com/opencontainers/go-digest | v1.0.0 | | github.com/opencontainers/image-spec | v1.1.1 | | github.com/opencontainers/runtime-spec | v1.3.0 | | github.com/opencontainers/selinux | v1.13.1 | | github.com/openvex/discovery | v0.1.1-0.20240802171711-7c54efc57553 | | github.com/openvex/go-vex | v0.2.7 | | github.com/owenrumney/go-sarif/v2 | v2.3.3 | | github.com/owenrumney/squealer | v1.2.12 | | github.com/package-url/packageurl-go | v0.1.5 | | github.com/pandatix/go-cvss | v0.6.2 | | github.com/pelletier/go-toml/v2 | v2.2.4 | | github.com/peterbourgon/diskv | v2.0.1+incompatible | | github.com/pjbgf/sha1cd | v0.3.2 | | github.com/pkg/browser | v0.0.0-20240102092130-5ac0b6a4141c | | github.com/pkg/errors | v0.9.1 | | github.com/planetscale/vtprotobuf | v0.6.1-0.20240319094008-0393e58bdf10 | | github.com/pmezard/go-difflib | v1.0.1-0.20181226105442-5d4384ee4fb2 | | github.com/rcrowley/go-metrics | v0.0.0-20250401214520-65e299d6c5c9 | | github.com/remyoudompheng/bigfft | v0.0.0-20230129092748-24d4a6f8daec | | github.com/rivo/uniseg | v0.4.7 | | github.com/rubenv/sql-migrate | v1.8.1 | | github.com/russross/blackfriday/v2 | v2.1.0 | | github.com/rust-secure-code/go-rustaudit | v0.0.0-20250226111315-e20ec32e963c | | github.com/sagikazarmark/locafero | v0.11.0 | | github.com/samber/lo | v1.53.0 | | github.com/samber/oops | v1.18.1 | | github.com/santhosh-tekuri/jsonschema/v6 | v6.0.2 | | github.com/sassoftware/go-rpmutils | v0.4.0 | | github.com/sassoftware/relic | v7.2.1+incompatible | | github.com/secure-systems-lab/go-securesystemslib | v0.10.0 | | github.com/sergi/go-diff | v1.4.0 | | github.com/shibumi/go-pathspec | v1.3.0 | | github.com/shopspring/decimal | v1.4.0 | | github.com/sigstore/cosign/v2 | v2.6.2 | | github.com/sigstore/protobuf-specs | v0.5.0 | | github.com/sigstore/rekor | v1.5.1 | | github.com/sigstore/rekor-tiles/v2 | v2.0.1 | | github.com/sigstore/sigstore | v1.10.5 | | github.com/sigstore/sigstore-go | v1.1.4 | | github.com/sigstore/timestamp-authority/v2 | v2.0.6 | | github.com/sirupsen/logrus | v1.9.4 | | github.com/skeema/knownhosts | v1.3.1 | | github.com/sourcegraph/conc | v0.3.1-0.20240121214520-5f936abd7ae8 | | github.com/spdx/tools-golang | v0.5.7 | | github.com/spf13/afero | v1.15.0 | | github.com/spf13/cast | v1.10.0 | | github.com/spf13/cobra | v1.10.2 | | github.com/spf13/pflag | v1.0.10 | | github.com/spf13/viper | v1.21.0 | | github.com/spiffe/go-spiffe/v2 | v2.6.0 | | github.com/stretchr/objx | v0.5.3 | | github.com/stretchr/testify | v1.11.1 | | github.com/subosito/gotenv | v1.6.0 | | github.com/syndtr/goleveldb | v1.0.1-0.20220721030215-126854af5e6d | | github.com/tchap/go-patricia/v2 | v2.3.3 | | github.com/tetratelabs/wazero | v1.11.0 | | github.com/theupdateframework/go-tuf | v0.7.0 | | github.com/theupdateframework/go-tuf/v2 | v2.4.1 | | github.com/titanous/rocacheck | v0.0.0-20171023193734-afe73141d399 | | github.com/tonistiigi/go-csvvalue | v0.0.0-20240814133006-030d3b2625d0 | | github.com/toqueteos/webbrowser | v1.2.0 | | github.com/transparency-dev/formats | v0.0.0-20251017110053-404c0d5b696c | | github.com/transparency-dev/merkle | v0.0.2 | | github.com/twitchtv/twirp | v8.1.3+incompatible | | github.com/ulikunitz/xz | v0.5.15 | | github.com/valyala/fastjson | v1.6.7 | | github.com/vbatts/tar-split | v0.12.2 | | github.com/vektah/gqlparser/v2 | v2.5.32 | | github.com/vmihailenco/msgpack/v5 | v5.4.1 | | github.com/vmihailenco/tagparser/v2 | v2.0.0 | | github.com/x448/float16 | v0.8.4 | | github.com/xanzy/ssh-agent | v0.3.3 | | github.com/xeipuuv/gojsonpointer | v0.0.0-20190905194746-02993c407bfb | | github.com/xeipuuv/gojsonreference | v0.0.0-20180127040603-bd5ef7bd5415 | | github.com/xeipuuv/gojsonschema | v1.2.0 | | github.com/xi2/xz | v0.0.0-20171230120015-48954b6210f8 | | github.com/xlab/treeprint | v1.2.0 | | github.com/yashtewari/glob-intersection | v0.2.0 | | github.com/zclconf/go-cty | v1.18.0 | | github.com/zclconf/go-cty-yaml | v1.2.0 | | go.etcd.io/bbolt | v1.4.3 | | go.opentelemetry.io/auto/sdk | v1.2.1 | | go.opentelemetry.io/contrib/detectors/gcp | v1.39.0 | | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | v0.63.0 | | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | v0.65.0 | | go.opentelemetry.io/otel | v1.43.0 | | go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc | v1.40.0 | | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.40.0 | | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.40.0 | | go.opentelemetry.io/otel/metric | v1.43.0 | | go.opentelemetry.io/otel/sdk | v1.43.0 | | go.opentelemetry.io/otel/sdk/metric | v1.43.0 | | go.opentelemetry.io/otel/trace | v1.43.0 | | go.opentelemetry.io/proto/otlp | v1.9.0 | | go.uber.org/multierr | v1.11.0 | | go.uber.org/zap | v1.27.1 | | go.yaml.in/yaml/v2 | v2.4.3 | | go.yaml.in/yaml/v3 | v3.0.4 | | go.yaml.in/yaml/v4 | v4.0.0-rc.3 | | golang.org/x/crypto | v0.50.0 | | golang.org/x/exp | v0.0.0-20251023183803-a4bb9ffd2546 | | golang.org/x/mod | v0.34.0 | | golang.org/x/net | v0.53.0 | | golang.org/x/oauth2 | v0.36.0 | | golang.org/x/sync | v0.20.0 | | golang.org/x/sys | v0.43.0 | | golang.org/x/term | v0.42.0 | | golang.org/x/text | v0.36.0 | | golang.org/x/time | v0.15.0 | | golang.org/x/xerrors | v0.0.0-20240903120638-7835f813f4da | | google.golang.org/api | v0.272.0 | | google.golang.org/genproto | v0.0.0-20260316180232-0b37fe3546d5 | | google.golang.org/genproto/googleapis/api | v0.0.0-20260316180232-0b37fe3546d5 | | google.golang.org/genproto/googleapis/rpc | v0.0.0-20260316180232-0b37fe3546d5 | | google.golang.org/grpc | v1.79.3 | | google.golang.org/protobuf | v1.36.11 | | gopkg.in/evanphx/json-patch.v4 | v4.13.0 | | gopkg.in/inf.v0 | v0.9.1 | | gopkg.in/warnings.v0 | v0.1.2 | | gopkg.in/yaml.v3 | v3.0.1 | | helm.sh/helm/v3 | v3.20.2 | | k8s.io/api | v0.35.3 | | k8s.io/apiextensions-apiserver | v0.35.1 | | k8s.io/apimachinery | v0.35.3 | | k8s.io/apiserver | v0.35.1 | | k8s.io/cli-runtime | v0.35.1 | | k8s.io/client-go | v0.35.1 | | k8s.io/component-base | v0.35.1 | | k8s.io/klog/v2 | v2.130.1 | | k8s.io/kube-openapi | v0.0.0-20250910181357-589584f1c912 | | k8s.io/kubectl | v0.35.1 | | k8s.io/utils | v0.0.0-20251002143259-bc988d571ff4 | | modernc.org/libc | v1.70.0 | | modernc.org/mathutil | v1.7.1 | | modernc.org/memory | v1.11.0 | | modernc.org/sqlite | v1.48.2 | | mvdan.cc/sh/v3 | v3.12.0 | | oras.land/oras-go/v2 | v2.6.0 | | sigs.k8s.io/json | v0.0.0-20250730193827-2d320260d730 | | sigs.k8s.io/kustomize/api | v0.20.1 | | sigs.k8s.io/kustomize/kyaml | v0.20.1 | | sigs.k8s.io/randfill | v1.0.0 | | sigs.k8s.io/structured-merge-diff/v6 | v6.3.0 | | sigs.k8s.io/yaml | v1.6.0 | **usr/local/bin/trivy.woodpecker**: | Name | Version | | ---- | ------- | | code.thinkaboutit.tech/pandora/trivy.woodpecker | 1.2.3-SNAPSHOT-0978e9a | | stdlib | v1.26.2 | | code.thinkaboutit.tech/pandora/woodpecker-utils.gopack | v1.2.0 | </details> <details><summary>Vulnerabilities</summary> </details>
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
1.2.3
1.2.2
1.2.1
1.2.0
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pandora/trivy.woodpecker#10
No description provided.